Author Topic: Please help Avast found this trojan file cp1041.nls (Read 62672 times)

jbalcorn · « **Reply #15 on:** January 17, 2008, 01:11:01 AM »

C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\mom_female\blue_legs.pal
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\mom_female\legs.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\mom_female\red.pal
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\mom_female\red_baby.pal
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\mom_female\red_legs.pal
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\young_female\anim.anm
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\young_female\anim.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\young_female\blue.pal
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\young_female\blue_legs.pal
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\young_female\legs.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\young_female\red.pal
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\young_female\red_legs.pal
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\flo\idle.anm
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\flo\idle.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\flo\lower.anm
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\flo\lower.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\flo\upper.anm
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\flo\upper.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\fonts\mercurius.mvec
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\bench.anm
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\bench.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\blue_highchairbaby.pal
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\chair.anm
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\chair.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\dirt2top.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\dirt4top.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\dishcart.anm
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\dishcart.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\green_highchairbaby.pal
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\highchair_prop_a.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\highchair_prop_b.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\highchairbaby.anm
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\highchairbaby.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\luxury_bench.anm
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\luxury_bench.png

jbalcorn · « **Reply #16 on:** January 17, 2008, 01:11:25 AM »

C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\mop_station_a.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\mop_station_b.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\mop_station_c.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\podium.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\podium_heart.anm
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\podium_heart.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\purple_highchairbaby.pal
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\radio.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\red_highchairbaby.pal
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\spill.anm
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\spill.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\stereo.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\ticketstation.anm
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\ticketstation.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\yellow_highchairbaby.pal
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\help\family.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\help\help_dividerline.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\help\help1_colormatch1.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\help\help1_colormatch2.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\help\help1_noise.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\help\help1_score.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\help\help2_cleardishes.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\help\help2_givecheck.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\help\help2_pickupfood.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\help\help2_servefood.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\help\help2_takeorder.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\hiscore\local-hs-bb.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\hiscore\p1icon.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\layouts\career_1_1.bin
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\layouts\career_1_2.bin
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\layouts\career_1_3.bin
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\layouts\career_1_4.bin
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\layouts\career_1_5.bin
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\layouts\career_1_6.bin
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\layouts\endless_1_1.bin
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\layouts\endless_1_1_a.bin
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\layouts\endless_1_1_b.bin
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\layouts\endless_1_1_c.bin
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\playfirstlogo.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\background.jpg
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\chairs\blue.pal
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\chairs\green.anm
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\chairs\green.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\chairs\grey.pal
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\chairs\red.pal
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\food\cup1.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\food\food.anm
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\food\food.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\frames\2_0.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\frames\2_1.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\furniture\drinkstation1_a.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\furniture\drinkstation1_b.png

jbalcorn · « **Reply #17 on:** January 17, 2008, 01:11:54 AM »

C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\furniture\drinkstation1_c.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\people\cook.anm
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\people\cook.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\props\cup_prop1.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\tables\2top.anm
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\tables\2top.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\tables\4top.anm
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\tables\4top.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\upgrade_icons\cafe_icon_2_0.jpg
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\upgrade_icons\cafe_icon_2_1.jpg
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\upgrades.xml
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\tableshadow.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\careerupgrade.lua
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\choosedifficulty.lua
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\closeconfirm.lua
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\entername.lua
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\game.lua
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\getmoregames.lua
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\help1.lua
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\help2.lua
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\hiscore.lua
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\hiscoreinfo.lua
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\hiscoresubmit.lua
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\levelintro.lua
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\levelover.lua
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\loading.lua
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\mainloop.lua
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\mainmenu.lua
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\ok.lua
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\pause.lua
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\style.lua
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\upgrade.lua
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\upsell.lua
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\yesno.lua
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\splash\aol_logo.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\splash\playfirst_logo.jpg
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\strings.xml
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\angersmoke.anm
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\angersmoke.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\bubbles\request_bubble.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\bubbles\request_mop.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\bubbles\request_rejectmeal.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\chairflags.anm
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\chairflags.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\check.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\checkmark.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\closed.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\coinflip.anm
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\coinflip.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\decor_lines.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\dollar.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\expert.png

jbalcorn · « **Reply #18 on:** January 17, 2008, 01:12:17 AM »

C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\foodpoof.anm
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\foodpoof.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\heartgrow.anm
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\heartgrow.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\jar.anm
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\jar.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\lives_icon.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\noisering.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\notes\music_boost_a.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\notes\music_boost_b.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\notes\music_boost_c.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\notes\music_boost_d.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\notes\music_boost_e.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\notes\music_boost_f.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\tablenumber_a.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\tablenumber_b.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\traynumber.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\tutorialarrow.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\tutorialbox.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\ui_base.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\ui_hand.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\ui_timer_off.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\ui_timer_on.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgradeanim.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_bench_a.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_bench_b.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_bench_c.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_drink_station1_a.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_drink_station1_b.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_drink_station1_c.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_luxury_bench_a.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_luxury_bench_b.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_luxury_bench_c.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_oven_a.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_oven_b.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_oven_c.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_podium_a.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_podium_b.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_podium_c.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_powerbars_a.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_powerbars_b.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_powerbars_c.png

jbalcorn · « **Reply #19 on:** January 17, 2008, 01:12:43 AM »

C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_radio_a.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_radio_b.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_radio_c.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_stereo_a.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_stereo_b.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_stereo_c.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_table_a.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_table_b.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_table_c.png
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\upsell\dd1.jpg
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\upsell\dd2.jpg
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\upsell\dd3.jpg
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\upsell\dd4.jpg
C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\dinerdash2.exe
C:\WINDOWS\system32\bszip.dll
C:\WINDOWS\system32\bund1
C:\WINDOWS\system32\bund1\temp.txt
C:\WINDOWS\system32\FTPx.dll
C:\WINDOWS\system32\RunOnce1.t__
C:\WINDOWS\system32\RunOnce1.tm_
C:\WINDOWS\system32\RunOnce2.t__
C:\WINDOWS\system32\RunOnce2.tm_
D:\Autorun.inf

.
((((((((((((((((((((((((( Files Created from 2007-12-17 to 2008-01-17 )))))))))))))))))))))))))))))))
.

2008-01-16 17:38 . 2000-08-31 08:00   51,200   --a------   C:\WINDOWS\NirCmd.exe
2008-01-16 16:13 . 2008-01-16 16:13   <DIR>   d--------   C:\Program Files\IObit
2008-01-15 11:34 . 2008-01-15 11:34   <DIR>   d--------   C:\Program Files\Viewpoint
2008-01-14 22:24 . 2008-01-14 22:24   290   --a------   C:\WINDOWS\_delis43.ini
2008-01-14 22:19 . 2008-01-14 22:27   <DIR>   d--------   C:\Documents and Settings\Owner\Application Data\Symantec
2008-01-14 22:18 . 2008-01-14 22:19   <DIR>   d--------   C:\Program Files\Speed Disk
2008-01-14 22:17 . 2008-01-14 22:17   <DIR>   d--------   C:\Program Files\Symantec
2008-01-14 22:17 . 2008-01-16 16:12   <DIR>   d--------   C:\Program Files\Norton Utilities
2008-01-14 22:17 . 2008-01-14 22:27   <DIR>   d--------   C:\Program Files\Common Files\Symantec Shared
2008-01-14 22:17 . 2008-01-14 22:19   <DIR>   d--------   C:\Documents and Settings\All Users\Application Data\Symantec
2008-01-14 22:17 . 2006-08-25 10:45   617,472   --a------   C:\WINDOWS\system32\COMCTL32.NU6
2008-01-14 22:17 . 2001-06-22 06:52   120,379   --a------   C:\WINDOWS\system32\SYMEVNT.386
2008-01-14 22:17 . 2001-06-22 06:52   57,664   --a------   C:\WINDOWS\system32\drivers\SYMEVENT.SYS
2008-01-14 22:17 . 2001-06-22 06:52   36,864   --a------   C:\WINDOWS\system32\S32EVNT1.DLL
2008-01-14 22:17 . 2001-08-10 06:00   34,354   --a------   C:\WINDOWS\system32\drivers\NPDRIVER.SYS
2008-01-14 22:17 . 2001-08-10 06:00   31,744   --a------   C:\WINDOWS\system32\S32STAT.DLL
2008-01-14 22:17 . 2001-06-22 06:52   4,032   --a------   C:\WINDOWS\system32\SYMEVNT1.DLL
2008-01-14 18:46 . 2008-01-14 18:46   <DIR>   d--------   C:\Program Files\Windows Defender
2008-01-10 15:28 . 2008-01-10 15:28   <DIR>   d--------   C:\Program Files\Samsung Electronics
2008-01-10 15:13 . 2008-01-10 15:13   241,664   --a------   C:\WINDOWS\system32\GSBN.ocx
2008-01-10 15:13 . 2008-01-10 15:13   49,152   --a------   C:\WINDOWS\system32\FileupCtl.ocx
2008-01-10 15:12 . 2008-01-10 15:13   1,909,936   --a------   C:\WINDOWS\system32\FPSPR70.ocx
2008-01-10 15:12 . 2008-01-10 15:26   876   --a------   C:\WINDOWS\PSI3_Operation.ini
2008-01-05 00:04 . 2008-01-05 00:04   <DIR>   d--------   C:\Program Files\Enigma Software Group
2008-01-04 14:30 . 2008-01-04 14:30   314   --a------   C:\WINDOWS\SWWATER.INI
2008-01-03 21:56 . 2008-01-03 22:24   <DIR>   d--------   C:\_rpcs
2007-12-26 19:22 . 2007-10-09 13:42   745,547   --a------   C:\WINDOWS\system32\Magentic Screensaver.scr
2007-12-24 13:26 . 2007-12-24 13:26   <DIR>   d--------   C:\Program Files\mypoints
2007-12-24 13:26 . 2007-12-24 13:32   <DIR>   d--------   C:\Documents and Settings\Owner\Application Data\mypoints

jbalcorn · « **Reply #20 on:** January 17, 2008, 01:13:13 AM »

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-16 21:16   ---------   d-----w   C:\Program Files\XoftSpySE
2008-01-16 21:12   ---------   d-----w   C:\Program Files\Visual Rental Pro
2008-01-16 18:35   ---------   d-----w   C:\Documents and Settings\All Users\Application Data\avg7
2008-01-16 06:47   ---------   d-----w   C:\Program Files\THQ
2008-01-16 06:46   ---------   d--h--w   C:\Program Files\InstallShield Installation Information
2008-01-16 06:44   ---------   d-----w   C:\Program Files\Google
2008-01-15 02:59   ---------   d-----w   C:\Program Files\Common Files\AnswerWorks 4.0
2008-01-15 02:32   ---------   d-----w   C:\Documents and Settings\Owner\Application Data\Move Networks
2008-01-14 23:16   ---------   d-----w   C:\Documents and Settings\Owner\Application Data\AVG7
2007-12-27 00:22   ---------   d-----w   C:\Program Files\Magentic
2007-12-22 23:47   ---------   d-----w   C:\Documents and Settings\All Users\Application Data\Microsoft Help
2007-12-04 14:56   93,264   ----a-w   C:\WINDOWS\system32\drivers\aswmon.sys
2007-12-04 14:55   94,544   ----a-w   C:\WINDOWS\system32\drivers\aswmon2.sys
2007-12-04 14:53   23,152   ----a-w   C:\WINDOWS\system32\drivers\aswRdr.sys
2007-12-04 14:51   42,912   ----a-w   C:\WINDOWS\system32\drivers\aswTdi.sys
2007-12-04 14:49   26,624   ----a-w   C:\WINDOWS\system32\drivers\aavmker4.sys
2007-12-04 13:04   837,496   ----a-w   C:\WINDOWS\system32\aswBoot.exe
2007-12-04 12:54   95,608   ----a-w   C:\WINDOWS\system32\AvastSS.scr
2007-12-02 18:47   ---------   d-----w   C:\Program Files\ThreatFire
2007-12-02 16:45   ---------   d-----w   C:\Documents and Settings\LocalService\Application Data\AVG7
2007-12-02 16:45   ---------   d-----w   C:\Documents and Settings\All Users\Application Data\Grisoft
2007-12-02 16:35   ---------   d-----w   C:\Program Files\LIUtilities
2007-12-02 16:34   ---------   d-----w   C:\Documents and Settings\Owner\Application Data\GetRightToGo
2007-12-02 16:28   ---------   d-----w   C:\Documents and Settings\All Users\Application Data\PC Tools
2007-11-07 09:26   721,920   ----a-w   C:\WINDOWS\system32\lsasrv.dll
2007-10-29 22:35   1,287,680   ----a-w   C:\WINDOWS\system32\quartz.dll
2007-10-27 22:39   228,864   ----a-w   C:\WINDOWS\system32\wmasf.dll
2007-08-17 13:49   1,776   ----a-w   C:\Documents and Settings\Owner\Application Data\wklnhst.dat
.

jbalcorn · « **Reply #21 on:** January 17, 2008, 01:13:40 AM »

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A057A204-BACC-4D26-CEC4-75A487FD6484}]
2007-10-02 15:31 1909248 --a------ C:\PROGRA~1\mypoints\mypoints.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{327C2873-E90D-4C37-AA9D-10AC9BABA46C}
{2318C2B1-4965-11D4-9B18-009027A5CD4F}
{EF99BD32-C1FB-11D2-892F-0090271D4F88}
{A057A204-BACC-4D26-CEC4-75A487FD6484}

[HKEY_CLASSES_ROOT\clsid\{a057a204-bacc-4d26-cec4-75a487fd6484}]
[HKEY_CLASSES_ROOT\mypoints.MYPOINTS]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{A057A204-BACC-4D26-CEC4-75A487FD6484}"= C:\PROGRA~1\mypoints\mypoints.dll [2007-10-02 15:31 1909248]

[HKEY_CLASSES_ROOT\clsid\{a057a204-bacc-4d26-cec4-75a487fd6484}]
[HKEY_CLASSES_ROOT\mypoints.MYPOINTS]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DW4"="C:\Program Files\The Weather Channel FW\Desktop Weather\DesktopWeather.exe" [2006-10-30 15:27 715888]
"Magentic"="C:\PROGRA~1\Magentic\bin\Magentic.exe" [2007-10-09 13:42 475180]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 14:00 15360]
"AOL Fast Start"="C:\Program Files\America Online 9.0\AOL.exe" [2005-07-25 22:30 50776]
"Washer"="C:\Program Files\Washer\washer.exe" [2002-08-15 03:07 428544]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2005-09-18 11:32 7204864]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 08:00 79224]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-01-31 22:53 98304]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2007-12-21 07:16 579072]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Power2GoExpress"="NA" []
"AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2007-12-02 11:45 219136]

C:\Documents and Settings\Owner\Start Menu\Programs\Startup\
Webshots.lnk - C:\Program Files\Webshots\Launcher.exe [2006-12-14 20:16:12]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveSearch"= 1 (0x1)

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^BigFix.lnk]
backup=C:\WINDOWS\pss\BigFix.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Google Updater.lnk]
backup=C:\WINDOWS\pss\Google Updater.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Kodak EasyShare software.lnk]
backup=C:\WINDOWS\pss\Kodak EasyShare software.lnkCommon Startup

jbalcorn · « **Reply #22 on:** January 17, 2008, 01:19:20 AM »

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:45:47 PM, on 1/17/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\The Weather Channel FW\Desktop Weather\DesktopWeather.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Washer\washer.exe
C:\Program Files\America Online 9.0\waol.exe
C:\PROGRA~1\Webshots\webshots.scr
C:\PROGRA~1\Magentic\bin\MgApp.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Norton Utilities\NPROTECT.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\Program Files\Speed Disk\nopdb.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\America Online 9.0\shellmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\system32\msiexec.exe
C:\Documents and Settings\Owner\Desktop\HiJackThis.exe

jbalcorn · « **Reply #23 on:** January 17, 2008, 01:19:47 AM »

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: MYPOINTS - {A057A204-BACC-4D26-CEC4-75A487FD6484} - C:\PROGRA~1\mypoints\mypoints.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\windows\system32\BAE.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: MYPOINTS - {A057A204-BACC-4D26-CEC4-75A487FD6484} - C:\PROGRA~1\mypoints\mypoints.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [DW4] "C:\Program Files\The Weather Channel FW\Desktop Weather\DesktopWeather.exe"
O4 - HKCU\..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\America Online 9.0\AOL.EXE" -b
O4 - HKCU\..\Run: [Washer] C:\Program Files\Washer\washer.exe /0
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [Power2GoExpress] NA (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Power2GoExpress] NA (User 'Default user')
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\Program Files\IncrediMail\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: &Webshots Photo Search - res://C:\Program Files\Webshots\WSToolbar4IE.dll/MENUSEARCH.HTM
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: *.samsung-emp.com
O15 - Trusted Zone: *.samsunggsbn.com
O15 - Trusted Zone: *.samsungwireless.com
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://www.crsdata.net/maps/install/mgaxctrlv65.cab
O16 - DPF: {639658F3-B141-4D6B-B936-226F75A5EAC3} (CPlayFirstDinerDash2Control Object) - http://www.playfirst.com/play/game/dinerdash2/dinerdash2.cab
O16 - DPF: {6F750202-1362-4815-A476-88533DE61D0C} (Kodak Gallery Easy Upload Manager Class) - http://www.kodakgallery.com/downloads/BUM/BUM_WIN_IE_2/axofupld.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://atv.disney.go.com/global/download/otoy/OTOYAX29b.cab
O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} -
O16 - DPF: {B991DA79-51F7-4011-98D2-1F2592E82A56} (ACNPlayer2 Class) - http://drm1.reelsurvey.com/ePlayer/V3_2_0_0/ACNePlayer.cab
O16 - DPF: {C02226EB-A5D7-4B1F-BD7E-635E46C2288D} (Toontown Installer ActiveX Control) - http://a.download.toontown.com/sv1.0.24.24/ttinst.cab
O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/5m/virtools.download.akamai.com/6712/player/install3.0/installer.exe
O16 - DPF: {CC32D4D8-2A0B-4CEB-B105-C9B968379105} (CGameManagerCtrl Object) - https://disney.go.com/games/downloads/gamemanager/DIGGameManager.cab
O16 - DPF: {E463DD62-1D07-425E-B82A-539FBA2F4162} (GSBN_Updater.UserControl1) - http://www.samsunggsbn.com/PSI3/Cab/GSBN_Updater.CAB
O16 - DPF: {EF148DBB-5B6D-4130-B2A1-661571E86260} (Playtime Games Launcher) - http://clubgames.pogo.com/online2/pogop/mahjong_escape_ancient/PTGameLauncher.cab
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: C-DillaCdaC11BA - C-Dilla Ltd - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton Utilities\NPROTECT.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PrismXL - New Boundary Technologies, Inc. - C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
O23 - Service: Speed Disk service - Symantec Corporation - C:\Program Files\Speed Disk\nopdb.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe

--
End of file - 10764 bytes

jbalcorn · « **Reply #24 on:** January 17, 2008, 01:21:41 AM »

Here is--== Dump Hidden File on C:\ ==--
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014205.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014206.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014207.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014208.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014209.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014210.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014211.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014212.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014213.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014214.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014215.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014217.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014218.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014219.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0 what the root kit found too.

jbalcorn · « **Reply #25 on:** January 17, 2008, 01:22:15 AM »

[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014220.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014221.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014222.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014223.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014224.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014225.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014226.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014227.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014228.PDF
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014229.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014230.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014231.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014232.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014233.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014234.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014235.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014236.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014237.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014238.JPG
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014239.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014240.GIF
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014241.zip
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014242.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014243.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014244.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014245.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014246.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014247.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014248.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014249.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014250.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014251.htm
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014252.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014253.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014254.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014255.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014256.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014257.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014258.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014259.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014260.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014261.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014262.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014263.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014264.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014265.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014266.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014267.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0

jbalcorn · « **Reply #26 on:** January 17, 2008, 01:22:55 AM »

[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014268.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014269.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014270.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014271.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014272.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014273.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014274.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014275.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014276.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014277.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014278.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014279.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014280.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014281.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014282.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014283.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014284.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014285.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014286.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014287.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014288.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014289.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014290.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014291.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014292.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014293.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014294.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014295.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014296.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014297.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014298.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014299.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014300.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014301.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0

jbalcorn · « **Reply #27 on:** January 17, 2008, 01:23:50 AM »

[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014302.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014303.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014304.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014305.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014306.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014307.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014308.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014309.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014310.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014311.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014312.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014313.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014314.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014315.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014316.htm
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014317.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014318.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014319.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014320.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014321.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014322.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014323.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014324.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014325.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014326.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014327.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014328.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014329.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014330.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014331.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014332.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014333.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014334.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014335.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014336.JPG
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014337.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014338.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014339.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014340.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014341.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014342.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014343.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014344.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014345.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0

jbalcorn · « **Reply #28 on:** January 17, 2008, 01:24:40 AM »

[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014362.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014363.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014364.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014365.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014366.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014367.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014368.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014369.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014370.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014371.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014372.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014373.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014374.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014375.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014376.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014377.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014378.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014379.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014380.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014381.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014382.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014383.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014384.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014385.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014386.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014387.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014388.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014389.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014390.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014391.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014392.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014393.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014394.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014395.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014396.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014397.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014398.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014399.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014400.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014401.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014402.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014403.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0

jbalcorn · « **Reply #29 on:** January 17, 2008, 01:25:15 AM »

[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014404.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014405.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014406.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014407.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014408.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014409.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014410.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014411.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014412.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014413.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014414.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014415.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014416.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014417.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014418.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014419.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014420.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014421.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014422.htm
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014423.txt
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014424.HTM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014425.eml
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014426.IMH
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014428.tlv
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014429.IMH
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014430.IMM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014431.IMH
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014432.IMM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014433.IMH
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014434.IMM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014437.tlv
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014439.tlv
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014441.IMH
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014442.IMM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014443.IMH
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014444.IMM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014445.IMH
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014446.IMM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014447.IMH
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014448.IMM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014450.tlv
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014451.tlv
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014454.tlv
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014456.IMH
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014457.IMM
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0
[HIDDEN_FILE]:
   FullPath : C:\RECYCLER\NPROTECT\00014459.IMH
   FullPathLength: 33
   DesiredAccess : 0x0
   Options : 0x0
   Attributes : 0x20
   ShareAccess : 0x0
   Type : 0x0

Author Topic: Please help Avast found this trojan file cp1041.nls (Read 62672 times)

jbalcorn

Re: Please help Avast found this trojan file cp1041.nls

jbalcorn

Re: Please help Avast found this trojan file cp1041.nls

jbalcorn

Re: Please help Avast found this trojan file cp1041.nls

jbalcorn

Re: Please help Avast found this trojan file cp1041.nls

jbalcorn

Re: Please help Avast found this trojan file cp1041.nls

jbalcorn

Re: Please help Avast found this trojan file cp1041.nls

jbalcorn

Re: Please help Avast found this trojan file cp1041.nls

jbalcorn

Re: Please help Avast found this trojan file cp1041.nls

jbalcorn

Re: Please help Avast found this trojan file cp1041.nls

jbalcorn

Re: Please help Avast found this trojan file cp1041.nls

jbalcorn

Re: Please help Avast found this trojan file cp1041.nls

jbalcorn

Re: Please help Avast found this trojan file cp1041.nls

jbalcorn

Re: Please help Avast found this trojan file cp1041.nls

jbalcorn

Re: Please help Avast found this trojan file cp1041.nls

jbalcorn

Re: Please help Avast found this trojan file cp1041.nls