PDA

View Full Version : Spy Sheriff Pop Ups



KanMan
2005-12-29, 06:25
saw a few threads with people having the same problem as me so I thought I'd post.

I was also infected with this Spy Sheriff... it came with a wallpaper that said "SPYWARE INFECTION" in a black box and I was unable to change the wallpaper. Today I got rid of that and most of spy sheriff and the stuff that came with it. All thats wrong now is the overload of pop ups in Firefox 1.5. Every 10 seconds i get poker, who's this star?, car ads, ps3 sweepstakes, and venus match maker ads etc. Each one opens in a new tab which is probably why firefox is not blocking it. Ocassionaly I get a animation ad pop up on the screen with no tab or window just a weird shape with a car ad in it or something. It's really annoying I've tried most everything and I look clean i can't find any fishy things so maybe you can help!?

heres a fresh HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 9:25:14 PM, on 12/28/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbload.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Updater.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\Zachie\My Documents\RegSeeker[1]\RegSeeker\RegSeeker.exe
C:\Documents and Settings\Zachie\My Documents\hijackthis\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dellnet.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [iRiver Updater] \Updater.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
O20 - Winlogon Notify: msupdate - C:\WINDOWS\SYSTEM32\msupdate32.dll
O20 - Winlogon Notify: WB - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\fastload.dll
O20 - Winlogon Notify: WebCheck - C:\WINDOWS\system32\l2j8lc1u1f.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Intel(R) NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe (file missing)
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe

KanMan
2005-12-29, 20:01
bump

i know it probably looks clean but there has to be something
hiding about :bigthumb:

KanMan
2005-12-30, 06:37
bump

plz anyone this is basically my last resort

LonnyRJones
2005-12-30, 15:20
Hi Kenman

Did you run smitrem while in safe mode as mentioned here ?
http://forums.spybot.info/showthread.php?t=1316
If not do that , those infections can infect a lagitamat windows file that needs to be cleaned, post the smitfiles.txt when finished.



Start Hijackthis and place a check next to these items If there.
O20 - Winlogon Notify: msupdate - C:\WINDOWS\SYSTEM32\msupdate32.dll
Hit fix checked and close Hijackthis.
Restart the PC
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Download L2mfix (new version) from one of these two locations:
http://www.atribune.org/downloads/l2mfix.exe
http://www.downloads.subratam.org/l2mfix.exe
Save the file to your desktop and double click l2mfix.exe. Click the Install button to extract the files and follow the prompts, then open the newly added l2mfix folder on your desktop. Double click l2mfix.bat and select option #1 for Run Find Log by typing 1 and then pressing enter. This will scan your computer and it may appear nothing is happening, then, after a minute or 2, notepad will open with a log. Copy the contents of that log and paste it into this thread.
Note:
If you receive while running option #1, an error similar to: ''C:\windows\system32\cmd.exe
C:\windows\system32\autoexec.nt the system file is not suitable for running ms-dos and microsoft windows applications. choose close to terminate the application.."...then please use option 5 or the web page link in the l2mfix folder to solve this error condition. do not run the fix portion without fixing this first.
If it is to large to post in one reply do so in two please

KanMan
2005-12-31, 14:01
I knew u'd help Lonny!!!! thanks :bigthumb:

smitrem log:


smitRem © log file
version 2.8

by noahdfear


Microsoft Windows XP [Version 5.1.2600]
The current date is: Sat 12/31/2005
The current time is: 0:00:25.50

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

checking for ShudderLTD key

ShudderLTD key not present!

checking for PSGuard.com key


PSGuard.com key not present!


checking for WinHound.com key


WinHound.com key not present!

spyaxe uninstaller NOT present
Winhound uninstaller NOT present
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Existing Pre-run Files


~~~ Program Files ~~~



~~~ Shortcuts ~~~



~~~ Favorites ~~~



~~~ system32 folder ~~~



~~~ Icons in System32 ~~~



~~~ Windows directory ~~~



~~~ Drive root ~~~


~~~ Miscellaneous Files/folders ~~~




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03
Copyright(C) 2002-2003 Craig.Peacock@beyondlogic.org
Killing PID 1008 'explorer.exe'

Starting registry repairs

Deleting files


Remaining Post-run Files


~~~ Program Files ~~~



~~~ Shortcuts ~~~



~~~ Favorites ~~~



~~~ system32 folder ~~~



~~~ Icons in System32 ~~~



~~~ Windows directory ~~~



~~~ Drive root ~~~



~~~ Miscellaneous Files/folders ~~~




~~~ Wininet.dll ~~~

CLEAN! :)

KanMan
2005-12-31, 14:03
L2MFIX LOG

L2MFIX find log 122705
These are the registry keys present
**********************************************************************************
Winlogon/notify:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,\
6c,00,00,00
"Logoff"="ChainWlxLogoffEvent"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Logoff"="CryptnetWlxLogoffEvent"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
"DLLName"="cscdll.dll"
"Logon"="WinlogonLogonEvent"
"Logoff"="WinlogonLogoffEvent"
"ScreenSaver"="WinlogonScreenSaverEvent"
"Startup"="WinlogonStartupEvent"
"Shutdown"="WinlogonShutdownEvent"
"StartShell"="WinlogonStartShellEvent"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\msupdate]
"DllName"="msupdate32.dll"
"Startup"="WinlogonStartupEvent"
"Asynchronous"=dword:00000001
"Impersonate"=dword:00000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
"DLLName"="wlnotify.dll"
"Logon"="SCardStartCertProp"
"Logoff"="SCardStopCertProp"
"Lock"="SCardSuspendCertProp"
"Unlock"="SCardResumeCertProp"
"Enabled"=dword:00000001
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
"Asynchronous"=dword:00000000
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Impersonate"=dword:00000000
"StartShell"="SchedStartShell"
"Logoff"="SchedEventLogOff"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
"Logoff"="WLEventLogoff"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001
"DllName"=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
"DLLName"="WlNotify.dll"
"Lock"="SensLockEvent"
"Logon"="SensLogonEvent"
"Logoff"="SensLogoffEvent"
"Safe"=dword:00000001
"MaxWait"=dword:00000258
"StartScreenSaver"="SensStartScreenSaverEvent"
"StopScreenSaver"="SensStopScreenSaverEvent"
"Startup"="SensStartupEvent"
"Shutdown"="SensShutdownEvent"
"StartShell"="SensStartShellEvent"
"PostShell"="SensPostShellEvent"
"Disconnect"="SensDisconnectEvent"
"Reconnect"="SensReconnectEvent"
"Unlock"="SensUnlockEvent"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Shell Extensions]
"Asynchronous"=dword:00000000
"DllName"="C:\\WINDOWS\\system32\\lvl6093se.dll"
"Impersonate"=dword:00000000
"Logon"="WinLogon"
"Logoff"="WinLogoff"
"Shutdown"="WinShutdown"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
"Asynchronous"=dword:00000000
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Impersonate"=dword:00000000
"Logoff"="TSEventLogoff"
"Logon"="TSEventLogon"
"PostShell"="TSEventPostShell"
"Shutdown"="TSEventShutdown"
"StartShell"="TSEventStartShell"
"Startup"="TSEventStartup"
"MaxWait"=dword:00000258
"Reconnect"="TSEventReconnect"
"Disconnect"="TSEventDisconnect"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WB]
"Asynchronous"=dword:00000000
"DllName"="C:\\PROGRA~1\\Stardock\\OBJECT~1\\WINDOW~1\\fastload.dll"
"Startup"="StartSys"
"Logon"="StartWB"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
"DLLName"="wlnotify.dll"
"Logon"="RegisterTicketExpiredNotificationEvent"
"Logoff"="UnregisterTicketExpiredNotificationEvent"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

**********************************************************************************
useragent:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]
"{707AA1FA-88A5-94E7-49AE-FB2D3633FDF3}"=""

**********************************************************************************
Shell Extension key:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{BD472F60-27FA-11cf-B8B4-444553540000}"="Compressed (zipped) Folder Right Drag Handler"
"{888DCA60-FC0A-11CF-8F0F-00C04FD7D062}"="Compressed (zipped) Folder SendTo Target"
"{8DD448E6-C188-4aed-AF92-44956194EB1F}"="Windows Media Player Play as Playlist Context Menu Handler"
"{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"="Windows Media Player Burn Audio CD Context Menu Handler"
"{F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}"="Windows Media Player Add to Playlist Context Menu Handler"
"{640167b4-59b0-47a6-b335-a6b3c0695aea}"="Portable Media Devices"
"{cc86590a-b60a-48e6-996b-41d25ed39a1e}"="Portable Media Devices Menu"
"{B41DB860-8EE4-11D2-9906-E49FADC173CA}"="WinRAR shell extension"
"{BDEADF00-C265-11D0-BCED-00A0C90AB50F}"="Web Folders"
"{42042206-2D85-11D3-8CFF-005004838597}"="Microsoft Office HTML Icon Handler"
"{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}"="Shell Extensions for RealOne Player"
"{5F327514-6C5E-4d60-8F16-D07FA08A78ED}"="Auto Update Property Sheet Extension"
"{2F5AC606-70CF-461C-BFE1-734234536262}"="WindowBlinds CPL Extension"
"{B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF}"="iTunes"
"{9DAECC89-B1B8-4BA8-BD7B-6827A83C3621}"="MuVo NX-TX Media Explorer"
"{21569614-B795-46b1-85F4-E737A8DC09AD}"="Shell Search Band"
"{514AC3AF-D8B0-4992-B3AF-293C52F5E30B}"=""
"{E435B177-99C8-42D8-BC55-517484CCDF7E}"=""
"{3231C778-1C8F-46B8-9A5B-2BADB450823C}"=""
"{6BAF5293-0EDC-4374-901B-C9E95E2DD870}"=""
"{C61B790D-BE64-4C35-9EC4-186410210822}"=""
"{B32769A7-A83D-4B51-BF47-1F9382F49FF1}"=""
"{6FAA6132-3F8D-479A-987F-49BF39F12231}"=""
"{59105604-1409-4D02-9A1C-C0D587743E98}"=""

**********************************************************************************
HKEY ROOT CLASSIDS:
Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{514AC3AF-D8B0-4992-B3AF-293C52F5E30B}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{514AC3AF-D8B0-4992-B3AF-293C52F5E30B}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{514AC3AF-D8B0-4992-B3AF-293C52F5E30B}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{514AC3AF-D8B0-4992-B3AF-293C52F5E30B}\InprocServer32]
@="C:\\WINDOWS\\system32\\wqnetmgr.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{3231C778-1C8F-46B8-9A5B-2BADB450823C}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{3231C778-1C8F-46B8-9A5B-2BADB450823C}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{3231C778-1C8F-46B8-9A5B-2BADB450823C}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{3231C778-1C8F-46B8-9A5B-2BADB450823C}\InprocServer32]
@="C:\\WINDOWS\\system32\\DWINTF.DLL"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{B32769A7-A83D-4B51-BF47-1F9382F49FF1}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{B32769A7-A83D-4B51-BF47-1F9382F49FF1}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{B32769A7-A83D-4B51-BF47-1F9382F49FF1}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{B32769A7-A83D-4B51-BF47-1F9382F49FF1}\InprocServer32]
@="C:\\WINDOWS\\system32\\KEDLT1.DLL"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{6FAA6132-3F8D-479A-987F-49BF39F12231}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{6FAA6132-3F8D-479A-987F-49BF39F12231}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{6FAA6132-3F8D-479A-987F-49BF39F12231}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{6FAA6132-3F8D-479A-987F-49BF39F12231}\InprocServer32]
@="C:\\WINDOWS\\system32\\guard.tmp"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{59105604-1409-4D02-9A1C-C0D587743E98}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{59105604-1409-4D02-9A1C-C0D587743E98}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{59105604-1409-4D02-9A1C-C0D587743E98}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{59105604-1409-4D02-9A1C-C0D587743E98}\InprocServer32]
@="C:\\WINDOWS\\system32\\petorsvc.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{514AC3AF-D8B0-4992-B3AF-293C52F5E30B}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{514AC3AF-D8B0-4992-B3AF-293C52F5E30B}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{514AC3AF-D8B0-4992-B3AF-293C52F5E30B}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{514AC3AF-D8B0-4992-B3AF-293C52F5E30B}\InprocServer32]
@="C:\\WINDOWS\\system32\\wqnetmgr.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{3231C778-1C8F-46B8-9A5B-2BADB450823C}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{3231C778-1C8F-46B8-9A5B-2BADB450823C}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{3231C778-1C8F-46B8-9A5B-2BADB450823C}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{3231C778-1C8F-46B8-9A5B-2BADB450823C}\InprocServer32]
@="C:\\WINDOWS\\system32\\DWINTF.DLL"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{B32769A7-A83D-4B51-BF47-1F9382F49FF1}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{B32769A7-A83D-4B51-BF47-1F9382F49FF1}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{B32769A7-A83D-4B51-BF47-1F9382F49FF1}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{B32769A7-A83D-4B51-BF47-1F9382F49FF1}\InprocServer32]
@="C:\\WINDOWS\\system32\\KEDLT1.DLL"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{6FAA6132-3F8D-479A-987F-49BF39F12231}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{6FAA6132-3F8D-479A-987F-49BF39F12231}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{6FAA6132-3F8D-479A-987F-49BF39F12231}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{6FAA6132-3F8D-479A-987F-49BF39F12231}\InprocServer32]
@="C:\\WINDOWS\\system32\\guard.tmp"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{59105604-1409-4D02-9A1C-C0D587743E98}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{59105604-1409-4D02-9A1C-C0D587743E98}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{59105604-1409-4D02-9A1C-C0D587743E98}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{59105604-1409-4D02-9A1C-C0D587743E98}\InprocServer32]
@="C:\\WINDOWS\\system32\\petorsvc.dll"
"ThreadingModel"="Apartment"

**********************************************************************************
Files Found are not all bad files:

C:\WINDOWS\SYSTEM32\
04cgqrom.dll Tue Dec 27 2005 4:59:34p A.... 41,984 41.00 K
bassmod.dll Fri Nov 25 2005 4:10:44p A.... 34,308 33.50 K
browseui.dll Wed Nov 23 2005 5:06:34p A.... 1,022,464 998.50 K
bwhci.dll Sat Dec 31 2005 3:24:56a ..S.R 234,272 228.78 K
cdfview.dll Thu Oct 20 2005 7:39:26p A.... 151,040 147.50 K
d80m0i~1.dll Fri Dec 30 2005 11:57:02p ..S.R 234,743 229.24 K
danim.dll Fri Nov 4 2005 7:16:24p A.... 1,054,208 1.00 M
ddauth.dll Sat Dec 31 2005 12:16:26a ..S.R 234,272 228.78 K
dktmsft3.dll Sat Dec 31 2005 3:41:30a ..S.R 234,272 228.78 K
dpl100.dll Thu Oct 27 2005 11:37:46a A.... 86,016 84.00 K
dpu10.dll Thu Oct 27 2005 11:37:44a A.... 294,912 288.00 K
dpu11.dll Thu Oct 27 2005 11:37:44a A.... 294,912 288.00 K
dpugui10.dll Thu Oct 27 2005 11:37:48a A.... 53,248 52.00 K
dpugui11.dll Thu Oct 27 2005 11:37:46a A.... 593,920 580.00 K
dpus11.dll Thu Oct 27 2005 11:37:44a A.... 339,968 332.00 K
dpv11.dll Thu Oct 27 2005 11:37:44a A.... 57,344 56.00 K
dtu100.dll Thu Oct 27 2005 11:37:44a A.... 200,704 196.00 K
dxtrans.dll Thu Oct 20 2005 7:39:28p A.... 205,312 200.50 K
enpul1~1.dll Thu Dec 29 2005 8:29:46p ..S.R 235,082 229.57 K
esent.dll Thu Oct 20 2005 2:20:04p A.... 1,082,368 1.03 M
extmgr.dll Thu Oct 20 2005 7:39:28p ..... 55,808 54.50 K
gdi32.dll Wed Oct 5 2005 7:09:36p A.... 280,064 273.50 K
gpr2l3~1.dll Thu Dec 29 2005 11:52:42a ..S.R 234,272 228.78 K
hr0u05~1.dll Wed Dec 28 2005 8:41:06p ..S.R 235,177 229.66 K
i6240g~1.dll Wed Dec 28 2005 6:06:54p ..S.R 234,698 229.20 K
iepeers.dll Thu Oct 20 2005 7:39:28p A.... 251,392 245.50 K
ijm32.dll Sat Dec 31 2005 3:42:24a ..S.R 234,272 228.78 K
il32_32.dll Sat Dec 31 2005 3:34:40a ..S.R 234,272 228.78 K
inseng.dll Thu Oct 20 2005 7:39:28p A.... 96,256 94.00 K
ipetcomm.dll Sat Dec 31 2005 3:11:36a ..S.R 234,272 228.78 K
isjp81k.dll Sat Dec 31 2005 4:20:14a ..S.R 234,272 228.78 K
itrdbg32.dll Sat Dec 31 2005 4:05:28a ..S.R 234,272 228.78 K
iuq.dll Sat Dec 31 2005 2:56:46a ..S.R 234,272 228.78 K
izsecsvc.dll Sat Dec 31 2005 4:35:44a ..S.R 234,272 228.78 K
k6pmlg~1.dll Thu Dec 29 2005 9:14:42p ..S.R 235,448 229.93 K
kedlt1.dll Thu Dec 29 2005 9:07:34a ..S.R 234,272 228.78 K
l6r00g~1.dll Thu Dec 29 2005 12:22:28a ..S.R 234,272 228.78 K
m0ju0a~1.dll Fri Dec 30 2005 12:32:42p ..S.R 235,182 229.67 K
mhpmsnsv.dll Sat Dec 31 2005 12:04:14a ..S.R 234,272 228.78 K
mshtml.dll Wed Nov 23 2005 5:06:34p A.... 3,015,680 2.88 M
mshtmled.dll Thu Oct 20 2005 7:39:30p A.... 448,512 438.00 K
msrating.dll Thu Oct 20 2005 7:39:30p A.... 146,432 143.00 K
mstime.dll Thu Oct 20 2005 7:39:30p A.... 530,944 518.50 K
msupda~1.dll Wed Dec 28 2005 2:12:52a ..... 473,088 462.00 K
petorsvc.dll Fri Dec 30 2005 12:32:42p ..S.R 234,272 228.78 K
pjdgen.dll Sat Dec 31 2005 4:38:44a ..S.R 234,272 228.78 K
pngfilt.dll Thu Oct 20 2005 7:39:30p A.... 39,424 38.50 K
pxnppagn.dll Sat Dec 31 2005 3:45:46a ..S.R 234,272 228.78 K
q8ps0i~1.dll Thu Dec 29 2005 12:21:28a ..S.R 235,050 229.54 K
rbsapi32.dll Sat Dec 31 2005 3:37:58a ..S.R 234,272 228.78 K
rcvpsp.dll Sat Dec 31 2005 4:23:56a ..S.R 234,272 228.78 K
repair~1.dll Tue Dec 27 2005 5:05:50p A.... 85,504 83.50 K
shdocvw.dll Wed Nov 30 2005 7:59:30p A.... 1,492,480 1.42 M
shlwapi.dll Thu Oct 20 2005 7:39:30p A.... 473,600 462.50 K
spmsg.dll Wed Oct 12 2005 3:12:26p ..... 14,048 13.72 K
ulrsdpia.dll Sat Dec 31 2005 4:47:50a ..S.R 234,272 228.78 K
urlmon.dll Fri Nov 4 2005 7:16:28p A.... 609,280 595.00 K
wininet.dll Thu Oct 20 2005 7:39:30p A.... 658,432 643.00 K
wqnetmgr.dll Fri Dec 30 2005 11:59:20p ..S.R 234,272 228.78 K
wwnsta.dll Sat Dec 31 2005 4:32:50a ..S.R 234,272 228.78 K

60 items found: 60 files (29 H/S), 0 directories.
Total of file sizes: 20,983,016 bytes 20.01 M
Locate .tmp files:

C:\WINDOWS\SYSTEM32\
guard.tmp Sat Dec 31 2005 4:15:30a ..S.R 234,272 228.78 K

1 item found: 1 file (1 H/S), 0 directories.
Total of file sizes: 234,272 bytes 228.78 K
**********************************************************************************
Directory Listing of system files:
Volume in drive C has no label.
Volume Serial Number is 0CF3-0D62

Directory of C:\WINDOWS\System32

KanMan
2005-12-31, 14:04
12/31/2005 04:54 AM <DIR> ..
12/31/2005 04:54 AM <DIR> .
12/31/2005 04:47 AM 234,272 ULRSDPIA.DLL
12/31/2005 04:38 AM 234,272 pjdgen.dll
12/31/2005 04:35 AM 234,272 izsecsvc.dll
12/31/2005 04:32 AM 234,272 wwnsta.dll
12/31/2005 04:23 AM 234,272 RCVPSP.DLL
12/31/2005 04:20 AM 234,272 isjp81k.dll
12/31/2005 04:15 AM 234,272 guard.tmp
12/31/2005 04:05 AM 234,272 itrdbg32.dll
12/31/2005 03:45 AM 234,272 PXNPPAGN.DLL
12/31/2005 03:42 AM 234,272 ijm32.dll
12/31/2005 03:41 AM 234,272 dktmsft3.dll
12/31/2005 03:37 AM 234,272 rBsapi32.dll
12/31/2005 03:34 AM 234,272 IL32_32.DLL
12/31/2005 03:24 AM 234,272 bwhci.dll
12/31/2005 03:11 AM 234,272 ipetcomm.dll
12/31/2005 02:56 AM 234,272 iuq.dll
12/31/2005 12:16 AM 234,272 DDAUTH.DLL
12/31/2005 12:04 AM 234,272 MhPMSNSv.dll
12/30/2005 11:59 PM 234,272 wqnetmgr.dll
12/30/2005 11:57 PM 234,743 d80m0id1e80.dll
12/30/2005 12:32 PM 234,272 petorsvc.dll
12/30/2005 12:32 PM 235,182 m0ju0a19ed.dll
12/29/2005 09:14 PM 235,448 k6pmlg7116.dll
12/29/2005 08:29 PM 235,082 enpul1791.dll
12/29/2005 11:52 AM 234,272 gpr2l39o1.dll
12/29/2005 09:07 AM 234,272 KEDLT1.DLL
12/29/2005 12:22 AM 234,272 l6r00g9me6.dll
12/29/2005 12:21 AM 235,050 q8ps0i77e8.dll
12/28/2005 09:08 PM <DIR> DLLCACHE
12/28/2005 08:41 PM 235,177 hr0u05d9e.dll
12/28/2005 06:06 PM 234,698 i6240gfqe62e0.dll
12/28/2005 05:38 PM 41,984 Thumbs.db
09/12/2004 09:16 AM 56 57AE4C6009.sys
07/08/2004 07:29 PM 1,020 Yfd5C444.ibh
07/08/2004 07:22 PM 1,020 RpvV.u1t
07/07/2004 05:01 PM 1,104 KjgZwx4.9cf
07/07/2004 05:01 PM 1,104 RzmpMn.0ns
07/07/2004 05:01 PM 1,104 WavQR2.92p
07/07/2004 05:00 PM 1,104 Oqr38O.mwl
07/07/2004 05:00 PM 1,104 Bax65.od5
07/07/2004 05:00 PM 1,104 Nyqw4WbE.au2
07/07/2004 05:00 PM 1,104 FisG12vn.710
07/07/2004 05:00 PM 1,104 Pch44b.uak
07/07/2004 05:00 PM 1,104 TrxYw.2v8
07/07/2004 04:59 PM 1,104 Mvuc1.6d3
07/07/2004 04:59 PM 1,104 MhdG0.5y8
07/07/2004 04:59 PM 1,104 HwuwLEk.ur7
07/07/2004 04:59 PM 1,104 Xzshu9u8.380
07/07/2004 04:59 PM 1,104 Wit2N.f4n
07/07/2004 04:59 PM 1,104 YcxLM0.704
07/07/2004 04:58 PM 1,104 Ezu9.rf6
07/07/2004 04:58 PM 1,104 OwjmJ.k9k
07/07/2004 04:58 PM 1,104 MhcG9.gy8
07/07/2004 04:58 PM 1,104 EwnnW4.m71
07/07/2004 04:58 PM 1,104 PskZF.pno
07/07/2004 04:58 PM 1,104 Rormw.u80
07/07/2004 04:57 PM 1,104 Riii.a99
07/07/2004 04:57 PM 1,104 Zob10Ck.023
07/07/2004 04:57 PM 1,104 QjlrXhe2.4e3
07/07/2004 04:57 PM 1,104 Iyc1.tms
07/07/2004 04:57 PM 1,020 Cby6O.pe5
07/07/2004 04:57 PM 1,104 Bdka1zT9.kpq
07/07/2004 04:56 PM 1,104 Bwgd.07h
07/07/2004 04:56 PM 1,104 Usy6x.9w6
07/07/2004 04:56 PM 1,104 Gvk8.0c9
07/07/2004 04:56 PM 1,020 Jzxzogmw.u80
07/07/2004 04:56 PM 1,104 WwvUgt8t.73t
07/07/2004 04:56 PM 1,104 Pesus7.0s9
07/07/2004 04:55 PM 1,104 JwjUXV.w4v
07/07/2004 04:55 PM 1,104 Yvk4sC2.396
07/07/2004 04:55 PM 1,104 Lcl7.l6b
07/07/2004 04:55 PM 1,104 Deu48uvR.dqt
07/07/2004 04:55 PM 1,104 Jme7.032
07/07/2004 04:55 PM 1,104 MddkVTU3.1i7
07/07/2004 04:54 PM 1,104 RtmBH.ro6
07/07/2004 04:54 PM 1,104 Otqca05a.2p1
07/07/2004 04:54 PM 1,104 WrnqKX3.ghw
07/07/2004 04:54 PM 1,104 Udvd1.713
07/07/2004 04:54 PM 1,104 Bts74i.k9s
07/07/2004 04:54 PM 1,104 Uwx5Bu7.b6k
07/07/2004 04:53 PM 1,104 MzmYBy9.5z1
07/07/2004 04:53 PM 1,104 Jpse6V9.75b
07/07/2004 04:53 PM 1,104 Ilvj332R.121
07/07/2004 04:53 PM 1,104 FxfEf.n2k
07/07/2004 04:53 PM 1,104 Kuk6467R.sgr
07/07/2004 04:53 PM 1,104 Wwe8XM81.f08
07/07/2004 04:52 PM 1,104 Dqq5.45k
07/07/2004 04:52 PM 1,104 Bzw64.nc5
07/07/2004 04:52 PM 1,104 Elzkg.zfi
07/07/2004 04:52 PM 1,104 Gfw8y8o.c44
07/07/2004 04:52 PM 1,104 Ytp7mZ4i.jyr
07/07/2004 04:52 PM 1,104 KifYWx.48c
07/07/2004 04:51 PM 1,104 Mcab.x3w
07/07/2004 04:51 PM 1,104 Ukxa8YF.91f
07/07/2004 04:51 PM 1,104 Xma19AI.023
07/07/2004 04:51 PM 1,104 Gbor.033
07/07/2004 04:51 PM 1,104 PbeK.c33
07/07/2004 04:51 PM 1,104 KsgIG.hv2
07/07/2004 04:50 PM 1,104 Nqap.451
07/07/2004 04:50 PM 1,104 EzaXM81f.08i
07/07/2004 04:50 PM 1,104 Nnm181.5ke
07/07/2004 04:50 PM 1,104 CutB4j.lat
07/07/2004 04:50 PM 1,104 Ecic2q2.a59
07/07/2004 04:50 PM 1,104 MkqkP653.vg1
07/07/2004 04:49 PM 1,104 Weu48uvK.djt
07/07/2004 04:49 PM 1,104 EjmY3P.9o3
07/07/2004 04:49 PM 1,104 LwxE.au3
07/07/2004 04:49 PM 1,104 ZbcSGyXg.86d
07/07/2004 04:49 PM 1,104 IiqIjx.io6
07/07/2004 04:49 PM 1,104 YuzT4tE3.497
07/07/2004 04:48 PM 1,104 Flk8.it6
07/07/2004 04:48 PM 1,020 Mopf7M.ktj
07/07/2004 04:14 PM 1,020 IpuFmd.017
07/07/2004 12:13 PM 1,104 Nqzo.453
07/07/2004 12:13 PM 1,104 AqnP19.15k
07/07/2004 12:01 PM 1,104 TztYi22.7f4
07/07/2004 12:01 PM 1,104 Kuk413UR.sg6
07/07/2004 12:01 PM 1,104 Zyv5.lmt
07/07/2004 12:01 PM 1,104 Wls09TH.z92
07/07/2004 12:01 PM 1,104 Ugy1.7d3
07/07/2004 12:00 PM 1,104 Fak3E.9lw
07/07/2004 12:00 PM 1,104 Ugx1.7d3
07/07/2004 12:00 PM 1,104 NanZCz0.5z2
07/07/2004 12:00 PM 1,104 Auec9sYQ.ope
07/07/2004 12:00 PM 1,104 Zmg4V.7tb
07/06/2004 03:42 PM 1,104 XdlD.746
07/06/2004 03:42 PM 1,104 Zcg0E0.cr0
07/06/2004 03:42 PM 1,104 Nlr4Qt6.jq0
07/06/2004 03:42 PM 1,104 Bfft3c.60z
07/06/2004 03:42 PM 1,104 Gtyc.d74
07/06/2004 03:41 PM 1,104 Kbk6.46a
07/06/2004 03:41 PM 1,104 Cgj1HFg.u2l
07/06/2004 03:41 PM 1,104 ZbcZH9E2.18d
07/06/2004 03:41 PM 1,104 Qvy4wbKa.t26
07/06/2004 03:41 PM 1,104 LgbF9.mx8
07/06/2004 03:41 PM 1,104 SsrPbOr.p61
07/06/2004 03:40 PM 1,104 HlguvKDJ.tq6
07/06/2004 03:40 PM 1,104 NidH0h.y89
07/06/2004 03:40 PM 1,104 Yvk1SD.01y
07/06/2004 03:40 PM 1,104 Lpjxzohn.xu8
07/06/2004 03:40 PM 1,104 HisQF.9nx
07/06/2004 03:40 PM 1,104 UgpOUeb1.6c2
07/06/2004 03:39 PM 1,104 Oowo51o.uw7
07/06/2004 03:39 PM 1,104 Gqg29g6.5oc
07/06/2004 03:39 PM 1,104 PbkPVYWx.4wc
07/06/2004 03:39 PM 1,020 ZtmRpqfy.e5l
07/06/2004 03:39 PM 1,104 SvnDJ.tq6
07/06/2004 03:38 PM 1,104 HqiRsgR.x2v
07/06/2004 03:38 PM 1,104 NseR.4yi
07/06/2004 03:38 PM 1,104 Saq27QR.292
07/06/2004 03:38 PM 1,104 Wii2egCV.beb
07/06/2004 03:38 PM 1,104 AnsWX424.8st
07/06/2004 03:38 PM 1,104 AozDF.7n7
07/06/2004 03:37 PM 1,104 Ssr3C3S.p39
07/06/2004 03:37 PM 1,104 Ncr0H3G.9nx
07/06/2004 03:37 PM 1,104 Hbuz8.952
07/06/2004 03:37 PM 1,104 MidH0h.y89
07/06/2004 03:37 PM 1,104 Yup7m74i.k9r
07/06/2004 03:37 PM 1,104 Zdysu3.c3s
07/06/2004 03:36 PM 1,104 HyyfQ56.fxd
07/06/2004 03:36 PM 1,104 LddkVS73.0i7
07/06/2004 03:36 PM 1,104 Iluj2396.821
07/06/2004 03:36 PM 1,104 Wyz5Dw7d.740
07/06/2004 03:36 PM 1,104 FneUF.11t
07/06/2004 03:36 PM 1,104 AmiV5.4v4
07/06/2004 03:35 PM 1,104 Gib6.121
07/06/2004 03:35 PM 1,104 Rvyu8.u83
07/06/2004 03:35 PM 1,104 Irqy.95z
07/06/2004 03:35 PM 1,104 Elk8.i76
07/06/2004 03:35 PM 1,104 Awa821.dl1
07/06/2004 03:35 PM 1,104 Zddr2.b59
07/06/2004 03:34 PM 1,104 Azh9.0p0
07/06/2004 03:34 PM 1,104 Sddkh.a59
07/06/2004 03:34 PM 1,104 IbbzXZ.525
07/06/2004 03:34 PM 1,104 RzaQ75.3wh
07/06/2004 03:34 PM 1,104 ZpmO18.14j
07/06/2004 03:34 PM 1,104 Uim6629.g65
07/06/2004 03:33 PM 1,104 GxxEP55.dwc
07/06/2004 03:33 PM 1,104 Oekur.49r
07/06/2004 03:33 PM 1,104 VcalZ3h.jfy
07/06/2004 03:33 PM 1,104 IdyC8.jt6
07/06/2004 03:33 PM 1,104 JzwyNGmw.t70
07/06/2004 03:33 PM 1,104 Uhug.j23
07/06/2004 03:32 PM 1,104 Eedc5.010
07/06/2004 03:32 PM 1,104 EwdD545.jci
07/06/2004 03:31 PM 1,104 Itlsg6x.9w5
07/06/2004 03:31 PM 1,104 Npro8n.tv6
07/06/2004 03:31 PM 1,104 DfgD.k1i
07/06/2004 03:31 PM 1,104 Onkda06.b2j
07/06/2004 03:31 PM 1,104 Gow2O1x4.8tv
07/06/2004 03:30 PM 1,104 XnkM3U.2k2
07/06/2004 03:30 PM 1,104 Lnz8.043
07/06/2004 03:30 PM 1,104 Wbna.t26
07/06/2004 03:30 PM 1,104 NpiXKn.kl9
07/06/2004 03:30 PM 1,104 Ztdb9rfP.55e
07/06/2004 01:01 PM 1,020 Obpada0.6b2
07/06/2004 01:00 PM 1,020 Avx7It9.b9r
07/06/2004 01:00 PM 1,020 Tgtehf2U.24u
07/06/2004 01:00 PM 1,104 Iqgxh.22w
07/06/2004 12:59 PM 1,104 Zaq26PR.5z4
07/06/2004 12:59 PM 1,104 XlpTV413.76r
07/06/2004 12:59 PM 1,104 Sjj6.bza
07/06/2004 12:59 PM 1,104 BxkM91fC.8ju
07/06/2004 12:06 PM 1,104 IdzC8.ju6
07/06/2004 12:06 PM 1,104 Vqd2r8z.8pd
07/06/2004 12:06 PM 1,104 Egz5.010
07/06/2004 12:06 PM 1,104 Vxqfs8s.73t
07/06/2004 12:06 PM 1,104 Jti31i7P.qf6
07/06/2004 12:05 PM 1,104 Nzi25X.uv3
07/06/2004 12:05 PM 1,104 UmdD.408
07/06/2004 12:05 PM 1,104 GpoWqfXV.1u8
07/06/2004 12:05 PM 1,104 IsvjOQ2Y.15l
07/06/2004 12:05 PM 1,104 NffmXUW4.147
07/06/2004 12:04 PM 1,104 Avfd.9tg
07/06/2004 12:04 PM 1,104 PkfjC6.aya
07/06/2004 12:04 PM 1,104 RuvJ.zs2
07/06/2004 12:04 PM 1,104 GbcZN9E2.18k
07/06/2004 12:04 PM 1,104 Xxxvhu8u.838
07/06/2004 12:03 PM 1,104 AjiQrg6.w9v
07/06/2004 12:03 PM 1,104 Bin9m.x88
07/06/2004 12:03 PM 1,104 Oux3UaJz.s26
07/06/2004 12:03 PM 1,104 Qly7M.luj
07/06/2004 12:03 PM 1,104 CykN9EgC.8ku
07/06/2004 12:02 PM 1,104 Vcz3hRG.a5y
07/06/2004 12:02 PM 1,104 HyygQ56.fxe
07/06/2004 12:02 PM 1,104 Fbnq.023
07/06/2004 12:02 PM 1,104 Cno8R4y.j23
07/06/2004 12:02 PM 1,104 Caga2p.1y4
07/06/2004 12:01 PM 1,104 Vnn7e.cet
07/06/2004 12:01 PM 1,104 KeecACR.36a
07/06/2004 12:01 PM 1,104 Pabie.y48
07/06/2004 12:01 PM 1,104 Wbe6.c2j
07/06/2004 12:01 PM 1,104 GftmBT.zjh
07/06/2004 12:00 PM 1,104 DrvZ.b63
07/06/2004 12:00 PM 1,104 Zia3JY.359
07/06/2004 12:00 PM 1,104 Vurk.h3q
07/06/2004 12:00 PM 1,104 Lap9F2.19l
07/06/2004 12:00 PM 1,104 OmsM.r0q
07/06/2004 11:59 AM 1,104 Uucu8K80.d9t
07/06/2004 11:59 AM 1,104 Cop5.44i
07/06/2004 11:59 AM 1,104 Cagz2O.1x4
07/06/2004 11:59 AM 1,104 Pdh45c.vb4
07/06/2004 11:59 AM 1,104 ItlrfRw.2v5
07/06/2004 11:58 AM 1,104 TysNP.181
07/06/2004 11:58 AM 1,104 JfjEOLm7.mru
07/06/2004 11:58 AM 1,104 Shvxv8.180
07/06/2004 11:58 AM 1,104 Oar94xdM.0v3
07/06/2004 11:58 AM 1,104 IdeB.p02
07/06/2004 11:57 AM 1,104 Vamz.s26
07/06/2004 11:57 AM 1,104 VdlU1t.4ak
07/06/2004 11:57 AM 1,104 EknZ4Q.9o3
07/06/2004 11:57 AM 1,104 WvaUa.3ys
07/06/2004 11:57 AM 1,020 Xjj3ghDW.cfc
07/06/2004 11:57 AM 1,104 PjuRoH.8fd
07/06/2004 11:56 AM 1,020 Mopf7L.k7j
07/06/2004 11:56 AM 1,020 Zfe5C544.ibh
07/06/2004 11:56 AM 1,104 TznZ525X.uv3
07/06/2004 11:56 AM 1,020 Xed5B43.lha
07/06/2004 11:55 AM 1,020 Jpd5le.354
07/06/2004 11:55 AM 1,020 ZviL80eA.7h7
07/06/2004 11:54 AM 1,104 Ddl1E.t1j
07/06/2004 11:54 AM 1,020 AknB23x.6w2
07/06/2004 11:54 AM 1,104 Zncn.su6
07/06/2004 11:53 AM 1,020 Ilm0Q3x.h22
07/06/2004 11:53 AM 1,104 Vivh.653
07/06/2004 11:53 AM 1,104 Zzyq.ipy
07/06/2004 11:53 AM 1,104 YfcMkUj.d6b
07/06/2004 11:53 AM 1,104 RydoC444.btz
07/06/2004 11:52 AM 1,104 WmjL0.793
07/06/2004 11:52 AM 1,104 Pvy4vbKa.t26
07/06/2004 11:52 AM 1,104 Iar6aqj.93f
07/06/2004 11:52 AM 1,104 Fnjt.6bq
07/06/2004 11:51 AM 1,020 WkmjC6b.ya8
07/06/2004 11:51 AM 1,104 TxsMO.d80
07/06/2004 11:51 AM 1,104 Cyt8.qe5
07/06/2004 11:51 AM 1,104 LdckUS73.0i6
07/06/2004 11:50 AM 1,104 Rvq12.b50
07/06/2004 11:50 AM 1,104 Hlx41R.00c
07/06/2004 11:50 AM 1,104 Bei1G1E.t1j
07/06/2004 11:50 AM 1,104 MspBy95z.1o1
07/06/2004 11:50 AM 1,104 Jwbfg.cvb
07/06/2004 11:50 AM 1,020 FvtvRcP.sq6
07/06/2004 11:49 AM 1,104 KbbiT672.0g6
07/06/2004 11:49 AM 1,104 Jpd5ld.343
07/06/2004 11:49 AM 1,104 LngVI.l3j
07/06/2004 11:49 AM 1,104 Tboro6.1pu
07/06/2004 10:43 AM 1,104 DkbS.10c
07/06/2004 10:43 AM 1,104 Fna1.0bq
07/06/2004 10:42 AM 1,104 QclRXAx9.4xd
07/06/2004 10:42 AM 1,104 Rodx.48u
07/06/2004 10:42 AM 1,104 WlnkD6b.zb8
07/06/2004 10:42 AM 1,104 RvwJ.zt2
07/06/2004 10:42 AM 1,104 Sna1ot.w7m
07/06/2004 10:42 AM 1,104 Spef.480
07/06/2004 10:41 AM 1,104 Mml180.4jd
07/06/2004 10:41 AM 1,104 TtsRcPsq.62q
07/06/2004 10:41 AM 1,104 Rrzr72s.9z8
07/06/2004 10:41 AM 1,104 EnueN1w3.7su
07/06/2004 10:41 AM 1,104 TrxRw.2v5
07/06/2004 10:40 AM 1,104 IonY.lw7
07/06/2004 10:40 AM 1,104 NciSp.39q
07/06/2004 10:40 AM 1,104 MtyJW2f.gvo
07/06/2004 10:40 AM 1,104 RxlX74SV.sth
07/06/2004 10:40 AM 1,104 Ytdb9rEP.55d
07/06/2004 10:39 AM 1,104 Wlsb9TH.z92
07/06/2004 10:39 AM 1,104 Ssas7It9.b9r
07/06/2004 10:39 AM 1,104 Dkj7.h66
07/06/2004 10:39 AM 1,104 Zptv4DJ.tq4
07/06/2004 10:39 AM 1,104 NpiXKn.kl0
07/06/2004 10:39 AM 1,104 NbeA7h.766
07/06/2004 10:38 AM 1,104 Gekd3s3.b59
07/06/2004 10:38 AM 1,104 NoevG.12b
07/06/2004 10:38 AM 1,104 Nxm75TWT.u3u
07/06/2004 10:38 AM 1,104 NzkqeXV1.u8b
07/06/2004 10:38 AM 1,104 Mgq5kE.6ca
07/06/2004 10:38 AM 1,104 XjfS.k3s
07/06/2004 10:37 AM 1,104 Gfw8Y8o.b43
07/06/2004 10:37 AM 1,104 PrkZMp.mn0
07/06/2004 10:37 AM 1,104 KlcTD3.3z6
07/06/2004 10:37 AM 1,104 RdmL6By.95y
07/06/2004 10:37 AM 1,104 Uqd9R6.zoi
07/06/2004 10:36 AM 1,104 SgiFYm.w78
07/06/2004 10:19 AM 1,104 Tctc1.6d3
07/06/2004 10:19 AM 1,104 JlvSI.c6a

KanMan
2005-12-31, 14:07
07/06/2004 10:19 AM 1,104 VbpBXPVY.wx4
07/06/2004 10:19 AM 1,104 NellWTV6.367
07/06/2004 10:19 AM 1,104 XcfS.d3s
07/06/2004 10:18 AM 1,104 Cpp5.45j
07/06/2004 10:18 AM 1,104 Wzj9vx.tfs
07/06/2004 10:18 AM 1,104 Gtej.k97
07/06/2004 10:18 AM 1,104 QeuEJ4I.06a
07/06/2004 10:18 AM 1,104 Ioc5kd.343
07/06/2004 10:17 AM 1,104 KfaE9.lv7
07/06/2004 10:17 AM 1,104 Lzdhj.yrx
07/06/2004 10:17 AM 1,104 HetNblJ.427
07/06/2004 10:17 AM 1,104 Uwx5Cu7.c6l
07/06/2004 10:17 AM 1,104 Pmbc.37y
07/06/2004 10:17 AM 1,104 Wwe1X.l1c
07/06/2004 10:16 AM 1,104 Vzu33.969
07/06/2004 10:16 AM 1,104 Cpc56.5pe
07/06/2004 10:16 AM 1,104 Mbd97.h65
07/06/2004 10:16 AM 1,104 Egq5.18k
07/06/2004 10:16 AM 1,104 PqpNZMp.mn0
07/06/2004 10:15 AM 1,104 TayjX3f.hdw
07/06/2004 10:15 AM 1,104 Wjo7763.565
07/06/2004 10:15 AM 1,104 QupKL.a79
07/06/2004 10:15 AM 1,104 AieOnWlf.7db
07/06/2004 10:15 AM 1,104 Zcg0LIdr.3i6
07/06/2004 10:14 AM 1,104 Wjwi.l33
07/06/2004 10:14 AM 1,104 Omac.37y
07/06/2004 10:14 AM 1,104 Jpd5kd.343
07/06/2004 10:14 AM 1,104 FanJ0Z39.7f6
07/06/2004 10:14 AM 1,104 Psc6P.q4y
07/06/2004 10:13 AM 1,104 Msg629f.65o
07/06/2004 10:13 AM 1,104 Bio9m.x88
07/06/2004 10:13 AM 1,104 Yfte.atz
07/06/2004 10:13 AM 1,104 Moa8.14j
07/06/2004 10:13 AM 1,104 Qtxs19.7ia
07/06/2004 10:13 AM 1,104 Yxf9.9n9
07/06/2004 10:12 AM 1,104 LqnAx94x.dm0
07/06/2004 10:12 AM 1,104 Zuv72s9.a8q
07/06/2004 10:12 AM 1,104 CfoD01y.4x0
07/06/2004 10:12 AM 1,104 Bzfz1O.1x4
07/06/2004 10:12 AM 1,104 Tdud1.713
07/06/2004 10:12 AM 1,104 InkdBv3.ba3
07/06/2004 10:11 AM 1,104 Qdqc4j1S.k3r
07/06/2004 10:11 AM 1,104 WwwNGMwt.50u
07/06/2004 10:11 AM 1,104 Qwtf.c16
07/06/2004 10:11 AM 1,104 Yqtye.5l2
07/06/2004 10:11 AM 1,104 TrfhO.911
07/06/2004 10:10 AM 1,104 Yzyw.3v9
07/06/2004 10:10 AM 1,104 Waao1.y48
07/06/2004 10:10 AM 1,104 HiyP.0yz
07/06/2004 10:10 AM 1,104 QuvJ.ys2
07/06/2004 10:10 AM 1,104 IrqZ.thz
07/06/2004 10:10 AM 1,104 GqshMNc8.04i
07/06/2004 10:09 AM 1,104 Naw3AzI.za2
07/06/2004 10:09 AM 1,104 Mpzo.453
07/06/2004 10:09 AM 1,104 LsrB5.axz
07/06/2004 10:09 AM 1,104 Dyt8.qe5
07/06/2004 10:09 AM 1,104 PrdZ2.pmg
07/06/2004 10:09 AM 1,104 Hnb5cu.ak3
07/06/2004 10:08 AM 1,104 JvgMa7R.0q6
07/06/2004 10:08 AM 1,104 Cjh7gR56.mf4
07/06/2004 10:08 AM 1,104 Gek13s3.b59
07/06/2004 10:08 AM 1,104 Dgk2PMg8.5lu
07/06/2004 10:08 AM 1,104 CckJdr.3i6
07/06/2004 10:08 AM 1,104 Qrbzoi8.2eg
07/06/2004 10:07 AM 1,104 Tdud1.7d3
07/06/2004 10:07 AM 1,104 AqnP4X.4nk
07/06/2004 10:07 AM 1,104 Hhg16.121
07/06/2004 10:07 AM 1,104 HyffQ56.le4
07/06/2004 10:07 AM 1,104 Ybf04Hb.q3g
07/06/2004 10:06 AM 1,104 Krny8.f85
07/06/2004 10:06 AM 1,104 Ekykg.yeh
07/06/2004 10:06 AM 1,104 Ikmcq.3h6
07/06/2004 10:06 AM 1,104 EomVPdVU.1t7
07/06/2004 10:06 AM 1,104 Viwh.653
07/06/2004 10:06 AM 1,104 Xmole7cA.c96
07/06/2004 10:05 AM 1,104 Vvd0W.k1b
07/06/2004 10:05 AM 1,104 Fffw5.v20
07/06/2004 10:05 AM 1,104 Grk9O5.vg4
07/06/2004 10:05 AM 1,104 Dht2aN9.wxt
07/06/2004 10:04 AM 1,104 TwhDJt.r49
07/06/2004 10:04 AM 1,104 Gyp5Ynh.8fd
07/06/2004 10:03 AM 1,020 Rbd7x.y5g
07/06/2004 10:03 AM 1,020 UkpR2Y.15m
07/06/2004 10:03 AM 1,104 Llkc80.43c
07/06/2004 10:02 AM 1,104 Sras72s9.a8q
07/06/2004 10:02 AM 1,020 Txr22.d50
07/06/2004 10:02 AM 1,020 YabRGy8g.85c
07/06/2004 10:02 AM 1,104 JoleBw3c.b3z
07/06/2004 10:02 AM 1,020 Aquw4EKu.r40
07/06/2004 10:02 AM 1,104 Xda43.4z3
07/06/2004 10:01 AM 1,104 MyuhZxH.wxd
07/06/2004 10:01 AM 1,104 GmpbMS.0r4
07/06/2004 10:01 AM 1,104 IjzQB.22w
07/06/2004 10:01 AM 1,104 AwjFx8e.75b
07/06/2004 10:01 AM 1,104 OfmmXVW7.467
07/06/2004 10:00 AM 1,104 UjoQ2Y.15l
07/06/2004 10:00 AM 1,104 AryY3h.jex
07/06/2004 10:00 AM 1,104 Uvgd7mA.4ik
07/06/2004 10:00 AM 1,104 Pzqz.05z
07/06/2004 10:00 AM 1,104 Ldu7d7mA.4ik
07/06/2004 10:00 AM 1,104 Otfs.7zk
07/06/2004 09:59 AM 1,104 YqhhQ.g9n
07/06/2004 09:59 AM 1,104 Krf6mf.454
07/06/2004 09:59 AM 1,104 Abr37QSO.anq
07/06/2004 09:59 AM 1,104 Vvmdnsu3.03r
07/06/2004 09:59 AM 1,104 IguWdnsu.303
07/06/2004 09:59 AM 1,104 RpuV.u1t
07/06/2004 09:58 AM 1,104 Qpx8QFx8.f85
07/06/2004 09:58 AM 1,104 TjoQ19.15l
07/06/2004 09:58 AM 1,104 EfvM8.01s
07/06/2004 09:58 AM 1,104 Osm2.3y6
07/06/2004 09:58 AM 1,104 LroAx94y.dm0
07/06/2004 09:57 AM 1,104 Dedb5.010
07/06/2004 09:57 AM 1,104 Pufs.4ak
07/06/2004 09:57 AM 1,104 Dmtc.l0b
07/06/2004 09:57 AM 1,104 Rayh0.6h2
07/06/2004 09:57 AM 1,104 Gcok1B4A.7h6
07/06/2004 09:57 AM 1,104 Mxr1uVbm.rs3
07/06/2004 09:56 AM 1,104 Ikw7y3Fz.o2e
07/06/2004 09:56 AM 1,104 CykGyXg.86d
07/06/2004 09:56 AM 1,104 GknJ.tq4
07/06/2004 09:56 AM 1,104 JkaRB2.3x6
07/06/2004 09:56 AM 1,104 Otfs.7zj
07/06/2004 09:56 AM 1,104 LmwUjD.6bz
07/06/2004 09:55 AM 1,104 YyxP.ioy
07/06/2004 09:55 AM 1,104 NflmWUW6.467
07/06/2004 09:55 AM 1,104 Tipy86.1w8
07/06/2004 09:55 AM 1,104 HizPA.22v
07/06/2004 09:55 AM 1,104 TxsNO.181
07/06/2004 09:55 AM 1,104 Bcs3.7za
07/06/2004 09:54 AM 1,104 AcokQa9.6gy
07/06/2004 09:54 AM 1,104 Mzeijf.yeh
07/06/2004 09:54 AM 1,104 Rnz8O.mvl
07/06/2004 09:54 AM 1,104 JnzM5TEJ.4z7
07/06/2004 09:54 AM 1,104 HfuVcmRT.302
07/06/2004 09:53 AM 1,104 YgnxGwWd.nsu
07/06/2004 09:53 AM 1,104 Hxb1.slr
07/06/2004 09:53 AM 1,104 Ere67.6rf
07/06/2004 09:53 AM 1,104 Tsg9525X.7oc
07/06/2004 09:53 AM 1,104 HlxK4RC2.3x6
07/06/2004 09:53 AM 1,104 Jfrn2E5D.8ku
07/06/2004 09:52 AM 1,104 Fit6w21X.l1c
07/06/2004 09:52 AM 1,104 ZjmA22w.pv1
07/06/2004 09:52 AM 1,104 Gvac.rkq
07/06/2004 09:52 AM 1,104 InzM4TE3.4z7
07/06/2004 09:52 AM 1,104 Fht5v20W.k1b
07/06/2004 09:52 AM 1,104 RpvW.u1t
07/06/2004 09:51 AM 1,104 EqqP.55k
07/06/2004 09:51 AM 1,104 Svzu10.vk0
07/06/2004 09:51 AM 1,104 Ajh6KZ6.69o
07/06/2004 09:51 AM 1,104 Fxo5Xng.7ec
07/06/2004 09:51 AM 1,104 Wjj2fhDV.bec
07/06/2004 09:51 AM 1,104 Tuec6lY.3hi
07/06/2004 09:50 AM 1,104 YabRFy8f.85c
07/06/2004 09:50 AM 1,104 Fya24W.7nc
07/06/2004 09:50 AM 1,104 Szw2E5.18k
07/06/2004 09:50 AM 1,104 AldJY.359
07/06/2004 09:50 AM 1,104 Lrf6524.54n
07/06/2004 09:50 AM 1,104 Fsoa7R.0q6
07/06/2004 09:49 AM 1,104 Ueh80c.rkq
07/06/2004 09:49 AM 1,104 Htc356O.pe5
07/06/2004 09:49 AM 1,104 KoaN5UFK.4a7
07/06/2004 09:49 AM 1,104 QbvJ.zz2
07/06/2004 09:49 AM 1,104 Iihz6y.32z
07/06/2004 09:49 AM 1,104 Tufc7lZ.3hj
07/06/2004 09:48 AM 1,104 Ere6A.8rf
07/06/2004 09:48 AM 1,104 UbakY3h.iex
07/06/2004 09:48 AM 1,104 HetUblQ.s29
07/06/2004 09:48 AM 1,104 Muc4uK.4r0
07/06/2004 09:48 AM 1,104 IteLZ6Q.9p5
07/06/2004 09:48 AM 1,104 Whao1.e48
07/06/2004 09:47 AM 1,104 Jsz3s3.i59
07/06/2004 09:47 AM 1,104 AmjV5.4v4
07/06/2004 09:47 AM 1,104 Tyv5.m27
07/06/2004 09:47 AM 1,104 Ere6A.9rf
07/06/2004 09:47 AM 1,104 Iwaeg.cvb
07/06/2004 09:47 AM 1,104 Kmy7.042
07/06/2004 09:46 AM 1,104 Zeq1d4.8zb
07/06/2004 09:46 AM 1,104 Lkyrgy.e5m
07/06/2004 09:46 AM 1,104 Hkv6x3Fz.n2e
07/06/2004 09:46 AM 1,104 Yvk4SD.33y
07/06/2004 09:46 AM 1,104 AaiHb.p3g
07/06/2004 09:46 AM 1,104 NanZig0.5g2
07/06/2004 09:45 AM 1,104 Clc4Ma.460
07/06/2004 09:45 AM 1,104 Fqk9N5.uf3
07/06/2004 09:45 AM 1,104 Xhbp2.f48
07/06/2004 09:45 AM 1,104 GhxOY.12u
07/06/2004 09:45 AM 1,104 DjgZWq.f8v
07/06/2004 09:45 AM 1,104 Zdytu3.c3s
07/06/2004 09:44 AM 1,104 AknC23x.6w2
07/06/2004 09:44 AM 1,104 HnkWTu3.uz3
07/06/2004 09:44 AM 1,104 Ooo2Y1O.lf7
07/06/2004 09:43 AM 1,104 Dsur.k93
06/26/2004 03:29 PM 1,020 Lwx1.b70
06/26/2004 01:28 PM 1,104 Edij3r2.h59
06/26/2004 01:27 PM 1,104 Qqp2Z2P.nh8
06/26/2004 01:27 PM 1,104 Bkx08YM9.1f0
06/26/2004 01:26 PM 1,104 Kbj6.46a
06/26/2004 01:26 PM 1,104 Jtn0R6y.jnp
06/26/2004 01:26 PM 1,104 FgwN9.01t
06/26/2004 01:25 PM 1,104 PyoW.58y
06/26/2004 01:25 PM 1,104 Odktr.49r
06/26/2004 01:24 PM 1,104 Pure.b06
06/26/2004 01:24 PM 1,104 JjaRB.23x
06/26/2004 01:24 PM 1,104 LyyWUV.646
06/26/2004 01:23 PM 1,104 Sjq6.bzb
06/26/2004 01:23 PM 1,104 Vhd6.i2q
06/26/2004 01:22 PM 1,104 LixY26vw.4e4
06/26/2004 01:22 PM 1,104 Ecij3r2.h59
06/26/2004 01:21 PM 1,104 Qoce.480
06/26/2004 01:21 PM 1,104 Bfr1f4.801
06/26/2004 01:21 PM 1,104 Zmz4V.7mb
06/26/2004 01:20 PM 1,104 NqbY1.5lh
06/26/2004 01:20 PM 1,104 Lhtp.2g5
06/26/2004 01:19 PM 1,104 BqvxMFLv.s40
06/26/2004 01:19 PM 1,104 InqdOT.1s4
06/26/2004 01:19 PM 1,104 Tvfc7mZ.3ij
06/26/2004 01:18 PM 1,104 DoivL4.sd3
06/26/2004 01:18 PM 1,104 Jve367Q.rfr
06/26/2004 01:17 PM 1,104 Shoxv5.1v7
06/26/2004 11:36 AM 1,104 Zjh6KY6.59o
06/26/2004 11:30 AM 1,020 RjaZ.396
06/25/2004 11:23 PM 1,020 HmjcAui.az3
06/25/2004 11:17 PM 1,020 Ldg4RBY.thz
06/25/2004 09:48 PM 1,020 Jwhmn.cvb
06/25/2004 09:46 PM 1,020 Fvemf4V7.ma7
06/25/2004 09:24 PM 1,020 Whbp1.f48
06/25/2004 08:59 PM 1,020 Jlmcr.3h6
06/25/2004 08:35 PM 1,104 Ucy3hQG.9nx
06/25/2004 08:35 PM 1,104 DdcU.ms1
06/25/2004 08:35 PM 1,104 Ffew5.v20
06/25/2004 08:34 PM 1,104 QseA2.qn3
06/25/2004 08:34 PM 1,104 ZsmKpqfy.e5l
06/25/2004 08:33 PM 1,104 UsyRx.2w6
06/25/2004 08:33 PM 1,104 PxfO9N5.ue3
06/25/2004 08:32 PM 1,104 Dgk2PMg8.4lu
06/25/2004 08:32 PM 1,104 Yzj286D5.45j
06/25/2004 08:32 PM 1,104 AazR.jpz
06/25/2004 08:32 PM 1,104 GvcL.idr
06/25/2004 08:31 PM 1,104 Qtd6Q.r5z
06/25/2004 08:30 PM 1,104 Dap6xiM.518
06/25/2004 08:30 PM 1,104 Zdxsu3.03s
06/25/2004 08:30 PM 1,104 DnqEJLa.7z3
06/25/2004 08:29 PM 1,104 Steb6kY.3gi
06/25/2004 08:29 PM 1,104 Rrz9.7gy
06/25/2004 08:28 PM 1,104 Ksa3s3.i50
06/25/2004 08:21 PM 1,188 JqvGne.117
06/25/2004 08:17 PM 1,104 Gzb25X.8pd
06/25/2004 08:17 PM 1,104 RsizkOQ.291
06/25/2004 08:17 PM 1,104 Jce36ZX.rfx
06/25/2004 08:17 PM 1,104 LqcP6whL.5c8
06/25/2004 08:16 PM 1,104 Kgso.2f5
06/25/2004 03:25 PM 1,104 Ltb4t3.j60
06/25/2004 03:24 PM 1,104 Fpemf45.4mb
06/25/2004 03:24 PM 1,104 Dpye35.4lz
06/25/2004 03:23 PM 1,104 AwiL80eB.7i7
06/25/2004 03:22 PM 1,104 Tgtfi22V.24u
06/25/2004 03:22 PM 1,104 CgbwyNF.4vt
06/25/2004 03:22 PM 1,104 Soa8P.nwm
06/25/2004 02:13 PM 1,104 MnyVle.7da
06/25/2004 02:13 PM 1,104 XkpTU636.76q
06/25/2004 02:13 PM 1,104 Hvy8.5b4
06/25/2004 02:13 PM 1,104 Ioc5kc.j43
06/25/2004 02:12 PM 1,104 ZazQ.jpz
06/25/2004 11:36 AM 1,104 Ycf0KIcq.3h6
06/25/2004 11:36 AM 1,104 MvuCw.4db
06/25/2004 10:58 AM 1,104 YgoxGwWd.osu
06/25/2004 10:58 AM 1,104 LixY26uw.4e3
06/25/2004 10:57 AM 1,104 Fpem245.4nb
06/25/2004 10:57 AM 1,104 CwpN.67i
06/25/2004 10:57 AM 1,104 Pflvs4.0s6
06/25/2004 06:44 AM 1,104 Xfnw2vVc.nrt
06/24/2004 08:41 PM 1,104 Gbok0A39.7g6
06/24/2004 03:29 PM 1,104 Sfb5feN1.d37
06/24/2004 03:28 PM 1,104 YlqUV646.76r
06/24/2004 02:44 PM 1,104 Txav21X.l1c
06/24/2004 12:02 PM 1,104 Vdz3iRH.a5y
06/24/2004 11:34 AM 1,104 XxfEY.m1d
06/24/2004 07:36 AM 1,104 ZbcSHzXg.86d
06/24/2004 07:36 AM 1,104 Jtwk.pr2
06/24/2004 05:52 AM 1,104 Dpa2V5.4u4
06/24/2004 05:52 AM 1,104 Cny2T4.3t3
06/24/2004 05:52 AM 1,104 Frna7Q.0p6
06/24/2004 05:51 AM 1,104 Xcz76.3y6
06/24/2004 05:51 AM 1,104 BdfU.j09
06/24/2004 05:51 AM 1,104 QauIyY26.uw4
06/24/2004 05:51 AM 1,104 Vecl2T.44t
06/24/2004 05:50 AM 1,104 Xya6Ew8e.75b
06/24/2004 05:50 AM 1,104 HuiTdA.u3b
06/05/2004 11:08 PM 52,139 Kbj6.exe
06/05/2004 11:08 PM 1,188 JufMa7R.0p6
06/05/2004 11:07 PM 1,020 SdxL.0b3
06/05/2004 11:07 PM 1,020 Hsl9P6w.h45
06/05/2004 11:06 PM 1,188 Oqs38O.mwl
06/05/2004 11:06 PM 1,188 Imh01Slr.b97
06/05/2004 11:06 PM 1,188 CcbS.lrb
06/05/2004 11:05 PM 1,188 InzM4TEI.4z7
06/05/2004 11:04 PM 1,020 Sfk56le.454
06/05/2004 11:04 PM 1,188 Ovr0A.3z9
06/05/2004 11:04 PM 1,188 KiwY1puw.4d3
06/05/2004 11:03 PM 1,188 Erf6AX.sgy
06/05/2004 07:58 PM 1,188 Xhxyr.xhe
06/05/2004 07:57 PM 1,188 Zep1w3.7su
06/05/2004 07:57 PM 1,188 HofwG.12v
06/05/2004 07:57 PM 1,188 ZcmBzap.ioy
06/05/2004 07:57 PM 1,188 GwjM.jkr
06/05/2004 07:56 PM 1,188 GvjL.jkr
06/05/2004 07:56 PM 1,188 EsdHJ.9qx
06/05/2004 07:56 PM 1,188 Xcob.u37
06/05/2004 07:56 PM 1,188 Hihy6.x21
06/05/2004 07:56 PM 1,188 Llk080.43c
06/05/2004 07:55 PM 1,188 OcfB0i.t99
06/05/2004 07:55 PM 1,188 OyoW.589
06/05/2004 07:55 PM 1,188 Zipy.3xx
06/05/2004 07:55 PM 1,188 AtmK.prg
06/05/2004 07:55 PM 1,188 BceU.ia9
06/05/2004 07:54 PM 1,188 Osn0.1rk
06/05/2004 07:54 PM 1,188 FgoeGdW1.nsu
06/05/2004 07:50 PM 1,188 XfbLkTj.c6a
06/05/2004 07:47 PM 1,188 BaiIcq.3h6
06/05/2004 07:43 PM 1,188 CvoT.67i
06/05/2004 07:42 PM 1,188 Nma7ibh.653
06/05/2004 07:40 PM 1,188 WmrTIA2.qo3
06/05/2004 07:40 PM 1,188 BheX7O.c8t
06/05/2004 07:40 PM 1,188 Hsdry6w.9v5
06/05/2004 07:40 PM 1,188 OxeOxN.5ue
06/04/2004 07:33 PM 1,188 MztYif2.5f4
06/04/2004 07:32 PM 1,188 Guk79.c9s
06/04/2004 07:32 PM 1,188 Yvy710.cj0
06/04/2004 07:32 PM 1,188 Nlr4Q9P3.wh1
06/04/2004 07:31 PM 1,188 Ggf86.821
06/04/2004 05:35 PM 1,188 WnwEWc.4k1
06/04/2004 05:35 PM 1,188 Unpv.bli
06/04/2004 05:34 PM 1,188 Zkl653v.g12
06/04/2004 05:34 PM 1,188 DvmmVl.e7c
06/04/2004 05:34 PM 1,188 Vad6.b2p
06/04/2004 05:33 PM 1,188 Lzkoqfy.e5l
06/04/2004 05:33 PM 1,188 Gbok0B39.7h6
06/04/2004 05:33 PM 1,188 FjeyaPi.oyv
06/04/2004 05:33 PM 1,188 GfnFg.v2l
06/04/2004 05:32 PM 1,188 KexvAB.636
06/04/2004 05:32 PM 1,188 PfkM07.032
06/04/2004 05:32 PM 1,188 Qtd6P.r29
06/04/2004 05:32 PM 1,188 XvaU.a0y
06/04/2004 05:31 PM 1,188 Ydpcv.37s
06/04/2004 05:31 PM 1,188 Evj4yj2.396
06/04/2004 05:30 PM 1,188 Gzty8.9m2
06/04/2004 05:30 PM 1,188 Rep78k.d37
06/04/2004 05:29 PM 1,188 QygP9.o2v
06/04/2004 05:29 PM 1,188 Bpfp.ux7
06/04/2004 05:28 PM 1,188 GkfsuJCI.sp6
06/04/2004 05:28 PM 1,188 Jvy1Wb1a.70l
06/04/2004 05:28 PM 1,188 UgjPh.4o4
06/04/2004 05:27 PM 1,188 EoxFKL07.932
06/04/2004 05:27 PM 1,188 OrjZMp.mn0
06/04/2004 05:26 PM 1,188 Zkk653.vg1
06/04/2004 05:26 PM 1,188 Ofuv.37r
06/04/2004 05:26 PM 1,188 Tbx3gPf.2mx
06/04/2004 05:25 PM 1,188 SzepC544.bua
06/04/2004 05:25 PM 1,188 Oux3UaCz.s26
06/04/2004 05:25 PM 1,188 Bsh3vG.12v
06/04/2004 05:24 PM 1,188 Ild7.932
06/04/2004 06:19 AM 1,188 IvpUeB.13c
06/04/2004 06:19 AM 1,020 Zfc54M.b4r
06/04/2004 06:19 AM 1,188 JfsoG.l5k
06/04/2004 06:18 AM 1,188 DrcG.i96
06/04/2004 06:18 AM 1,188 DhivL1.sd0
06/04/2004 06:17 AM 1,188 FzsQ8.8me
06/04/2004 06:17 AM 1,188 Zwl4tD3.396
06/04/2004 06:16 AM 1,188 LdcDU77j.0i6
06/04/2004 06:16 AM 1,188 QigF.3e9
06/04/2004 06:16 AM 1,188 EamIaZ3.96f
06/04/2004 06:15 AM 1,188 IfuV.1ns
06/04/2004 06:14 AM 1,188 SwrLN.c80

KanMan
2005-12-31, 14:16
06/04/2004 06:14 AM 1,188 Qep78k.d37
06/04/2004 06:14 AM 1,188 SbbS7Q.4yi
06/04/2004 06:13 AM 1,188 Mlc0eA7h.766
06/04/2004 06:13 AM 1,188 DlvL.801
06/04/2004 06:12 AM 1,188 ZmxC.174
06/04/2004 06:12 AM 1,188 LvtC.14c
06/04/2004 06:12 AM 1,188 Xfnw2vVc.mrt
06/04/2004 06:11 AM 1,188 JlvSi.i60
06/04/2004 06:11 AM 1,188 Kuo1s7z.joq
06/04/2004 06:10 AM 1,188 Jrnx8.f85
06/04/2004 06:10 AM 1,188 Dkp0.hs8
06/04/2004 06:10 AM 1,188 IbdJ5ZW.x18
06/04/2004 06:09 AM 1,188 Dnu82k.lat
06/04/2004 06:09 AM 1,188 Sqw6.v97
06/04/2004 06:09 AM 1,188 Dqd57.5qe
06/04/2004 06:08 AM 1,188 Fknz4Q.753
06/04/2004 06:08 AM 1,188 ErvA.b63
06/04/2004 06:08 AM 1,188 UwpEKu.r40
06/04/2004 06:07 AM 1,188 Gnb4bu.ak2
06/04/2004 06:07 AM 1,188 WcqC.96x
06/04/2004 06:06 AM 1,188 Poc8kcj.763
06/04/2004 06:06 AM 1,188 CegC.k03
06/04/2004 06:05 AM 1,188 YslQoqfx.d5l
06/04/2004 06:05 AM 1,188 Qdp78j1i.76q
06/04/2004 06:05 AM 1,188 Aeft3.c60
06/04/2004 06:04 AM 1,188 YygFz.o2e
06/04/2004 06:04 AM 1,188 XwnnP.m27
06/04/2004 06:03 AM 1,188 EnmUv3Va.1zt
06/04/2004 06:03 AM 1,188 Jbz9b9r.96n
06/04/2004 06:03 AM 1,188 YzbRFx8f.88c
06/04/2004 06:02 AM 1,020 ApeouW7m.74i
06/04/2004 06:02 AM 1,188 GwuwLDJ.tr6
06/04/2004 06:02 AM 1,188 ZriiR.hh5
06/04/2004 06:01 AM 1,188 FabYM91f.08j
06/04/2004 06:01 AM 1,188 DopwS4t.d33
06/03/2004 10:27 PM 1,188 Cdt3.8zb
06/03/2004 10:27 PM 1,188 Tep1.3c3
06/03/2004 10:26 PM 1,188 MspBy95z.en1
06/03/2004 10:26 PM 1,188 VjmiJ60.fh8
06/03/2004 10:26 PM 1,188 GpnWx1Xc.1b8
06/03/2004 10:26 PM 1,188 FebU6.sz6
06/03/2004 10:26 PM 1,188 HrpY.sgy
06/03/2004 10:25 PM 1,188 HnunCu.aki
06/03/2004 10:25 PM 1,188 Dwy137.6sz
06/03/2004 10:25 PM 1,188 XakYwy.ngm
06/03/2004 10:24 PM 1,188 DfgW.k1b
06/03/2004 10:24 PM 1,188 Rwz4XcFb.v37
06/03/2004 10:23 PM 1,188 Zih6qy6.v97
06/03/2004 10:23 PM 1,188 Ueo80c.rjq
06/03/2004 10:23 PM 1,188 VchsgQ56.fye
06/03/2004 10:23 PM 1,188 CplX6.595
06/03/2004 10:22 PM 1,188 Zuv72s9.z8p
06/03/2004 10:22 PM 1,188 Knxl.342
06/03/2004 10:22 PM 1,188 JddbZBQ.35y
06/03/2004 10:22 PM 1,188 Ylot4R.t6j
06/03/2004 10:21 PM 1,188 Sfsd5l1T.43t
06/03/2004 10:21 PM 1,188 All763w.h12
06/03/2004 10:21 PM 1,188 ItuBYR1p.n51
06/03/2004 10:21 PM 1,188 MggeceT.m6c
06/03/2004 10:20 PM 1,188 BifPnX4n.71j
06/03/2004 10:20 PM 1,188 Abm3.97g
06/03/2004 10:20 PM 1,188 Ozkx1Xc1.b80
06/03/2004 10:20 PM 1,188 UktBua.kh3
06/03/2004 10:19 PM 1,188 Drhr8.z8p
06/03/2004 10:19 PM 1,188 IyvxMFlv.s70
06/03/2004 10:19 PM 1,188 Spez4.8vw
06/03/2004 10:19 PM 1,188 McrS26PQ.291
06/03/2004 10:18 PM 1,188 Aees3.b50
06/03/2004 10:18 PM 1,188 TgiOg.4o4
06/03/2004 10:18 PM 1,188 MztYif2.5g4
06/03/2004 10:18 PM 1,188 VzuPQ.291
06/03/2004 10:17 PM 1,188 Hvzdf.bua
06/03/2004 10:17 PM 1,188 IjtRg.h5y
06/03/2004 10:17 PM 1,188 Ozfgq88m.f48
06/03/2004 10:17 PM 1,188 Log8.04j
06/03/2004 10:16 PM 1,188 Zuq7mA4j.kzs
06/03/2004 10:16 PM 1,188 Zftf.un7
06/03/2004 10:16 PM 1,188 Jdo4I.0iz
06/03/2004 10:16 PM 1,188 JufLa7Q.0p6
06/03/2004 10:15 PM 1,188 DqbGH.8p8
06/03/2004 10:15 PM 1,188 Oqrh8N.mv4
06/03/2004 10:15 PM 1,188 Gatr8.952
06/03/2004 10:14 PM 1,188 Iji97y.32z
06/03/2004 10:14 PM 1,188 Jfj1OLf7.4k7
06/03/2004 10:14 PM 1,188 Vre0S6.zpj
06/03/2004 10:14 PM 1,188 NyefP78l.e37
06/03/2004 10:13 PM 1,188 Nxy2.c80
06/03/2004 10:13 PM 1,188 StebrkY.3gi
06/03/2004 10:13 PM 1,188 EdskZ.6yi
06/03/2004 10:13 PM 1,188 Rqmgd1Sd.3l3
06/03/2004 10:13 PM 1,188 XggxZVP.dn4
06/03/2004 10:12 PM 1,188 VmvDvb.4j3
06/03/2004 10:12 PM 1,188 Apd21DlD.i4h
06/03/2004 10:12 PM 1,188 GbwA.t06
06/03/2004 10:12 PM 1,188 JnqMpMn0.msu
06/03/2004 10:11 PM 1,188 LmxUkD.6bz
06/03/2004 10:11 PM 1,188 Nijgu.2l5
06/03/2004 10:11 PM 1,188 Mlut5Bt6.b6r
06/03/2004 10:11 PM 1,188 Mmld80.4jd
06/03/2004 10:10 PM 1,188 Ecij2q2.g59
06/03/2004 10:10 PM 1,188 Lutb.16c
06/03/2004 10:10 PM 1,188 Bin9f.w88
06/03/2004 10:09 PM 1,188 Anh4W.7u0
06/03/2004 10:09 PM 1,188 JhwX.1ot
06/03/2004 10:09 PM 1,188 KsfIF.gu2
06/03/2004 10:09 PM 1,188 Qio5.zxz
06/03/2004 10:09 PM 1,188 TydX.68h
06/03/2004 10:08 PM 1,188 EciB2.3gz
06/03/2004 10:08 PM 1,188 Qvy4WbDa.t26
06/03/2004 10:08 PM 1,188 OfoWP.8fc
06/03/2004 10:08 PM 1,188 FmrCj.a90
06/03/2004 10:07 PM 1,188 UoyW7mZ.3ij
06/03/2004 10:07 PM 1,188 Jufsa7x.0w6
06/03/2004 10:07 PM 1,188 BnyLt4.6s5
06/03/2004 10:07 PM 1,188 IzzZRoq.fye
06/03/2004 10:06 PM 1,188 Wswrb9.7hz
06/03/2004 10:06 PM 1,188 Tgtfi22U.24u
06/03/2004 10:06 PM 1,188 QbmthZyH.xx1
06/03/2004 10:06 PM 1,188 Mhjf.u2k
06/03/2004 10:05 PM 1,188 Fkv3cQA.yaw
06/03/2004 10:05 PM 1,188 QouV.t1s
06/03/2004 10:05 PM 1,188 ZuhD80d9.t96
06/03/2004 10:05 PM 1,188 Hmr4eL.80c
06/03/2004 10:04 PM 1,188 FftlA.tzj
06/03/2004 10:04 PM 1,188 IiwoDW.c4j
06/03/2004 10:04 PM 1,188 Utb0.uj0
06/03/2004 10:04 PM 1,188 ZodntV6l.73h
06/03/2004 10:03 PM 1,188 Tyb5z1O1.x48
06/03/2004 10:03 PM 1,188 Nzc3.a23
06/03/2004 10:03 PM 1,188 XlwAC636.z8r
06/03/2004 10:03 PM 1,188 YyyP.ioy
06/03/2004 10:02 PM 1,188 Ttb0.7ia
06/03/2004 10:02 PM 1,188 ZcujPz8.6fx
06/03/2004 10:02 PM 1,188 Ozr94xdM.0v3
06/03/2004 10:02 PM 1,188 YiyzsY.i22
06/03/2004 10:02 PM 1,188 AdnBzbq.jpz
06/03/2004 10:01 PM 1,188 Pbm92YeG.d81
06/03/2004 10:01 PM 1,188 Uqc9Q.5y5
06/03/2004 10:01 PM 1,188 NanZCz0.5a2
06/03/2004 10:01 PM 1,188 Mhr5lE.7da
06/03/2004 10:00 PM 1,188 Uybw21Y.m1d
06/03/2004 10:00 PM 1,188 FlslA.szi
06/03/2004 10:00 PM 1,188 Dbhb2p2.z48
06/03/2004 10:00 PM 1,188 Tpb9p8X.7n7
06/03/2004 09:59 PM 1,188 DhcxyNG.4wt
06/03/2004 09:59 PM 1,188 Vrd9R6.z5p
06/03/2004 09:59 PM 1,188 IxdN.ke7
06/03/2004 09:59 PM 1,188 ZxdW.c1b
06/03/2004 09:58 PM 1,188 AwiEx8e.78b
06/03/2004 09:58 PM 1,188 Koj12Unt.10u
06/03/2004 09:58 PM 1,188 MtyJ6.0fh
06/03/2004 09:58 PM 1,188 LixY.2pu
06/03/2004 09:58 PM 1,188 Dyt9.q95
06/03/2004 09:57 PM 1,188 JwkVfCx.4dc
06/03/2004 09:57 PM 1,188 XvpKM.079
06/03/2004 09:57 PM 1,188 Qzyh0.5h2
06/03/2004 09:57 PM 1,188 JbaiS67.20g
06/03/2004 09:56 PM 1,188 Ixm8.0e0
06/03/2004 09:56 PM 1,188 ZfiU2.4u3
06/03/2004 09:56 PM 1,188 FnueN.1d3
06/03/2004 09:55 PM 1,188 NbeA0h.s89
06/03/2004 09:55 PM 1,188 Szep85ln.cua
06/03/2004 09:55 PM 1,188 Ucl0mRTI.02r
06/03/2004 09:55 PM 1,188 TxjwW.dot
06/03/2004 09:54 PM 1,188 ZpmO4W.3mj
06/03/2004 09:54 PM 1,188 JtuBYR2p.n51
06/03/2004 09:54 PM 1,188 IxkN.kl7
06/03/2004 09:54 PM 1,188 Vju9053.598
06/03/2004 09:54 PM 1,188 Uwx5Bt7.b6r
06/03/2004 09:53 PM 1,188 Czo5wG.45c
06/03/2004 09:53 PM 1,188 Sve7R.s5a
06/03/2004 09:53 PM 1,188 MffdbdS.46b
06/03/2004 09:53 PM 1,188 CykGyXg.88d
06/03/2004 09:52 PM 1,188 Yzhx9W6.wg4
06/03/2004 09:52 PM 1,188 Xrcz8pD5.45c
06/03/2004 09:52 PM 1,188 Dpa2U5.4u4
06/03/2004 09:52 PM 1,188 QbmshZxH.wxd
06/03/2004 09:52 PM 1,188 Ydp0c3.7ya
06/03/2004 09:51 PM 1,188 Poleb16.c2k
06/03/2004 09:51 PM 1,188 ZfmE.7m7
06/03/2004 09:51 PM 1,188 Msash0g.65o
06/03/2004 09:51 PM 1,188 CagA2.3ey
06/03/2004 09:50 PM 1,188 Dtckd376.4y6
06/03/2004 09:50 PM 1,188 Pcpbeb16.c3r
06/03/2004 09:50 PM 1,188 Uqc9Q5.yoh
06/03/2004 09:50 PM 1,188 Htc0h.65p
06/03/2004 09:49 PM 1,188 CgaOQMY.4ol
06/03/2004 09:49 PM 1,188 Vju9.053
06/03/2004 09:49 PM 1,188 GdsMak3.427
06/03/2004 09:49 PM 1,188 UiyInQm.2me
06/03/2004 09:48 PM 1,188 Gjth22wo.810
06/03/2004 09:48 PM 1,188 Fwf524V7.ub7
06/03/2004 09:48 PM 1,188 Pas95yeN.1w3
06/03/2004 09:48 PM 1,188 Ype2TD.01s
06/03/2004 09:48 PM 1,188 Fsa246.5oc
06/03/2004 09:47 PM 1,188 Xmo4l61H.j96
06/03/2004 09:47 PM 1,188 Smf4iKZ.rxh
06/03/2004 09:47 PM 1,188 HotE6c.ac6
06/03/2004 09:47 PM 1,188 Abjz0Y6.9in
06/03/2004 09:46 PM 1,188 Bzw65.oc5
06/03/2004 09:46 PM 1,188 Vdu48tuJ.cis
06/03/2004 09:46 PM 1,188 MedEV78k.137
06/03/2004 09:46 PM 1,188 ZbcSHzXg.88d
06/03/2004 09:45 PM 1,188 Alft3.j60
06/03/2004 09:45 PM 1,188 Zyu5.lmt
06/03/2004 09:45 PM 1,188 Iud0h.65q
06/03/2004 09:45 PM 1,188 Bdka1zS9.kpq
06/03/2004 09:45 PM 1,188 Kuv0.z79
06/03/2004 09:44 PM 1,188 Ucm1nstI.03r
06/03/2004 09:44 PM 1,188 CplX5.5x5
06/03/2004 09:44 PM 1,188 JgbvxMF.4vs
06/03/2004 09:44 PM 1,188 Xms09TI.a93
06/03/2004 09:43 PM 1,188 HvyU.8b4
06/03/2004 09:43 PM 1,188 VchsfQ56.exd
06/03/2004 09:43 PM 1,188 Qep78k.dj7
06/03/2004 09:43 PM 1,188 GxxXPno.dwc
06/03/2004 09:42 PM 1,188 YwcW.b1a
06/03/2004 09:42 PM 1,188 Pgn5.y89
06/03/2004 09:42 PM 1,188 LemLm7.mru
06/03/2004 09:42 PM 1,188 OtfS4zj3.396
06/03/2004 09:42 PM 1,188 Sqk2.2wo
06/03/2004 09:41 PM 1,188 EuyapiOy.v61
06/03/2004 09:41 PM 1,188 MbhRo.38p
06/03/2004 09:41 PM 1,188 CjgQ5Ynh.8fd
06/03/2004 09:41 PM 1,188 ExqW.78k
06/03/2004 09:41 PM 1,188 ZpnP4W.3mk
06/03/2004 09:40 PM 1,188 Ytda9qEP.55d
06/03/2004 09:40 PM 1,188 YkvIQ.i5p
06/03/2004 09:40 PM 1,188 Malprg.zf5
06/03/2004 09:40 PM 1,188 UmdD.4c0
06/03/2004 09:39 PM 1,188 RjaA.397
06/03/2004 09:39 PM 1,188 Fbok0A39.7g6
06/03/2004 09:39 PM 1,188 Sbtb.16c
06/03/2004 09:39 PM 1,188 KbiiT675.256
06/03/2004 09:39 PM 1,188 Juo0S7z.joq
06/03/2004 09:38 PM 1,188 Mopm7m.r7q
06/03/2004 09:38 PM 1,188 KbpR1pNO.181
06/03/2004 09:38 PM 1,188 EfvM8vwS.eru
06/03/2004 09:37 PM 1,188 Jji079.32h
06/03/2004 09:37 PM 1,188 Steb6rY.3np
06/03/2004 09:37 PM 1,188 Mmut5Cu7.c6s
06/03/2004 09:36 PM 1,188 Pdo77j.bh6
06/03/2004 09:36 PM 1,188 Ibvt9.952
06/03/2004 09:36 PM 1,188 TxsMO.180
06/03/2004 09:36 PM 1,188 Gyw8y8o.84k
06/03/2004 09:35 PM 1,188 Kqxpex.d5k
06/03/2004 09:35 PM 1,188 SptOy.v51
06/03/2004 09:35 PM 1,188 NlaB.37x
06/03/2004 09:35 PM 1,188 Tkkk.c00
06/03/2004 09:35 PM 1,188 JmqLoMn0.msu
06/03/2004 09:34 PM 1,188 NjeI0i.z99
06/03/2004 09:34 PM 1,188 VxqFLv.s50
06/03/2004 09:34 PM 1,188 Cly09ZN9.1g1
06/03/2004 09:34 PM 1,188 Vafz.79k
06/03/2004 09:34 PM 1,188 Ebe93Hb.p2g
06/03/2004 09:33 PM 1,188 WnvDwc.4j4
06/03/2004 09:33 PM 1,188 ZpuwLDK.tr4
06/03/2004 09:33 PM 1,188 Clj7ta7y.0x6
06/03/2004 09:33 PM 1,188 MyjpdVU1.t7a
06/03/2004 09:33 PM 1,188 Ieqm1D4C.8ju
06/03/2004 09:32 PM 1,188 Fua4.2bq
06/03/2004 09:32 PM 1,188 YxonQ.m27
06/03/2004 09:32 PM 1,188 CrwyNGMw.t50
06/03/2004 09:32 PM 1,188 IviTdB.v3b
06/03/2004 09:32 PM 1,188 Dap3xh2.2d5
06/03/2004 09:31 PM 1,188 KrwH5.zd2
06/03/2004 09:31 PM 1,188 YslQopex.d5k
06/03/2004 09:31 PM 1,188 Pelur4.0s6
06/03/2004 09:31 PM 1,188 FdrMzk3.326
06/03/2004 09:31 PM 1,188 KfsvG.l5k
06/03/2004 09:30 PM 1,188 ZtmKpqfy.e5l
06/03/2004 09:30 PM 1,188 Owe5w.42t
06/03/2004 09:30 PM 1,188 YugCu7.c6s
06/03/2004 09:30 PM 1,188 Mqly.aw3
06/03/2004 09:29 PM 1,188 RfheEl.v00
06/03/2004 09:29 PM 1,188 DdlKe7.4j7
06/03/2004 09:29 PM 1,188 TqfgN9.11t
06/03/2004 09:29 PM 1,188 Vyqgt8t.73u
06/03/2004 09:29 PM 1,188 JyfZ.861
06/03/2004 09:29 PM 1,188 Hmr4eL.801
06/03/2004 09:28 PM 1,188 Qup11.tm7
06/03/2004 09:28 PM 1,188 Xyxvhu9u.838
06/03/2004 09:28 PM 1,188 TeeL3.b37
06/03/2004 09:28 PM 1,188 MffebdS.46b
06/03/2004 09:27 PM 1,188 Ogggx89m.248
06/03/2004 12:46 PM 1,188 Klk070.42b
06/03/2004 12:45 PM 1,020 ZznF.757
06/03/2004 12:44 PM 1,188 DckJd7.3i6
06/03/2004 12:44 PM 1,188 Wjdi.65q
06/03/2004 12:43 PM 1,188 SjyzN.9vx
06/03/2004 09:46 AM 1,020 FubK.3cq
06/03/2004 09:45 AM 1,188 Fsf6AY.sgy
06/03/2004 09:44 AM 1,020 Mwm74TVT.u3t
06/03/2004 09:43 AM 1,188 CylHzX2.88d
06/03/2004 09:43 AM 1,188 Geke3M.3c3
06/03/2004 09:43 AM 1,188 CfoD01z.4x0
06/03/2004 09:42 AM 1,188 Ysda8qX5.mod
06/03/2004 09:42 AM 1,188 HcyB8.ct6
06/03/2004 09:41 AM 1,188 RxrWgd1.7e3
06/03/2004 09:41 AM 1,188 PbcaYZV.579
06/03/2004 09:41 AM 1,188 Bnwci.433
06/03/2004 09:40 AM 1,188 Mdl7.m7c
06/03/2004 09:40 AM 1,188 Nyjw1Wb1.a70
06/03/2004 09:39 AM 1,188 Bepls09.7hz
06/03/2004 09:39 AM 1,188 CullUk.d6c
06/03/2004 09:39 AM 1,188 Twg7s.u6c
06/03/2004 09:38 AM 1,188 Igmg4n41.r0a
06/03/2004 09:38 AM 1,188 QoleB1Kc.33g
06/03/2004 09:38 AM 1,188 Hcpl.1i4
06/03/2004 09:37 AM 1,188 Ihpp39P.ox5
06/03/2004 09:37 AM 1,188 Lpj12vnu.10v
06/03/2004 09:37 AM 1,188 QcfK.d3k
06/03/2004 09:36 AM 1,188 VjzJoRn.h5f
06/03/2004 09:36 AM 1,188 Mkp3P9N2.vf1
06/03/2004 09:36 AM 1,188 Bcka1zS9.koq
06/03/2004 09:35 AM 1,188 GwuvKDJ.tq6
06/03/2004 09:35 AM 1,188 HotE.lw0
06/03/2004 09:35 AM 1,188 Zoq4n71j.las
06/03/2004 09:34 AM 1,188 AxsMO.180
06/03/2004 09:34 AM 1,188 Rfq88le.476
06/03/2004 09:34 AM 1,188 EhiwM2.td0
06/03/2004 09:33 AM 1,188 FteiKZ.rxh
06/03/2004 09:33 AM 1,188 Msm6By.95y
06/03/2004 09:32 AM 1,188 Ppx8QFx8.e78
06/03/2004 09:32 AM 1,188 Qoi11ums.107
06/03/2004 09:32 AM 1,188 Ejo3bI.7yz
06/03/2004 09:31 AM 1,188 Pxh9iNP.181
06/03/2004 09:31 AM 1,188 Vtz7.y0x
06/03/2004 09:31 AM 1,188 Ktj4137Q.rf6
06/03/2004 09:30 AM 1,188 BzfZe.2d8
06/03/2004 09:30 AM 1,188 EsdHJ.9rx
06/03/2004 09:30 AM 1,188 YqonQ.m2m
06/03/2004 09:29 AM 1,188 Ftei.k96

KanMan
2005-12-31, 14:18
06/03/2004 09:29 AM 1,188 Fjsh12vo.710
06/03/2004 09:29 AM 1,188 BvoM.67i
06/03/2004 09:28 AM 1,188 CckJds.3i6
06/03/2004 09:28 AM 1,188 Jjrq49Q.5yo
06/03/2004 09:28 AM 1,188 GbcZN9Eg.18k
06/03/2004 09:27 AM 1,188 Tfq1.4d3
06/03/2004 09:27 AM 1,188 VcisZKo.qfy
06/03/2004 09:27 AM 1,188 HuhTWT.u3u
06/03/2004 09:26 AM 1,188 Araibh6.53w
06/03/2004 09:26 AM 1,188 Voi2lmBU.akh
06/03/2004 09:25 AM 1,188 Kkk3U2.k2i
06/03/2004 09:25 AM 1,188 Adh0F0.dr1
06/03/2004 09:25 AM 1,188 Nbm6sh0.g65
06/03/2004 09:24 AM 1,188 Nth7535.65p
06/03/2004 09:24 AM 1,188 KrbsC2.396
06/03/2004 09:23 AM 1,188 CykG9EgD.8du
06/03/2004 09:23 AM 1,188 Rxdn74k.lat
06/03/2004 09:23 AM 1,188 XkvA.063
06/03/2004 09:22 AM 1,188 Lnpl7L.q7p
06/03/2004 09:22 AM 1,188 AeyMO3.v3l
06/03/2004 09:21 AM 1,188 Ahf6E545.kdj
06/03/2004 09:21 AM 1,188 Rle0HIX.6wg
06/03/2004 09:20 AM 1,188 Mnm181.4jd
06/03/2004 09:20 AM 1,188 TfoNTda.06a
06/03/2004 09:19 AM 1,188 Qud7Q.r29
06/03/2004 09:19 AM 1,188 UhjPh.5p4
06/03/2004 09:18 AM 1,188 WseAs6.a6q
06/03/2004 09:18 AM 1,188 Fbw0.t06
06/03/2004 09:17 AM 1,188 HxuwLEku.r70
06/03/2004 09:17 AM 1,188 NxyF.cv3
06/03/2004 09:16 AM 1,188 Zmz4.87m
06/03/2004 09:16 AM 1,188 EwuuW7.m74
06/03/2004 09:15 AM 1,188 Ueg8ab.qjp
06/03/2004 09:15 AM 1,188 IpuF.lw0
06/03/2004 09:14 AM 1,188 Vfmmx.017
06/03/2004 09:14 AM 1,188 Fdjc3r2.a59
06/03/2004 09:14 AM 1,188 Ynt10UI.a93
06/03/2004 09:13 AM 1,188 MvuC1.4d3
06/03/2004 09:13 AM 1,188 Tfb5feN1.d48
06/03/2004 09:13 AM 1,188 Sqv6.v97
06/03/2004 09:13 AM 1,188 Rbl7x.zoh
06/03/2004 09:12 AM 1,188 Vbx65.3w5
06/03/2004 09:12 AM 1,188 CckJd6.3i6
06/03/2004 09:12 AM 1,188 Ikd7y3Fz.o2e
06/03/2004 09:11 AM 1,188 WditARpr.g9f
06/03/2004 09:11 AM 1,188 Utqj2HVh.4o4
06/03/2004 09:11 AM 1,188 YlwBC646.a9r
06/03/2004 09:10 AM 1,188 Mfh5TdA.u3a
06/03/2004 09:10 AM 1,188 Vkra9SG.y8g
06/03/2004 09:10 AM 1,188 Wfe4Nv.5sv
06/03/2004 09:10 AM 1,188 JgvWdosu.3c3
06/03/2004 09:09 AM 1,188 SirZSY.if9
06/03/2004 09:09 AM 1,188 WseAs9a.8q9
06/03/2004 09:08 AM 1,188 Ist0X68h.451
06/03/2004 09:08 AM 1,188 Tiwy8X.180
06/03/2004 09:08 AM 1,188 Fit6v21X.l1c
06/03/2004 09:08 AM 1,188 FmrC.jt9
06/03/2004 09:07 AM 1,188 Eta3.2bp
06/03/2004 09:07 AM 1,188 Ovs0A.397
06/03/2004 09:07 AM 1,188 Ffevo.u10
06/03/2004 09:06 AM 1,188 LfydBD.746
06/03/2004 09:06 AM 1,188 Avq7n74j.lat
06/03/2004 09:06 AM 1,188 Obx3BaJz.z26
06/03/2004 09:06 AM 1,188 ElcTD.01s
06/03/2004 09:05 AM 1,188 PnbdK.7zb
06/03/2004 09:05 AM 1,188 Mjezapi.oy8
06/03/2004 09:05 AM 1,188 Zak3Y9fP.78l
06/03/2004 09:04 AM 1,188 Amvag.j23
06/03/2004 09:04 AM 1,188 MvtC1.4d3
06/03/2004 09:04 AM 1,188 OzaH.dx1
06/03/2004 09:04 AM 1,188 Celb1aT0.lqr
06/03/2004 09:03 AM 1,188 Hac35Y.8pe
06/03/2004 09:03 AM 1,188 EknZ4Q.9p3
06/03/2004 09:03 AM 1,188 Cdo4.b0i
06/03/2004 09:03 AM 1,188 Kxa2Xd2c.80m
06/03/2004 09:02 AM 1,188 Igmg4o41.r00
06/03/2004 09:02 AM 1,188 BmxKS.k6s
06/03/2004 09:02 AM 1,188 PkuRoH5.ge2
06/03/2004 09:01 AM 1,188 XvbUa.0zs
06/03/2004 09:01 AM 1,188 LspzX.288
06/03/2004 09:01 AM 1,188 Qrt39P.5x5
06/03/2004 09:01 AM 1,188 Wcy65.3x6
06/03/2004 09:00 AM 1,188 Hqx2q.2g4
06/03/2004 09:00 AM 1,188 Vfp801.slr
06/03/2004 09:00 AM 1,188 CbkJdr.3i6
06/03/2004 09:00 AM 1,188 LsxI5.0eg
06/03/2004 08:59 AM 1,188 Sjjk.b90
06/03/2004 08:59 AM 1,188 CkgR5y5o.82k
06/03/2004 08:59 AM 1,188 Aaar.kqa
06/03/2004 08:58 AM 1,188 KvcCN67i.bh6
06/03/2004 08:58 AM 1,188 PdsDI4.h0h
06/03/2004 08:58 AM 1,188 IxeN.kf7
06/03/2004 08:58 AM 1,188 Cdn4.a0h
06/03/2004 08:57 AM 1,188 ZjtA22w.ov1
06/03/2004 08:57 AM 1,188 AxsNO.181
06/03/2004 08:57 AM 1,188 Eedb5.010
06/03/2004 08:57 AM 1,188 VhkQi.5p4
06/03/2004 08:56 AM 1,188 Etg3GhoH.m5l
06/03/2004 08:56 AM 1,188 XiaHV.g4o
06/03/2004 08:56 AM 1,188 Scjj.u90
06/03/2004 08:55 AM 1,188 SbziJQ.j5q
06/03/2004 08:55 AM 1,188 JqvGn.x11
06/03/2004 08:55 AM 1,188 GebU6t.a7y
06/03/2004 08:55 AM 1,188 Rhnxu5.1u7
06/03/2004 08:54 AM 1,188 Rjjj.a90
06/03/2004 08:54 AM 1,188 RkmsYif2.5g4
06/03/2004 08:54 AM 1,188 WtoJ.497
06/03/2004 08:54 AM 1,188 CwwUS.730
06/03/2004 08:53 AM 1,188 Yxu5.kls
06/03/2004 08:53 AM 1,188 Yeb54.lz4
06/03/2004 08:53 AM 1,188 RiqYR.xhe
06/03/2004 08:53 AM 1,188 Whs9.5fd
06/03/2004 08:52 AM 1,188 Bls71H.j96
06/03/2004 08:52 AM 1,188 InyL4TD3.3z6
06/03/2004 08:52 AM 1,188 UgpOUeb0.6b2
06/03/2004 08:51 AM 1,188 OffmXUW4.147

KanMan
2005-12-31, 14:23
It's really too long to long to post on here so heres a link to the full report:

http://rapidshare.de/files/10153393/report12.txt.html

scroll down and click free

LonnyRJones
2005-12-31, 15:12
Thanks

Close any programs you have open since this step requires a reboot.
Close the internet connection, Unplug your modem !! if on cable or satalite.
From the l2mfix folder on your desktop, double click l2mfix.bat and select option #2 for Run Fix by typing 2 and then pressing enter. It will process then start. Your desktop and icons will disappear (this is normal). L2mfix will continue to scan your computer and when it's finished, it will be ready for a reboot.
Press any key to reboot. After the reboot notepad will open with a log. Copy the contents of that log and paste it back into this thread, along with a new hijackthis log.

KanMan
2006-01-01, 03:26
Heres the l2mfix log:

http://rapidshare.de/files/10181913/log12.txt.html

Fresh HJT Log:

Logfile of HijackThis v1.99.1
Scan saved at 6:25:55 PM, on 12/31/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbload.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Zachie\My Documents\hijackthis\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dellnet.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
O20 - Winlogon Notify: msupdate - C:\WINDOWS\SYSTEM32\msupdate32.dll
O20 - Winlogon Notify: Shell Extensions - C:\WINDOWS\system32\lvl6093se.dll (file missing)
O20 - Winlogon Notify: WB - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\fastload.dll
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Intel(R) NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe (file missing)
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe

LonnyRJones
2006-01-01, 07:05
Start Hijackthis and place a check next to these items If there.
O20 - Winlogon Notify: msupdate - C:\WINDOWS\SYSTEM32\msupdate32.dll
O20 - Winlogon Notify: Shell Extensions - C:\WINDOWS\system32\lvl6093se.dll (file missing)
====================================
Hit fix checked and close Hijackthis.
Restart the PC
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Find and delete (if there)
C:\WINDOWS\system32\A.dll
C:\WINDOWS\system32\mspostsp.exe
C:\WINDOWS\system32\msupdate32.dll

replace the hosts file
http://www.mvps.org/winhelp2002/hosts.htm
How To Download and Extract the HOSTS file:
http://www.mvps.org/winhelp2002/hosts2.htm
Replace it about once monthly
How did that go ?

Let us know if there are any problems

KanMan
2006-01-01, 08:02
wow, before i did the following step I hadent seen a pop up all day and I still havent seems like you fixed it! thanks alot donny I will keep you updated if anything else arrises. once again thank you for the help! :bigthumb:

LonnyRJones
2006-01-04, 07:00
Im Glad we could help
Since the problems are solved Im going to close the topic now, this keeps others with similar problems from posting there logs/question here, they should start a new topic.
If you should need to post another log for the same PC let me or Tashi know.