View Full Version : Need help with Virtumonde
payback1110
2008-05-03, 22:03
I also have this bad virtumonde thing. i have some of the threads here and have ran the combfix and here is the log. Spybot found this for me but it keeps coming back. Thanks for the help.
Pat
ComboFix 08-04-29.5 - payback 2008-05-03 12:07:13.4 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.584 [GMT -6:00]
Running from: C:\Documents and Settings\payback\Desktop\ComboFix.exe
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((( Files Created from 2008-04-03 to 2008-05-03 )))))))))))))))))))))))))))))))
.
2008-05-03 10:02 . 2008-05-03 10:02 1,024 --ah----- C:\WINDOWS\system32\config\systemprofile\ntuser.dat.LOG
2008-04-28 21:36 . 2008-05-03 11:35 109,747 --a------ C:\WINDOWS\BMffa541c6.xml
2008-04-27 21:54 . 2008-04-28 06:40 406 --ahs---- C:\WINDOWS\system32\supavksr.ini
2008-04-27 20:46 . 2008-04-27 20:46 2,126 --a------ C:\WINDOWS\system32\wpa.dbl
2008-04-26 12:31 . 2008-04-26 12:31 <DIR> d-------- C:\Documents and Settings\Administrator
2008-04-26 12:31 . 2008-05-03 12:03 1,024 --ah----- C:\Documents and Settings\Administrator\NTUSER.dat.LOG
2008-04-26 11:53 . 2004-08-04 01:56 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2008-04-17 21:31 . 2008-04-17 21:31 <DIR> d-------- C:\Documents and Settings\payback\Application Data\vlc
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-03 17:42 --------- d-----w C:\Program Files\Eraser
2008-05-02 23:56 --------- d-----w C:\Program Files\McAfee
2008-05-01 13:12 --------- d-----w C:\Documents and Settings\payback\Application Data\SiteAdvisor
2008-04-26 17:52 --------- d-----w C:\Program Files\Web Publish
2008-04-19 16:47 --------- d-----w C:\Program Files\DivX
2008-03-31 21:25 831,488 ----a-w C:\WINDOWS\system32\divx_xx0a.dll
2008-03-31 21:25 823,296 ----a-w C:\WINDOWS\system32\divx_xx0c.dll
2008-03-31 21:25 823,296 ----a-w C:\WINDOWS\system32\divx_xx07.dll
2008-03-31 21:25 802,816 ----a-w C:\WINDOWS\system32\divx_xx11.dll
2008-03-31 21:25 682,496 ----a-w C:\WINDOWS\system32\DivX.dll
2008-03-31 21:25 161,096 ----a-w C:\WINDOWS\system32\DivXCodecVersionChecker.exe
2008-03-21 20:30 524,288 ----a-w C:\WINDOWS\system32\DivXsm.exe
2008-03-21 20:30 3,596,288 ----a-w C:\WINDOWS\system32\qt-dx331.dll
2008-03-21 20:30 200,704 ----a-w C:\WINDOWS\system32\ssldivx.dll
2008-03-21 20:30 1,044,480 ----a-w C:\WINDOWS\system32\libdivx.dll
2008-03-21 20:28 81,920 ----a-w C:\WINDOWS\system32\dpl100.dll
2008-03-21 20:28 593,920 ----a-w C:\WINDOWS\system32\dpuGUI11.dll
2008-03-21 20:28 57,344 ----a-w C:\WINDOWS\system32\dpv11.dll
2008-03-21 20:28 53,248 ----a-w C:\WINDOWS\system32\dpuGUI10.dll
2008-03-21 20:28 344,064 ----a-w C:\WINDOWS\system32\dpus11.dll
2008-03-21 20:28 294,912 ----a-w C:\WINDOWS\system32\dpu11.dll
2008-03-21 20:28 294,912 ----a-w C:\WINDOWS\system32\dpu10.dll
2008-03-21 20:28 196,608 ----a-w C:\WINDOWS\system32\dtu100.dll
2008-03-21 20:28 12,288 ----a-w C:\WINDOWS\system32\DivXWMPExtType.dll
2008-03-19 09:47 1,845,248 ----a-w C:\WINDOWS\system32\win32k.sys
2008-03-13 23:51 --------- d-----w C:\Program Files\Java
2008-03-01 13:06 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
2008-02-20 06:51 282,624 ----a-w C:\WINDOWS\system32\gdi32.dll
2008-02-20 05:32 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll
2008-02-18 19:52 691,545 ----a-w C:\WINDOWS\unins000.exe
.
((((((((((((((((((((((((((((( snapshot@2008-05-03_10.10.55.43 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-05-03 16:07:38 2,048 --s-a-w C:\WINDOWS\bootstat.dat
+ 2008-05-03 17:43:56 2,048 --s-a-w C:\WINDOWS\bootstat.dat
- 2008-05-02 19:26:42 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
+ 2008-05-03 17:02:01 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
- 2008-05-02 19:26:42 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2008-05-03 17:02:01 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
Hi
ComboFix shouldn't be used without supervision.
Your log is also only partial one. Could you post complete ComboFix log? Post a fresh hjt log too.
"BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288)
Do NOT run 'fixes' before helpers have analyzed HJT/KAV scans (http://forums.spybot.info/showthread.php?t=16806 )
payback1110
2008-05-03, 22:29
Sorry about that. Too many things going at once. Here is the complete log. Also what is hjt log?
payback1110
2008-05-03, 22:30
Here is the log.
ComboFix 08-04-29.5 - payback 2008-05-03 12:07:13.4 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.584 [GMT -6:00]
Running from: C:\Documents and Settings\payback\Desktop\ComboFix.exe
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((( Files Created from 2008-04-03 to 2008-05-03 )))))))))))))))))))))))))))))))
.
2008-05-03 10:02 . 2008-05-03 10:02 1,024 --ah----- C:\WINDOWS\system32\config\systemprofile\ntuser.dat.LOG
2008-04-28 21:36 . 2008-05-03 11:35 109,747 --a------ C:\WINDOWS\BMffa541c6.xml
2008-04-27 21:54 . 2008-04-28 06:40 406 --ahs---- C:\WINDOWS\system32\supavksr.ini
2008-04-27 20:46 . 2008-04-27 20:46 2,126 --a------ C:\WINDOWS\system32\wpa.dbl
2008-04-26 12:31 . 2008-04-26 12:31 <DIR> d-------- C:\Documents and Settings\Administrator
2008-04-26 12:31 . 2008-05-03 12:03 1,024 --ah----- C:\Documents and Settings\Administrator\NTUSER.dat.LOG
2008-04-26 11:53 . 2004-08-04 01:56 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2008-04-17 21:31 . 2008-04-17 21:31 <DIR> d-------- C:\Documents and Settings\payback\Application Data\vlc
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-03 17:42 --------- d-----w C:\Program Files\Eraser
2008-05-02 23:56 --------- d-----w C:\Program Files\McAfee
2008-05-01 13:12 --------- d-----w C:\Documents and Settings\payback\Application Data\SiteAdvisor
2008-04-26 17:52 --------- d-----w C:\Program Files\Web Publish
2008-04-19 16:47 --------- d-----w C:\Program Files\DivX
2008-03-31 21:25 831,488 ----a-w C:\WINDOWS\system32\divx_xx0a.dll
2008-03-31 21:25 823,296 ----a-w C:\WINDOWS\system32\divx_xx0c.dll
2008-03-31 21:25 823,296 ----a-w C:\WINDOWS\system32\divx_xx07.dll
2008-03-31 21:25 802,816 ----a-w C:\WINDOWS\system32\divx_xx11.dll
2008-03-31 21:25 682,496 ----a-w C:\WINDOWS\system32\DivX.dll
2008-03-31 21:25 161,096 ----a-w C:\WINDOWS\system32\DivXCodecVersionChecker.exe
2008-03-21 20:30 524,288 ----a-w C:\WINDOWS\system32\DivXsm.exe
2008-03-21 20:30 3,596,288 ----a-w C:\WINDOWS\system32\qt-dx331.dll
2008-03-21 20:30 200,704 ----a-w C:\WINDOWS\system32\ssldivx.dll
2008-03-21 20:30 1,044,480 ----a-w C:\WINDOWS\system32\libdivx.dll
2008-03-21 20:28 81,920 ----a-w C:\WINDOWS\system32\dpl100.dll
2008-03-21 20:28 593,920 ----a-w C:\WINDOWS\system32\dpuGUI11.dll
2008-03-21 20:28 57,344 ----a-w C:\WINDOWS\system32\dpv11.dll
2008-03-21 20:28 53,248 ----a-w C:\WINDOWS\system32\dpuGUI10.dll
2008-03-21 20:28 344,064 ----a-w C:\WINDOWS\system32\dpus11.dll
2008-03-21 20:28 294,912 ----a-w C:\WINDOWS\system32\dpu11.dll
2008-03-21 20:28 294,912 ----a-w C:\WINDOWS\system32\dpu10.dll
2008-03-21 20:28 196,608 ----a-w C:\WINDOWS\system32\dtu100.dll
2008-03-21 20:28 12,288 ----a-w C:\WINDOWS\system32\DivXWMPExtType.dll
2008-03-19 09:47 1,845,248 ----a-w C:\WINDOWS\system32\win32k.sys
2008-03-13 23:51 --------- d-----w C:\Program Files\Java
2008-03-01 13:06 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
2008-02-20 06:51 282,624 ----a-w C:\WINDOWS\system32\gdi32.dll
2008-02-20 05:32 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll
2008-02-18 19:52 691,545 ----a-w C:\WINDOWS\unins000.exe
.
((((((((((((((((((((((((((((( snapshot@2008-05-03_10.10.55.43 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-05-03 16:07:38 2,048 --s-a-w C:\WINDOWS\bootstat.dat
+ 2008-05-03 17:43:56 2,048 --s-a-w C:\WINDOWS\bootstat.dat
- 2008-05-02 19:26:42 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
+ 2008-05-03 17:02:01 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
- 2008-05-02 19:26:42 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2008-05-03 17:02:01 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6A6EAE1B-4AD6-4035-974D-504D6DBAA9C3}]
1980-01-01 00:00 38912 --a------ C:\WINDOWS\system32\ljJBtSig.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="C:\Program Files\Messenger\MSMSGS.exe" [2004-10-13 10:24 1694208]
"Eraser"="C:\Program Files\Eraser\eraser.exe" [2003-07-25 11:15 536576]
"NBJ"="C:\Program Files\Ahead\Nero BackItUp\nbj.exe" [2006-09-15 14:27 2048000]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StorageGuard"="C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" [2003-02-13 01:01 155648]
"UpdReg"="C:\WINDOWS\UpdReg.EXE" [2000-05-11 01:00 90112]
"OmniPage"="C:\Program Files\Caere\OmniPagePro90\opware32.exe" [1998-10-12 18:13 44032]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2006-01-12 16:40 155648]
"InCD"="C:\Program Files\Ahead\InCD\InCD.exe" [2006-03-23 18:06 1398272]
"eTrustPPAP"="C:\Program Files\CA\eTrust PestPatrol\PPActiveDetection.exe" [2007-07-31 21:38 131072]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2006-11-03 19:20 866584]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2007-06-29 06:24 286720]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2007-10-17 22:13 185632]
"mcagent_exe"="C:\Program Files\McAfee.com\Agent\mcagent.exe" [2007-08-03 23:33 582992]
"McENUI"="C:\PROGRA~1\McAfee\MHN\McENUI.exe" [2007-11-30 05:42 1164576]
"MBkLogOnHook"="C:\Program Files\McAfee\MBK\LogOnHook.exe" [2007-01-08 12:22 20480]
C:\Documents and Settings\payback\Start Menu\Programs\Startup\
Picture Motion Browser Media Check Tool.lnk - C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe [2007-07-24 21:06:31 344064]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{6A6EAE1B-4AD6-4035-974D-504D6DBAA9C3}"= C:\WINDOWS\system32\ljJBtSig.dll [1980-01-01 00:00 38912]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ljJBtSig]
ljJBtSig.dll 1980-01-01 00:00 38912 C:\WINDOWS\system32\ljJBtSig.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.ctmp3"= C:\WINDOWS\System32\ctmp3.acm
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BMffa541c6]
C:\WINDOWS\system32\vevqmssa.dll
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\fc96725a]
C:\WINDOWS\system32\vsxoelwd.dll
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sonic RecordNow!]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"diagent"="C:\Program Files\Creative\SBLive\Diagnostics\diagent.exe" startup
"SideWinderTrayV4"=C:\PROGRA~1\MICROS~4\GAMECO~1\Common\SWTrayV4.exe
"SiteAdvisor"=C:\Program Files\SiteAdvisor\6253\SiteAdv.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\BitTornado\\btdownloadgui.exe"=
"C:\\Program Files\\Common Files\\McAfee\\MNA\\McNASvc.exe"=
.
Contents of the 'Scheduled Tasks' folder
"2007-07-25 12:33:37 C:\WINDOWS\Tasks\Critical Battery Alarm Program.job"
"2008-04-15 07:34:35 C:\WINDOWS\Tasks\McDefragTask.job"
- c:\PROGRA~1\mcafee\mqc\QcConsol.exe'
"2008-05-01 07:00:09 C:\WINDOWS\Tasks\McQcTask.job"
- c:\PROGRA~1\mcafee\mqc\QcConsol.exe
"2008-05-03 17:47:03 C:\WINDOWS\Tasks\MP Scheduled Scan.job"
- C:\Program Files\Windows Defender\MpCmdRun.exe
.
**************************************************************************
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-03 12:11:16
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
PROCESS: C:\WINDOWS\system32\winlogon.exe
-> C:\WINDOWS\system32\ljJBtSig.dll
PROCESS: C:\WINDOWS\explorer.exe
-> C:\Program Files\SiteAdvisor\6253\saHook.dll
.
Completion time: 2008-05-03 12:13:39
ComboFix-quarantined-files.txt 2008-05-03 18:13:28
ComboFix2.txt 2008-05-03 17:54:57
ComboFix3.txt 2008-05-03 17:47:56
ComboFix4.txt 2008-05-03 16:11:34
Pre-Run: 162,694,516,736 bytes free
Post-Run: 162,684,334,080 bytes free
148 --- E O F --- 2008-05-01 23:23:49
Hi
Instructions for creating hjt log below. I'll give you further instructions after I've seen hjt log first. :)
Download and install TrendMicro HijackThis (http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe)
* Once installed open HijackThis by clicking Start > Programs > HijackThis and click the button labeled
Do a system scan only
* Click the scan button in the lower left hand corner of the interface and HijackThis will quickly scan your system.
* Once the scan is complete the scan button will now read save log. Click this button to save the log file to your PC. Once you select where you would like to save the file it will open in your systems default text editor. Typically this application is Notepad. Post the log here.
payback1110
2008-05-03, 23:13
Today is not my day. Ran HJT and it did it's scan. Clicked on the save log button and but didn't open up a note pad or ask me where to save it and I couldn't fine anything to select where to save the log to. I must be missing something here. So what am I doing wrong.
Hi
When you clicked "Save log" it should have asked for a location where will be the log saved to. Please try again. If Notepad still doesn't open up with the log search for hijackThis.log file thru your hard drive.
payback1110
2008-05-04, 17:27
I found it. Here it is.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:04:06 PM, on 5/3/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\McAfee\MBK\MBackMonitor.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\SiteAdvisor\6253\SAService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Caere\OmniPagePro90\opware32.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\CA\eTrust PestPatrol\PPActiveDetection.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\SiteAdvisor\6253\SiteAdv.exe
C:\Program Files\Messenger\MSMSGS.EXE
C:\Program Files\Eraser\eraser.exe
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://192.168.0.1/setup.html
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [OmniPage] C:\Program Files\Caere\OmniPagePro90\opware32.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\CA\eTrust PestPatrol\PPActiveDetection.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
O4 - HKLM\..\Run: [McENUI] C:\PROGRA~1\McAfee\MHN\McENUI.exe /hide
O4 - HKLM\..\Run: [MBkLogOnHook] C:\Program Files\McAfee\MBK\LogOnHook.exe
O4 - HKLM\..\Run: [BMffa541c6] Rundll32.exe "C:\WINDOWS\system32\meiifijl.dll",s
O4 - HKLM\..\Run: [fc96725a] rundll32.exe "C:\WINDOWS\system32\mtjwcqdg.dll",b
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\MSMSGS.EXE" /background
O4 - HKCU\..\Run: [Eraser] C:\Program Files\Eraser\eraser.exe -hide
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\nbj.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Picture Motion Browser Media Check Tool.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1185476255281
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: InCD Helper (read only) (InCDsrvR) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: MBackMonitor - McAfee - C:\Program Files\McAfee\MBK\MBackMonitor.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SiteAdvisor Service - Unknown owner - C:\Program Files\SiteAdvisor\6253\SAService.exe
--
End of file - 7692 bytes
Hi
Start hjt, do a system scan, check:
O4 - HKLM\..\Run: Rundll32.exe "C:\WINDOWS\system32\meiifijl.dll",s
O4 - HKLM\..\Run: [fc96725a] rundll32.exe "C:\WINDOWS\system32\mtjwcqdg.dll",b
Close browsers and other windows. Click fix checked.
Open notepad and copy/paste the text in the quotebox below into it:
File::
C:\WINDOWS\BMffa541c6.xml
C:\WINDOWS\system32\supavksr.ini
C:\WINDOWS\system32\ljJBtSig.dll
C:\WINDOWS\system32\meiifijl.dll
C:\WINDOWS\system32\mtjwcqdg.dll
Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6A6EAE1B-4AD6-4035-974D-504D6DBAA9C3}]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{6A6EAE1B-4AD6-4035-974D-504D6DBAA9C3}"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ljJBtSig]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BMffa541c6]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\fc96725a]
Save this as
CFScript
http://users.pandora.be/bluepatchy/miekiemoes/images/CFScript.gif
Refering to the picture above, drag CFScript into ComboFix.exe
Then post the resultant log.
Combofix should never take more that 20 minutes including the reboot if malware is detected.
If it does, open Task Manager then Processes tab (press ctrl, alt and del at the same time) and end any processes of findstr, find, sed or swreg, then combofix should continue.
If that happened we want to know, and also what process you had to end.
Download ATF (Atribune Temp File) Cleaner© by Atribune (http://www.atribune.org/ccount/click.php?id=1) to your desktop.
Double-click ATF Cleaner.exe to open it
Under Main choose:
Windows Temp
Current User Temp
All Users Temp
Cookies
Temporary Internet Files
Prefetch
Java Cache
*The other boxes are optional*
Then click the Empty Selected button.
If you use Firefox:
Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click NO at the prompt.
If you use Opera:
Click Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click NO at the prompt.
Click Exit on the Main menu to close the program.
Please run an online scan with Kaspersky Online Scanner (http://www.kaspersky.com/downloads/kws/kavwebscan.html). You will be prompted to install an ActiveX component from Kaspersky, click Yes.
The program will launch and start to download the latest definition files.
Once the scanner is installed and the definitions downloaded, click [B]Next.
Now click on Scan Settings and select the following:Scan using the following Anti-Virus database:
Extended (If available, otherwise Standard)Scan Options:
Scan Archives
Scan Mail Bases
Click OK.
Under
select a target to scan
, select My Computer.
The scan will take a while so be patient and let it run. As it scans your machine very deeply it could take hours to complete, Kaspersky suggests running it during a time of low activity.Once the scan is complete:
Click on the Save as Text button.
Save the file to your desktop.
Copy and paste that information into your next post if the AV content will fit into one post only. Post a fresh hjt log and above meantioned ComboFix resultant log too.
Note for Internet Explorer 7 users: If at any time you have trouble with the Accept button of the license, click on the Zoom tool located at the bottom right of the IE window and set the zoom to 75 %. Once the license has been accepted, reset to 100%.
If having a problme doing the above
Make sure that your Internet security settings are set to default values.
To set default security settings for Internet Explorer:
* Open Internet Explorer.
* Go to the Tools menu, then choose Internet Options.
* Click on the Security tab.
* Make sure that all four item (Internet, Local intranet, Trusted sites, and Restricted sites) are set to their default settings.
payback1110
2008-05-04, 22:13
Hi
Done. Here are the logs.
Sunday, May 04, 2008 12:53:22 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 4/05/2008
Kaspersky Anti-Virus database records: 739304
Scan Settings
Scan using the following antivirus database extended
Scan Archives true
Scan Mail Bases true
Scan Target My Computer
A:\
C:\
D:\
E:\
F:\
Scan Statistics
Total number of scanned objects 75263
Number of viruses found 10
Number of infected objects 38
Number of suspicious objects 0
Duration of the scan process 00:52:37
Infected Object Name Virus Name Last Action
C:\Documents and Settings\All Users\Application Data\McAfee\EasyNet\MHNData Object is locked skipped
C:\Documents and Settings\All Users\Application Data\McAfee\MNA\NAData Object is locked skipped
C:\Documents and Settings\All Users\Application Data\McAfee\MPF\data\log.edb Object is locked skipped
C:\Documents and Settings\All Users\Application Data\McAfee\MSC\McUsers.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\McAfee\MSK\MSKWMDB.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\McAfee\MSK\settingsdb.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\McAfee\VirusScan\Logs\OAS.Log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Support\MPLog-05042008-110440.log Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Canon\SG63PVP0.TMP Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Canon\SG63PVP1.TMP Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Leadertech\PowerRegister\PowerReg.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Address Book\Pat Hall.wab Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\CLR Security Config\v1.1.4322\security.config Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\CLR Security Config\v1.1.4322\security.config.cch Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Credentials\S-1-5-21-2916562098-3199386865-2842851977-1007\Credentials Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2916562098-3199386865-2842851977-1007\1f0b60827a4c7c08356ee212eb67ae05_7b71fbce-dff3-42c2-9259-d2367eb8daa9 Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2916562098-3199386865-2842851977-1007\62257e56dca8ed1e600e5d0ebe8746fd_7b71fbce-dff3-42c2-9259-d2367eb8daa9 Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2916562098-3199386865-2842851977-1007\a33d10b6c4f5b80ba19b6c5e2a7b2532_7b71fbce-dff3-42c2-9259-d2367eb8daa9 Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2916562098-3199386865-2842851977-1007\cf7733481520088062f9d4866d1b849c_7b71fbce-dff3-42c2-9259-d2367eb8daa9 Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Forms\WINWORD.box Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\HTML Help\hh.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Internet Explorer\BRNDLOG.BAK Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Internet Explorer\BRNDLOG.TXT Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Internet Explorer\Desktop.htt Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Media Player\00053502.wpl Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Media Player\OfflineUpdates.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MMC\DFRG Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MMC\SECPOL Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\1335274762\Backgrounds\map.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\1335274762\Backgrounds\TFRCA.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\1335274762\Backgrounds\TFRCB.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\1335274762\Backgrounds\TFRCC.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\1335274762\Backgrounds\TFRCD.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\1335274762\Backgrounds\TFRCE.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\1335274762\Backgrounds\TFRCF.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\1335274762\ListCache.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\1335274762\UserTile\map.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\1335274762\UserTile\TFRBD.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\1335274762\UserTile\TFRBE.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\1335274762\UserTile\TFRBF.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\1335274762\UserTile\TFRC0.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\1335274762\UserTile\TFRC1.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\1335274762\UserTile\TFRC2.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\1335274762\UserTile\TFRC3.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\1335274762\UserTile\TFRC4.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\1335274762\UserTile\TFRC5.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\1335274762\UserTile\TFRC6.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\1335274762\UserTile\TFRC7.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\1335274762\UserTile\TFRC8.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\2436947441\Backgrounds\map.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\2436947441\Backgrounds\TFR66.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\2436947441\Backgrounds\TFR67.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\2436947441\Backgrounds\TFR68.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\2436947441\Backgrounds\TFR69.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\2436947441\Backgrounds\TFR6A.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\2436947441\Backgrounds\TFR6B.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\2436947441\ListCache.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\2436947441\UserTile\map.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\2436947441\UserTile\TFR59.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\2436947441\UserTile\TFR5A.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\2436947441\UserTile\TFR5B.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\2436947441\UserTile\TFR5C.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\2436947441\UserTile\TFR5D.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\2436947441\UserTile\TFR5E.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\2436947441\UserTile\TFR5F.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\2436947441\UserTile\TFR60.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\2436947441\UserTile\TFR61.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\2436947441\UserTile\TFR62.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\2436947441\UserTile\TFR63.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\2436947441\UserTile\TFR6F.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\2436947441\UserTile\TFR70.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\4289036433\Backgrounds\map.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\4289036433\Backgrounds\TFR3E.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\4289036433\Backgrounds\TFR3F.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\4289036433\Backgrounds\TFR40.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\4289036433\Backgrounds\TFR41.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\4289036433\Backgrounds\TFR42.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\4289036433\Backgrounds\TFR43.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\4289036433\ListCache.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\4289036433\UserTile\map.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\4289036433\UserTile\TFR45.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\4289036433\UserTile\TFR46.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\4289036433\UserTile\TFR47.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\4289036433\UserTile\TFR48.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\4289036433\UserTile\TFR49.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\4289036433\UserTile\TFR4A.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\4289036433\UserTile\TFR4B.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\4289036433\UserTile\TFR4C.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\4289036433\UserTile\TFR4D.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\4289036433\UserTile\TFR4E.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\4289036433\UserTile\TFR4F.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\MSN Messenger\4289036433\UserTile\TFR50.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Office\Excel11.pip Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Office\fbc4A.tmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Office\MSO1033.acl Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Office\MSOut11.pip Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Office\VB11.pip Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Office\Word11.pip Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Office\Wordma11.pip Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Outlook\outcmd.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Outlook\Outlook.NK2 Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Outlook\Outlook.srs Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Outlook\Outlook.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Picture It!\Catalog\roots.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Proof\CUSTOM.DIC Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Protect\CREDHIST Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Protect\S-1-5-21-2916562098-3199386865-2842851977-1007\38efe48c-ea20-4a5a-a749-5589f8c1e45e Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Protect\S-1-5-21-2916562098-3199386865-2842851977-1007\Preferred Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Protect\S-1-5-21-2916562098-3199386865-2842851977-500\18e22179-fdb3-4c8d-8790-cc7ad01dd95e Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Protect\S-1-5-21-2916562098-3199386865-2842851977-500\Preferred Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Smart Tags\Exceptions\ignore.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Speech\Files\UserLexicons\SP_955187065EBA4F58A421EC0FBC72808D.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\SystemCertificates\My\Certificates\34B5477C40D57C98DB349CEF0F308DA3C38B95D8 Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\SystemCertificates\My\Keys\DF12303463A32C03E96C82B17C5FF420AF324253 Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Templates\Normal.dot Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Templates\~$Normal.dot Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Microsoft\Windows\Themes\Custom.theme Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\DIGDATA00.DAT Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\msndata.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\OLTS.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\sound\Beth_afternoon.wav Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\sound\Beth_evening.wav Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\sound\Beth_morning.wav Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\sound\PATRICK_afternoon.wav Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\sound\PATRICK_evening.wav Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\sound\PATRICK_morning.wav Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\sound\Pat_afternoon.wav Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\sound\Pat_evening.wav Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\sound\Pat_morning.wav Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DA2EF0-256A-01C4-0200-0000FFC5F8E4}\adrsps.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DA2EF0-256A-01C4-0200-0000FFC5F8E4}\allowblock.txc Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DA2EF0-256A-01C4-0200-0000FFC5F8E4}\apinfo.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DA2EF0-256A-01C4-0200-0000FFC5F8E4}\CategoryCache.txc Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DA2EF0-256A-01C4-0200-0000FFC5F8E4}\emailallow.txc Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DA2EF0-256A-01C4-0200-0000FFC5F8E4}\favcache.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DA2EF0-256A-01C4-0200-0000FFC5F8E4}\favorites.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DA2EF0-256A-01C4-0200-0000FFC5F8E4}\favthumb.dbx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DA2EF0-256A-01C4-0200-0000FFC5F8E4}\localfastsettings.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DA2EF0-256A-01C4-0200-0000FFC5F8E4}\msnmenufeed.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DA2EF0-256A-01C4-0200-0000FFC5F8E4}\pcs.txc Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DA2EF0-256A-01C4-0200-0000FFC5F8E4}\relationships.txc Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DA2EF0-256A-01C4-0200-0000FFC5F8E4}\roamingfastsettings.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0300-0000E055DBCF}\adrsps.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0300-0000E055DBCF}\allowblock.txc Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0300-0000E055DBCF}\apinfo.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0300-0000E055DBCF}\CategoryCache.txc Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0300-0000E055DBCF}\emailallow.txc Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0300-0000E055DBCF}\favcache.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0300-0000E055DBCF}\favorites.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0300-0000E055DBCF}\favthumb.dbx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0300-0000E055DBCF}\localfastsettings.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0300-0000E055DBCF}\msnmenufeed.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0300-0000E0
payback1110
2008-05-04, 22:14
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0300-0000E055DBCF}\relationships.txc Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0300-0000E055DBCF}\roamingfastsettings.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0400-00004B25325B}\adrsps.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0400-00004B25325B}\allowblock.txc Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0400-00004B25325B}\apinfo.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0400-00004B25325B}\CategoryCache.txc Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0400-00004B25325B}\emailallow.txc Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0400-00004B25325B}\favcache.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0400-00004B25325B}\favorites.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0400-00004B25325B}\favthumb.dbx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0400-00004B25325B}\localfastsettings.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0400-00004B25325B}\localSettings.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0400-00004B25325B}\Mail\autocomplete0x1.txt Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0400-00004B25325B}\msnmenufeed.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0400-00004B25325B}\myParentalControls.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0400-00004B25325B}\pcs.txc Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0400-00004B25325B}\relationships.txc Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0400-00004B25325B}\roamingfastsettings.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSN6\UserData\{92DC914A-256A-01C4-0400-00004B25325B}\usertile.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSNInstaller\cProductInfo.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\MSNInstaller\msninstallerlog.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Qualcomm\Eudora\attach\Thumbs.db Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Qualcomm\Eudora\Audit.log Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Qualcomm\Eudora\descmap.pce Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Qualcomm\Eudora\DoNotDel.tmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Qualcomm\Eudora\Embedded\Thumbs.db Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Qualcomm\Eudora\eudora.log Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Qualcomm\Eudora\EudoraStats.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Qualcomm\Eudora\EudPriv\Ads\CInfo.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Qualcomm\Eudora\EudPriv\Ads\Eudora.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Qualcomm\Eudora\In.mbx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Qualcomm\Eudora\In.toc Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Qualcomm\Eudora\LinkHistory.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Qualcomm\Eudora\lmos.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Qualcomm\Eudora\Out.mbx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Qualcomm\Eudora\Out.toc Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Qualcomm\Eudora\Plugins\Esp\Esp.acq Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Qualcomm\Eudora\Plugins\Esp\Esp.log Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Qualcomm\Eudora\Plugins\Esp\Esp.sdb Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Qualcomm\Eudora\Sigs\Standard.txt Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Qualcomm\Eudora\spool\lmos.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Qualcomm\Eudora\Trash.mbx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Qualcomm\Eudora\Trash.toc Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Qualcomm\Eudora\updateurl.htm Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Real\Msg\Category.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Real\Msg\SCategory.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Real\RealOne Player\cookies.txt Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Real\RealOne Player\db\CD.CDX Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Real\RealOne Player\db\CD.DBF Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Real\RealOne Player\db\CDTRAX.CDX Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Real\RealOne Player\db\CDTRAX.DBF Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Real\RealOne Player\db\NAMES.CDX Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Real\RealOne Player\db\NAMES.DBF Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Real\RealOne Player\db\PLAYGRPS.CDX Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Real\RealOne Player\db\PLAYGRPS.DBF Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Real\RealOne Player\db\PLAYLIST.CDX Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Real\RealOne Player\db\PLAYLIST.DBF Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Real\RealOne Player\db\PLAYLIST.FPT Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Real\RealOne Player\db\PLAYTRAX.CDX Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Real\RealOne Player\db\PLAYTRAX.DBF Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Real\RealOne Player\db\TRACKS.CDX Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Real\RealOne Player\db\TRACKS.DBF Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Real\RealOne Player\db\TRACKS.FPT Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Real\RealOne Player\db\TRAKINFO.CDX Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Real\RealOne Player\db\TRAKINFO.DBF Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Real\RealOne Player\db\VALUES.CDX Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Real\RealOne Player\db\VALUES.DBF Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Real\RealOne Player\db\version Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Real\rnadmin\rnsystem.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\SmartFTP\Custom.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\SmartFTP\Favorites.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\SmartFTP\Folders.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\SmartFTP\History.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\SmartFTP\Queue.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sonic\Update Manager\sumdb.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\1304.jpg-3127b2d9-4270ace5.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\1304.jpg-3127b2d9-4270ace5.jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\1587.jpg-5668c9fb-45242e8f.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\1587.jpg-5668c9fb-45242e8f.jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\1767.jpg-4217c279-6b0ee208.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\1767.jpg-4217c279-6b0ee208.jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\1807.jpg-b8390d7-3a8a0bf3.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\1807.jpg-b8390d7-3a8a0bf3.jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\1839.jpg-1f64927c-78422941.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\1839.jpg-1f64927c-78422941.jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\1883.jpg-26b1763c-7e5e1ec5.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\1883.jpg-26b1763c-7e5e1ec5.jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audio_on.gif-cc699ee-1fea1e5f.gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\audio_on.gif-cc699ee-1fea1e5f.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\endfacade.gif-20fd8fd1-255d3cdb.gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\endfacade.gif-20fd8fd1-255d3cdb.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\facade.jpg-384d73d-65193c99.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\facade.jpg-384d73d-65193c99.jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\fprotate.class-514836a3-538e866b.class Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\fprotate.class-514836a3-538e866b.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\fprotatx.class-3e5e9c76-430369cb.class Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\fprotatx.class-3e5e9c76-430369cb.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\left.gif-402a6f51-4f19c2ca.gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\left.gif-402a6f51-4f19c2ca.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\left_spacer.gif-14e7aea6-4470d61f.gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\left_spacer.gif-14e7aea6-4470d61f.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\pause.gif-724e1892-1f6b6ad1.gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\pause.gif-724e1892-1f6b6ad1.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\play.gif-49b8fbfe-1fd37689.gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\play.gif-49b8fbfe-1fd37689.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\play.gif-722cd13a-52d46b29.gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\play.gif-722cd13a-52d46b29.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\repeat.gif-5dc4dfa1-662a3c2f.gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\repeat.gif-5dc4dfa1-662a3c2f.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\right.gif-635731b8-152d4c66.gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\right.gif-635731b8-152d4c66.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\right_spacer.gif-e024235-7d1d9ff5.gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\right_spacer.gif-e024235-7d1d9ff5.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\sound_off.gif-3eac97db-3c684c73.gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\sound_off.gif-3eac97db-3c684c73.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\sound_on.gif-4db10ad9-35ee9e07.gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\sound_on.gif-4db10ad9-35ee9e07.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\startfacade.gif-451b5c58-354ee1c6.gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\startfacade.gif-451b5c58-354ee1c6.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\stop.gif-3ff361cc-60d2810c.gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\stop.gif-3ff361cc-60d2810c.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\stop.gif-68673708-348f62cc.gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\stop.gif-68673708-348f62cc.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\top.gif-e578eb1-73333012.gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\top.gif-e578eb1-73333012.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\adcontroller.jar-6081e6da-502d7a41.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\adcontroller.jar-6081e6da-502d7a41.zip Object is locked skipped
payback1110
2008-05-04, 22:14
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\adcontroller.jar-6510f6fa-2ddf75c7.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\adcontroller.jar-6510f6fa-2ddf75c7.zip Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\dhlchat.jar-4787ef1f-40c01b80.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\dhlchat.jar-4787ef1f-40c01b80.zip Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\FcPred.jar-18607d9a-63732c52.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\FcPred.jar-18607d9a-63732c52.zip Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\Preview.zip-77cfb30e-59a0f860.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\Preview.zip-77cfb30e-59a0f860.zip Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-3e1ce22c-791402cf.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-3e1ce22c-791402cf.zip Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-438bf992-632cf99c.idx Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\REL.jar-438bf992-632cf99c.zip Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\log\plugin142.trace Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\security\deployment.certs Object is locked skipped
C:\Documents and Settings\Pat Hall\Application Data\Sun\Java\Deployment\security\deployment.jssecerts Object is locked skipped
C:\Documents and Settings\Pat Hall\Cookies\pat hall@ads.pointroll[2].txt Object is locked skipped
C:\Documents and Settings\Pat Hall\Cookies\pat hall@advertising[1].txt Object is locked skipped
C:\Documents and Settings\Pat Hall\Cookies\pat hall@atdmt[2].txt Object is locked skipped
C:\Documents and Settings\Pat Hall\Cookies\pat hall@groups.yahoo[1].txt Object is locked skipped
C:\Documents and Settings\Pat Hall\Cookies\pat hall@mediaplex[1].txt Object is locked skipped
C:\Documents and Settings\Pat Hall\Cookies\pat hall@msn[1].txt Object is locked skipped
C:\Documents and Settings\Pat Hall\Cookies\pat hall@my.yahoo[2].txt Object is locked skipped
C:\Documents and Settings\Pat Hall\Cookies\pat hall@passport[1].txt Object is locked skipped
C:\Documents and Settings\Pat Hall\Cookies\pat hall@questionmarket[1].txt Object is locked skipped
C:\Documents and Settings\Pat Hall\Cookies\pat hall@servedby.advertising[1].txt Object is locked skipped
C:\Documents and Settings\Pat Hall\Cookies\pat hall@www.adultjobfinder[1].txt Object is locked skipped
C:\Documents and Settings\Pat Hall\Cookies\pat hall@www.banner-farm[1].txt Object is locked skipped
C:\Documents and Settings\Pat Hall\Cookies\pat hall@www.xxxvogue[2].txt Object is locked skipped
C:\Documents and Settings\Pat Hall\Cookies\pat hall@yahoo[1].txt Object is locked skipped
C:\Documents and Settings\Pat Hall\Favorites\Actiontec.url Object is locked skipped
C:\Documents and Settings\Pat Hall\Favorites\DACafeMail - Login.url Object is locked skipped
C:\Documents and Settings\Pat Hall\Favorites\Dell\Dell Auction.url Object is locked skipped
C:\Documents and Settings\Pat Hall\Favorites\Dell\Dell.url Object is locked skipped
C:\Documents and Settings\Pat Hall\Favorites\Dell\Gigabuys.url Object is locked skipped
C:\Documents and Settings\Pat Hall\Favorites\Dell\Support.Dell.com.url Object is locked skipped
C:\Documents and Settings\Pat Hall\Favorites\Job Service Workforce Center-Great Falls.url Object is locked skipped
C:\Documents and Settings\Pat Hall\Favorites\Links\Cenex Pipeline Tech Group.url Object is locked skipped
C:\Documents and Settings\Pat Hall\Favorites\Links\Cenex.url Object is locked skipped
C:\Documents and Settings\Pat Hall\Favorites\Links\Customize Links.url Object is locked skipped
C:\Documents and Settings\Pat Hall\Favorites\Links\Free Hotmail.url Object is locked skipped
C:\Documents and Settings\Pat Hall\Favorites\Links\Microsoft Picture It! Home Page.url Object is locked skipped
C:\Documents and Settings\Pat Hall\Favorites\Links\Wells Fargo Home Page.url Object is locked skipped
C:\Documents and Settings\Pat Hall\Favorites\Links\win.url Object is locked skipped
C:\Documents and Settings\Pat Hall\Favorites\Links\Windows Media.url Object is locked skipped
C:\Documents and Settings\Pat Hall\Favorites\Links\Windows.url Object is locked skipped
C:\Documents and Settings\Pat Hall\Favorites\Links\Yahoo! Groups.url Object is locked skipped
C:\Documents and Settings\Pat Hall\Favorites\MAIL15.url Object is locked skipped
C:\Documents and Settings\Pat Hall\Favorites\MDT Traveler Information - Home Page.url Object is locked skipped
C:\Documents and Settings\Pat Hall\Favorites\Melissa Etheridge Information Network.url Object is locked skipped
C:\Documents and Settings\Pat Hall\Favorites\Microsoft Picture It! Home Page.url Object is locked skipped
C:\Documents and Settings\Pat Hall\Favorites\MSN.com.url Object is locked skipped
C:\Documents and Settings\Pat Hall\Favorites\MSN.url Object is locked skipped
C:\Documents and Settings\Pat Hall\Favorites\Radio Station Guide.url Object is locked skipped
C:\Documents and Settings\Pat Hall\Favorites\ThemeXP Theme Previews.url Object is locked skipped
C:\Documents and Settings\Pat Hall\Favorites\Web Events.url Object is locked skipped
C:\Documents and Settings\Pat Hall\Favorites\Win.url Object is locked skipped
C:\Documents and Settings\Pat Hall\Favorites\Yahoo! Groups.url Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Broderbund Software\Print\The Print Shop\ART\USERART.BDT Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Broderbund Software\Print\The Print Shop\ART\USERART.CDR Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Broderbund Software\Print\The Print Shop\ART\USERART.FRL Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Broderbund Software\Print\The Print Shop\ART\USERART.IDR Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Broderbund Software\Print\The Print Shop\ART\USERART.IDT Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Broderbund Software\Print\The Print Shop\ART\USERART.KDR Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Broderbund Software\Print\The Print Shop\ART\USERART.LDT Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Broderbund Software\Print\The Print Shop\ART\USERART.NDR Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Broderbund Software\Print\The Print Shop\ART\USERART.SD1 Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Broderbund Software\Print\The Print Shop\ART\USERART.SD2 Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Broderbund Software\Print\The Print Shop\ART\USERART.SPR Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Broderbund Software\Print\The Print Shop\ART\USERART.TDR Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Broderbund Software\Print\The Print Shop\ART\USERART.TDT Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Broderbund Software\Print\The Print Shop\PMW.WRK Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Broderbund Software\Print\The Print Shop\PROJECTS\USERPROJ.BDT Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Broderbund Software\Print\The Print Shop\PROJECTS\USERPROJ.CDR Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Broderbund Software\Print\The Print Shop\PROJECTS\USERPROJ.FRL Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Broderbund Software\Print\The Print Shop\PROJECTS\USERPROJ.IDR Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Broderbund Software\Print\The Print Shop\PROJECTS\USERPROJ.IDT Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Broderbund Software\Print\The Print Shop\PROJECTS\USERPROJ.KDR Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Broderbund Software\Print\The Print Shop\PROJECTS\USERPROJ.LDT Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Broderbund Software\Print\The Print Shop\PROJECTS\USERPROJ.NDR Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Broderbund Software\Print\The Print Shop\PROJECTS\USERPROJ.SD1 Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Broderbund Software\Print\The Print Shop\PROJECTS\USERPROJ.SD2 Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Broderbund Software\Print\The Print Shop\PROJECTS\USERPROJ.SPR Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Broderbund Software\Print\The Print Shop\PROJECTS\USERPROJ.TDR Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Broderbund Software\Print\The Print Shop\PROJECTS\USERPROJ.TDT Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\fusioncache.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\GDIPFONTCACHEV1.DAT Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\IconCache.db Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Identities\{2C7A8CD0-78FA-427F-BF86-AE333A20DC52}\Microsoft\Outlook Express\cleanup.log Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Identities\{2C7A8CD0-78FA-427F-BF86-AE333A20DC52}\Microsoft\Outlook Express\Folders.dbx Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Identities\{2C7A8CD0-78FA-427F-BF86-AE333A20DC52}\Microsoft\Outlook Express\Inbox.dbx Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Identities\{2C7A8CD0-78FA-427F-BF86-AE333A20DC52}\Microsoft\Outlook Express\Offline.dbx Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Identities\{2C7A8CD0-78FA-427F-BF86-AE333A20DC52}\Microsoft\Outlook Express\Outbox.dbx Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\FORMS\FRMCACHE.DAT Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_59R.wmdb Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Media Player\wmpfolders.wmdb Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Movie Maker\MEDIATAB1.DAT Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\dizzard1110-msn-com.1 Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\dizzard1110-msn-com.sdf Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\dizzard1110-msn-com_JMF.sdf Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\junk_yard1110-msn-com.1 Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\junk_yard1110-msn-com.2 Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\junk_yard1110-msn-com.3 Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\junk_yard1110-msn-com.sdf Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\junk_yard1110-msn-com_JMF.sdf Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\Mail (dizzard1110@msn.com)\export.log Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\Mail (dizzard1110@msn.com)\import.log Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\Mail (dizzard1110@msn.com)\index Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\Mail (dizzard1110@msn.com)\metadata Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\Mail (junk_yard1110@msn.com)\export.log Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\Mail (junk_yard1110@msn.com)\index Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\Mail (junk_yard1110@msn.com)\metadata Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\Mail (payback1110@msn.com)\export.log Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\Mail (payback1110@msn.com)\index
payback1110
2008-05-04, 22:15
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\Mail (payback1110@msn.com)\metadata Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\Mail (payback1110@msn.com)\stm0x3000007.000 Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\payback1110-msn-com.1b Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\payback1110-msn-com.31 Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\payback1110-msn-com.4f Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\payback1110-msn-com.50 Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\payback1110-msn-com.8 Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\payback1110-msn-com.9 Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\payback1110-msn-com.b Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\payback1110-msn-com.e Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\payback1110-msn-com.sdf Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\MSN\db\payback1110-msn-com_JMF.sdf Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\OFFICE\ONetConfig\e30102f61584f5a798509aacfc9c73d5.sig Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\OFFICE\ONetConfig\e30102f61584f5a798509aacfc9c73d5.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\OFFICE\Spotlight\01033.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\OFFICE\Spotlight\11033.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\OFFICE\Spotlight\131033.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\OFFICE\Spotlight\201033.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\OFFICE\Spotlight\21033.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\OFFICE\Spotlight\81033.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\OFFICE\Spotlight\91033.xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Outlook\CD5AEC4CCC1F784699B0AD747790BBA6.mlog Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Outlook\extend.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Outlook\outlook.msnpst Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Outlook\outlook.ost Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Outlook\outlook0.msnpst Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Outlook\outlook1.msnpst Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Outlook\outlook2.msnpst Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Outlook\outlook3.msnpst Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Outlook\OutlookMSN-00000003.pst Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper1.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper10.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper11.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper12.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper13.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper14.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper15.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper16.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper17.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper18.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper19.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper2.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper20.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper21.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper22.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper23.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper24.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper25.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper26.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper27.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper28.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper29.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper3.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper30.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper31.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper32.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper33.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper34.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper35.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper36.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper37.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper38.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper39.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper4.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper40.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper41.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper42.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper43.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper44.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper45.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper46.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper47.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper48.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper49.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper5.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper50.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper51.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper52.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper53.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper54.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper55.bmp Obj
payback1110
2008-05-04, 22:16
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper56.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper57.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper58.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper59.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper6.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper60.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper61.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper62.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper63.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper64.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper65.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper66.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper67.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper68.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper69.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper7.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper70.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper71.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper72.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper73.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper74.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper75.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper76.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper77.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper78.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper79.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper8.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper80.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper81.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper82.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper83.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper84.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper85.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper86.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper87.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper88.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper89.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper9.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper90.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper91.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper92.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper93.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper94.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper95.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper96.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper97.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper98.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Wallpaper99.bmp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.DTD Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.XML Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\MicroVision Applications\{b845974c-ea69-4683-ae11-af4c2494ce9a}\stax.sy1 Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Powercinema\~PCM_001.BMP Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Application Data\Powercinema\~PCM_002.BMP Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\040308_ypm_ad1_728x90[1].swf Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\102_v2_mul_super_2_text[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\1043-18397-1039-19[1].htm Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\25x25_y2_040104[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\281018_013004_25x25[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\28[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\4-3-04 008[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\alexis201[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\alexis202[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\amdf617737[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\bt_b_dd_2[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\c866690is2g[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\common_blue[1].css Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\d79999fkoq7[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\detach[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\digits[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\fs_pb_fitted_072002b[1].js Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\GetMDRCDByTOC[1].xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\GN_IWant_728x90_20k[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\hd_mobile_1[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\l[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\mantle_lrec_w2m_v1_1[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\music_040607[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\MVC_1500304_4[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\nad010RWL_000316011[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\nad010RWL_000316012[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\newmail1[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\pixel[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\PRServe[1].htm Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\radiopresets[1].asp Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\rc_c4c3w_nw_1[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\rc_c4c3w_se_1[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\rc_wc3c5_ne_1[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\rc_wg2w_ne_1[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\realage[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\shd_l_1[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\shd_r_1[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\ShowFolder[2] Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\ShowLetter[1] Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\ShowLetter[2] Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\ShowLetter[3] Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\ShowLetter[4] Object
payback1110
2008-05-04, 22:16
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\ShowLetter[5] Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\sntc1[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\sort_dn_1[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\spacer[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\src_wc4w_ne_1[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\stw2[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\vern_supernew_01[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\vern_supernew_02[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\XXXX 055[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\056VGPAJ\XXXX 073[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\062904_voiceglo_728x90_v1d[1].swf Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\0919_icon3_25x25[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\102_v2_mul_super_2_logo[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\102_v2_mul_super_2_main[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\282153_021004ratemymortgage21_25x25[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\300x25041804[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\30[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\61104_040602_728x90menuadc_oneclicktag[1].swf Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\abook_add_1[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\affinity_25x25_hfc_3_04_hou[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\alexis203[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\alexis204[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\alexis209[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\alexis210[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\applebeeswhite_728x90[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\bg[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\cc_b_25x25_0803_15[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\clip[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\clip_1[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\ct_25x25[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\ct_lrec_031016[1].js Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\d29483u89ha[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\GetMDRCDByTOC[1].xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\GetMDRCDByTOC[2].xml Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\hfc_728x90_5_20_062304[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\login[1].htm Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\l[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\l[2].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\l[3].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\l[4].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\mailcommonlib[1].js Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\mantle_lrec_w2m_v1_2[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\MVC_1500304_1[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\MVC_1500304_3[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\my.yahoo[2] Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\newml_sm[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\perc1[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\qc[1].js Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\rc_wc3c5_sw_1[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\rc_wg2w_se_1[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\RE_chartB_40yr_728x90[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\seeyouraiseyou[1].swf Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\shift1[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\ShowLetter[1] Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\ShowLetter[2] Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\ShowLetter[3] Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\ShowLetter[4] Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\ShowLetter[5] Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\ShowLetter[6] Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\ShowLetter[7] Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\sp_mobile_1[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\src_wc4w_sw_1[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\tools_label_banner_300x250[1].swf Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\uh_bk[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\O16BSTYB\x[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\022703_zebra_icon[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\100125x25_hb1-srya[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\292028_040804_yahoomail[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\alexis207[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\alexis208[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\arrowdown[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\blkc1[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\bulb1[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\c866690is2g[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\ct_yad_031016[1].js Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\d29483u89ha[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\d79086f4x3w[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\g[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\hfc_728x90_0404[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\inbc1[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\login[1].htm Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\logo_25x25[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\l[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\l[2].gif
payback1110
2008-05-04, 22:17
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\l[3].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\l[4].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\l_lrec_grey[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\mail_blue[1].css Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\man[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\MVC_1500304_2[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\MVC_1500304_5[1].jpg Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\mYahoo_fixedexpando_100x23[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\pbhp_84x28_blu_yahoomail[1].swf Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\PRServe[1].htm Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\Content.IE5\OPI7K9UB\qt_lo_1[1].gif Object is locked skipped
C:\Documents and Settings\Pat Hall\Local Settings\Temporary Internet Files\C