PDA

View Full Version : Dowloader trouble



bkbrooks
2008-01-13, 18:38
I am so glad I found this forum. I have had a dowloader problem now for a few weeks. I have followed the "before you post" instructions, and would request help in getting rid of this issue. I clean my system, but Smitfraud and ZLOB download continue to appear. I get the little yellow box in Explorer to dowload antivirus software. Cant ween to get it clean. Thanks...

Here is my HJT file:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:20:20 AM, on 1/13/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\DeltTray.exe
C:\WINDOWS\System32\umonit.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://dellnet.msn.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: BDEX System - {986F4076-F780-4FD2-93C7-6A8C9DAFD7B0} - C:\WINDOWS\domnftwqkt.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.1121.2472\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: The emlkdvo - {3FD92B49-9C06-4EBA-9580-056159561908} - C:\WINDOWS\emlkdvo.dll (file missing)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [DeltTray] DeltTray.exe
O4 - HKLM\..\Run: [UMonit] C:\WINDOWS\System32\umonit.exe
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://support.cox.com/sdccommon/download/tgctlcm.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/12119/CTSUEng.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/download/ipixx.cab
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {21F16767-8DA7-4113-BEB0-F161B313407F} (XMirage Control) - http://www.myfamily.com/plugins/ue/Install_UE.exe
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1186238650359
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} - http://atv.disney.go.com/global/download/otoy/OTOYAX29b.cab
O16 - DPF: {928626A3-6B98-11CF-90B4-00AA00A4011F} (SurroundVideoCtrl Object) - http://autos.msn.com/components/ocx/survid/MSSurVid.cab
O16 - DPF: {9294206B-A9B2-4F73-938E-89F694F48101} - http://xlonhcld.xlontech.net/100348/moveminute4/ldsdlprod.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
O16 - DPF: {BB47CA33-8B4D-11D0-9511-00C04FD9152D} (ExteriorSurround Object) - http://autos.msn.com/components/ocx/exterior/Outside.cab
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/hpdj/en/check/qdiagh.cab?326
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/12119/CTPID.cab
O16 - DPF: {FE5B9F54-7764-4C01-89F0-4862601EE954} (DigWebHelper Class) - http://photos.msn.com/resources/neutral/controls/DigWebX2.cab?10,0,910,0
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O21 - SSODL: bvtqfvx - {E6CC6C2B-FF66-49D9-A5F5-F7022BEFC1C3} - C:\WINDOWS\bvtqfvx.dll (file missing)
O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Intel(R) NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Photoshop Elements Device Connect (PhotoshopElementsDeviceConnect) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe

--
End of file - 10867 bytes

bkbrooks
2008-01-13, 18:44
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Sunday, January 13, 2008 7:29:58 AM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 13/01/2008
Kaspersky Anti-Virus database records: 509536
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\

Scan Statistics:
Total number of scanned objects: 183855
Number of viruses found: 8
Number of infected objects: 20
Number of suspicious objects: 0
Duration of the scan process: 02:48:12

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\2008-01-12_Log.ALUSchedulerSvc.LiveUpdate Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBConfig.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBDebug.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBDetect.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBNotify.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBRefr.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetCfg.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetCfg2.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetDev.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetLoc.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetUsr.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBStHash.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBValid.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\SPPolicy.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\SPStart.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\SPStop.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtErEvt.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtETmp\0E336521.TMP Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtMoEvt.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtNvEvt.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtScEvt.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtTxFEvt.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtViEvt.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SubEng\submissions.idx Object is locked skipped
C:\Documents and Settings\Brian\Cookies\INDEX.DAT Object is locked skipped
C:\Documents and Settings\Brian\Desktop\SmitfraudFix\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\Documents and Settings\Brian\Desktop\SmitfraudFix.exe/data.rar/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\Documents and Settings\Brian\Desktop\SmitfraudFix.exe/data.rar Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\Documents and Settings\Brian\Desktop\SmitfraudFix.exe RarSFX: infected - 2 skipped
C:\Documents and Settings\Brian\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Brian\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Brian\Local Settings\History\History.IE5\INDEX.DAT Object is locked skipped
C:\Documents and Settings\Brian\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Brian\My Documents\Downloads\BSf_x86t32.exe/WISE0022.BIN/data0001.cab/Save.exe Infected: not-a-virus:AdWare.Win32.SaveNow.c skipped
C:\Documents and Settings\Brian\My Documents\Downloads\BSf_x86t32.exe/WISE0022.BIN/data0001.cab/SaveUninst.exe Infected: not-a-virus:AdWare.Win32.SaveNow.af skipped
C:\Documents and Settings\Brian\My Documents\Downloads\BSf_x86t32.exe/WISE0022.BIN/data0001.cab Infected: not-a-virus:AdWare.Win32.SaveNow.af skipped
C:\Documents and Settings\Brian\My Documents\Downloads\BSf_x86t32.exe/WISE0022.BIN/data0002.cab/Weather.exe Infected: not-a-virus:AdWare.Win32.SaveNow.ay skipped
C:\Documents and Settings\Brian\My Documents\Downloads\BSf_x86t32.exe/WISE0022.BIN/data0002.cab/Uninst.exe Infected: not-a-virus:AdWare.Win32.SaveNow.f skipped
C:\Documents and Settings\Brian\My Documents\Downloads\BSf_x86t32.exe/WISE0022.BIN/data0002.cab Infected: not-a-virus:AdWare.Win32.SaveNow.f skipped
C:\Documents and Settings\Brian\My Documents\Downloads\BSf_x86t32.exe/WISE0022.BIN Infected: not-a-virus:AdWare.Win32.SaveNow.f skipped
C:\Documents and Settings\Brian\My Documents\Downloads\BSf_x86t32.exe WiseSFX: infected - 7 skipped
C:\Documents and Settings\Brian\My Documents\Downloads\BSf_x86t32.exe WiseSFXDropper: infected - 7 skipped
C:\Documents and Settings\Brian\My Documents\Downloads\BSINSTALL.exe/WISE0024.BIN/data0001.cab/VVSN.exe Infected: not-a-virus:AdWare.Win32.SaveNow.z skipped
C:\Documents and Settings\Brian\My Documents\Downloads\BSINSTALL.exe/WISE0024.BIN/data0001.cab Infected: not-a-virus:AdWare.Win32.SaveNow.z skipped
C:\Documents and Settings\Brian\My Documents\Downloads\BSINSTALL.exe/WISE0024.BIN Infected: not-a-virus:AdWare.Win32.SaveNow.z skipped
C:\Documents and Settings\Brian\My Documents\Downloads\BSINSTALL.exe WiseSFX: infected - 3 skipped
C:\Documents and Settings\Brian\My Documents\Downloads\BSINSTALL.exe WiseSFXDropper: infected - 3 skipped
C:\Documents and Settings\Brian\ntuser.dat Object is locked skipped
C:\Documents and Settings\Brian\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\INDEX.DAT Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\INDEX.DAT Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\INDEX.DAT Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcrst.dll Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\EENGINE\EPERSIST.DAT Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\NFWEVT.LOG Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDALRT.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDCON.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDDBG.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDFW.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDIDS.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDSYS.log Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\00000002.ps1 Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\00000002.ps2 Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\00010003.ci Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\cicat.fid Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\cicat.hsh Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\CiCL0001.000 Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\CiP10000.000 Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\CiP20000.000 Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\CiPT0000.000 Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\CiSL0001.000 Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\CiSP0000.000 Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\CiST0000.000 Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\CiVP0000.000 Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\INDEX.000 Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\propstor.bk1 Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\propstor.bk2 Object is locked skipped
C:\Program Files\Norton AntiVirus\AVApp.log Object is locked skipped
C:\Program Files\Norton AntiVirus\AVError.log Object is locked skipped
C:\Program Files\Norton AntiVirus\AVVirus.log Object is locked skipped
C:\System Volume Information\catalog.wci\00000002.ps1 Object is locked skipped
C:\System Volume Information\catalog.wci\00000002.ps2 Object is locked skipped
C:\System Volume Information\catalog.wci\00010004.ci Object is locked skipped
C:\System Volume Information\catalog.wci\cicat.fid Object is locked skipped
C:\System Volume Information\catalog.wci\cicat.hsh Object is locked skipped
C:\System Volume Information\catalog.wci\CiCL0001.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiP10000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiP20000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiPT0000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiSL0001.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiSP0000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiST0000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiVP0000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\INDEX.000 Object is locked skipped
C:\System Volume Information\catalog.wci\propstor.bk1 Object is locked skipped
C:\System Volume Information\catalog.wci\propstor.bk2 Object is locked skipped
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}\RP1896\A0154839.exe Infected: not-a-virus:AdWare.Win32.Vapsup.vq skipped
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}\RP1902\A0156326.ocx Infected: Trojan.Win32.Agent.dpv skipped
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}\RP1910\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{9BA96202-BC71-472C-AD0B-7BA0DABF574D}.bin Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\AppEvent.Evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\Internet.evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\ODiag.evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\OSession.evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SAM Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SAM.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SecEvent.Evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SECURITY Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SECURITY.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SysEvent.Evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\H323LOG.TXT Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\WIADEBUG.LOG Object is locked skipped
C:\WINDOWS\WIASERVC.LOG Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.

pskelley
2008-01-14, 14:03
Welcome to Safer Networking, I wish to be sure you have viewed and understand this information.
"BEFORE you POST" (READ this Procedure before Requesting Assistance)
http://forums.spybot.info/showthread.php?t=288
All advice given is taken at your own risk.
Please make sure you have read this information so we are on the same page.

Someone has installed some real junk on this computer:
C:\Documents and Settings\Brian\My Documents\Downloads\BSf_x86t32.exe
C:\Documents and Settings\Brian\My Documents\Downloads\BSINSTALL.exe
See this: http://www.fbmsoftware.com/spyware-net/process/BSINSTALL_EXE/587/
http://www.ca.com/us/securityadvisor/pest/pest.aspx?id=453060286

Start by deleting that junk from your computer, the files in red.

Read and follow the directions carefully, the tools will not work if you do not. If you still have Smitfraudfix on your computer, delete it and download it new from the link I provided.

1) http://siri.geekstogo.com/SmitfraudFix.php <<< download Smitfraudfix from here and follow ONLY these directions.

Search:
Double-click SmitfraudFix.exe
Select 1 and hit Enter to create a report of the infected files. The report can be found at the root of the system drive, usually at C:\rapport.txt

Note: process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool". It is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
http://www.beyondlogic.org/consulting/processutil/processutil.htm

2 Thanks to andymanchesta and anyone else who helped with the fix.

Download SDFix and save it to your Desktop
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe

Double click SDFix.exe and it will extract the files to %systemdrive%
(Drive that contains the Windows Directory, typically C:\SDFix)

Please then reboot your computer in Safe Mode by doing the following :
Restart your computer
After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
Instead of Windows loading as normal, the Advanced Options Menu should appear;
Select the first option, to run Windows in Safe Mode, then press Enter.
Choose your usual account.
Open the extracted SDFix folder and double click RunThis.bat to start the script.
Type Y to begin the cleanup process.
It will remove any Trojan Services and Registry Entries that it finds then prompt you to press any key to Reboot.
Press any Key and it will restart the PC.
When the PC restarts the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.
Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt
(Report.txt will also be copied to Clipboard ready for posting back on the forum).
Finally post the C:\rapport.txt from Smitfraudfix, the contents of the SDFix Report.txt back on the forum with a new HijackThis log

Thanks

bkbrooks
2008-01-15, 06:29
Thanks so much. I have followed the instructions.. here are the results:

Smitfraud rapport.txt:
SmitFraudFix v2.274

Scan done at 21:26:20.57, Mon 01/14/2008
Run from C:\Documents and Settings\Brian\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\umonit.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPBOID.EXE
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Brian


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Brian\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Start Menu


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Brian\FAVORI~1


»»»»»»»»»»»»»»»»»»»»»»»» Desktop


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components



»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, following keys are not inevitably infected!!!

IEDFix.exe by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Rustock



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Intel(R) PRO/100 M Network Connection - Packet Scheduler Miniport
DNS Server Search Order: 68.105.28.11
DNS Server Search Order: 68.105.29.11
DNS Server Search Order: 68.105.28.12

HKLM\SYSTEM\CCS\Services\Tcpip\..\{5352AC67-6DFC-4CF0-9ECD-0AAB746E96FC}: DhcpNameServer=68.105.28.11 68.105.29.11 68.105.28.12
HKLM\SYSTEM\CS1\Services\Tcpip\..\{5352AC67-6DFC-4CF0-9ECD-0AAB746E96FC}: DhcpNameServer=68.2.16.25 68.2.16.30 68.6.16.30
HKLM\SYSTEM\CS2\Services\Tcpip\..\{5352AC67-6DFC-4CF0-9ECD-0AAB746E96FC}: DhcpNameServer=68.105.28.11 68.105.29.11 68.105.28.12
HKLM\SYSTEM\CS3\Services\Tcpip\..\{5352AC67-6DFC-4CF0-9ECD-0AAB746E96FC}: DhcpNameServer=68.105.28.11 68.105.29.11 68.105.28.12
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=68.105.28.11 68.105.29.11 68.105.28.12
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=68.2.16.25 68.2.16.30 68.6.16.30
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=68.105.28.11 68.105.29.11 68.105.28.12
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=68.105.28.11 68.105.29.11 68.105.28.12


»»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection


»»»»»»»»»»»»»»»»»»»»»»»» End

bkbrooks
2008-01-15, 06:37
the Sd fix report was much to long to post. SHould I attach the txt file as an attachment?

bkbrooks
2008-01-15, 06:40
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:18:30 PM, on 1/14/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\DeltTray.exe
C:\WINDOWS\System32\umonit.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: (no name) - {986F4076-F780-4FD2-93C7-6A8C9DAFD7B0} - (no file)
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.1121.2472\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [DeltTray] DeltTray.exe
O4 - HKLM\..\Run: [UMonit] C:\WINDOWS\System32\umonit.exe
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://support.cox.com/sdccommon/download/tgctlcm.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/12119/CTSUEng.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/download/ipixx.cab
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {21F16767-8DA7-4113-BEB0-F161B313407F} (XMirage Control) - http://www.myfamily.com/plugins/ue/Install_UE.exe
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1186238650359
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} - http://atv.disney.go.com/global/download/otoy/OTOYAX29b.cab
O16 - DPF: {928626A3-6B98-11CF-90B4-00AA00A4011F} (SurroundVideoCtrl Object) - http://autos.msn.com/components/ocx/survid/MSSurVid.cab
O16 - DPF: {9294206B-A9B2-4F73-938E-89F694F48101} - http://xlonhcld.xlontech.net/100348/moveminute4/ldsdlprod.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
O16 - DPF: {BB47CA33-8B4D-11D0-9511-00C04FD9152D} (ExteriorSurround Object) - http://autos.msn.com/components/ocx/exterior/Outside.cab
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/hpdj/en/check/qdiagh.cab?326
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/12119/CTPID.cab
O16 - DPF: {FE5B9F54-7764-4C01-89F0-4862601EE954} (DigWebHelper Class) - http://photos.msn.com/resources/neutral/controls/DigWebX2.cab?10,0,910,0
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Intel(R) NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Photoshop Elements Device Connect (PhotoshopElementsDeviceConnect) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe

--
End of file - 10548 bytes

pskelley
2008-01-15, 12:58
Use as many posts as you need to post the information I request.

Thanks

pskelley
2008-01-15, 13:18
Once you have posted the SDFix report, you may continue with these instructions.

We need first to disable TeaTimer that it doesn't interfere with fixes. You can re-enable it when you're clean again:
* Run Spybot-S&D in Advanced Mode.
* If it is not already set to do this Go to the Mode menu select "Advanced Mode"
* On the left hand side, Click on Tools
* Then click on the Resident Icon in the List
* Uncheck "Resident TeaTimer" and OK any prompts.
* Restart your computer.

Please download ATF Cleaner by Atribune
http://www.atribune.org/content/view/25/2/
Save it to your Desktop. We will use this later.

Open HijackThis and choose "Do a system scan only" then check the box in front of these line items:

(if you use this as your start page, you may leave it)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com

O2 - BHO: (no name) - {986F4076-F780-4FD2-93C7-6A8C9DAFD7B0} - (no file)

(if you are positive this is safe you may leave it)
O16 - DPF: {9294206B-A9B2-4F73-938E-89F694F48101} - http://xlonhcld.xlontech.net/100348/.../ldsdlprod.cab

Close all programs but HJT and all browser windows, then click on "Fix Checked"

Run ATF Cleaner
Double-click ATF-Cleaner.exe to run the program.
Click Select All found at the bottom of the list.
Click the Empty Selected button.
Click Exit on the Main menu to close the program.

Remove Smitfraudfix and SDFix from your computer and run a new Kaspersky scan using these settings.

* The program will launch and then begin downloading the latest definition files:
* Once the files have been downloaded click on NEXT
* Now click on Scan Settings
* In the scan settings make that the following are selected:
* Scan using the following Anti-Virus database:
* Standard
* Scan Options:
* Scan Archives
* Scan Mail Bases
* Click OK
* Now under select a target to scan:
* Select My Computer
* This will program will start and scan your system.
* The scan will take a while so be patient and let it run.
* Once the scan is complete it will display if your system has been infected.
* Now click on the Save as Text button:
* Save the file to your desktop.

Then post it here. Let me know how the computer is running at this point.

Thanks

bkbrooks
2008-01-15, 16:56
SDFix: Version 1.126

Run by Brian on Mon 01/14/2008 at 09:38 PM

Microsoft Windows XP [Version 5.1.2600]

Running From: C:\SDFix

Safe Mode:
Checking Services:


Restoring Windows Registry Values
Restoring Windows Default Hosts File
Restoring Default HomePage Value
Restoring Default Desktop Components Value

Rebooting...


Normal Mode:
Checking Files:

Trojan Files Found:

C:\_NIM4711.TMP - Deleted
C:\DOCUME~1\Brian\LOCALS~1\Temp\ac8zt2.dat - Deleted
C:\WINDOWS\dat.txt - Deleted
C:\WINDOWS\domnftwqkt.dll - Deleted
C:\WINDOWS\rs.txt - Deleted
C:\WINDOWS\search_res.txt - Deleted




Removing Temp Files...

ADS Check:

C:\WINDOWS
No streams found.

C:\WINDOWS\system32
No streams found.

C:\WINDOWS\system32\svchost.exe
No streams found.

C:\WINDOWS\system32\ntoskrnl.exe
No streams found.



Final Check:

catchme 0.3.1344.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-14 21:55:12
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Remaining Services:
------------------



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\Real\\RealPlayer\\realplay.exe"="C:\\Program Files\\Real\\RealPlayer\\realplay.exe:*:Enabled:RealOne Player"
"C:\\Program Files\\Support.com\\bin\\tgcmd.exe"="C:\\Program Files\\Support.com\\bin\\tgcmd.exe:*:Enabled:Support.com Scheduler and Command Dispatcher"
"C:\\Program Files\\Macromedia\\Dreamweaver MX 2004\\Dreamweaver.exe"="C:\\Program Files\\Macromedia\\Dreamweaver MX 2004\\Dreamweaver.exe:*:Enabled:Dreamweaver MX 2004"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"D:\\setup\\HPZNET01.EXE"="D:\\setup\\HPZNET01.EXE:*:Enabled:hpznet01.exe"
"D:\\setup\\HPONICIFS01.EXE"="D:\\setup\\HPONICIFS01.EXE:*:Enabled:hponicifs01.exe"
"C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqtra08.exe"="C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqste08.exe"="C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpofxm08.exe"="C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hposfx08.exe"="C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hposid01.exe"="C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hposid01.exe:*:Enabled:hposid01.exe"
"C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqscnvw.exe"="C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqkygrp.exe"="C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqCopy.exe"="C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpfccopy.exe"="C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpzwiz01.exe"="C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\Unload\\HpqPhUnl.exe"="C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\Unload\\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\Unload\\HpqDIA.exe"="C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\Unload\\HpqDIA.exe:*:Enabled:hpqdia.exe"
"C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpoews01.exe"="C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqnrs08.exe"="C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqnrs08.exe:*:Enabled:hpqnrs08.exe"
"C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe"="C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
"C:\\Program Files\\TurboTax\\Home & Business 2006\\32bit\\ttax.exe"="C:\\Program Files\\TurboTax\\Home & Business 2006\\32bit\\ttax.exe:LocalSubNet:Enabled:TurboTax"
"C:\\Program Files\\TurboTax\\Home & Business 2006\\32bit\\updatemgr.exe"="C:\\Program Files\\TurboTax\\Home & Business 2006\\32bit\\updatemgr.exe:LocalSubNet:Enabled:TurboTax Update Manager"
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe"="C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"

Remaining Files:
---------------

File Backups: - C:\SDFix\backups\backups.zip

Files with Hidden Attributes:

Sat 2 Aug 2003 42 ...HR --- "C:\WINDOWS\SYSTEM\d1345a.dll"
Wed 5 Feb 2003 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Tue 12 Sep 2006 107,520 ...H. --- "C:\Documents and Settings\Debbie\My Documents\~WRL2089.tmp"
Tue 12 Sep 2006 79,872 ...H. --- "C:\Documents and Settings\Debbie\My Documents\~WRL2813.tmp"
Thu 28 Jun 2007 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Aubrey\Local Settings\Temp\BIT23.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Aubrey\Local Settings\Temp\BIT31.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Aubrey\Local Settings\Temp\BIT33.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Aubrey\Local Settings\Temp\BIT35.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Aubrey\Local Settings\Temp\BIT39.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Aubrey\Local Settings\Temp\BIT3D.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Aubrey\Local Settings\Temp\BIT40.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Aubrey\Local Settings\Temp\BIT43.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Aubrey\Local Settings\Temp\BIT4A.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Aubrey\Local Settings\Temp\BIT4C.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Aubrey\Local Settings\Temp\BIT4E.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Aubrey\Local Settings\Temp\BIT50.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Aubrey\Local Settings\Temp\BIT53.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Aubrey\Local Settings\Temp\BIT56.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Aubrey\Local Settings\Temp\BIT58.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Aubrey\Local Settings\Temp\BIT5B.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Aubrey\Local Settings\Temp\BIT5D.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Aubrey\Local Settings\Temp\BIT60.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Aubrey\Local Settings\Temp\BIT65.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Aubrey\Local Settings\Temp\BIT68.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Aubrey\Local Settings\Temp\BIT6B.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Aubrey\Local Settings\Temp\BIT6E.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Aubrey\Local Settings\Temp\BIT70.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT101.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT103.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT105.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT107.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1086.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1088.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT108A.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT108B.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT109.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1090.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1093.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1095.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1097.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1099.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT109A.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT109D.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT109F.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT10A1.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT10A3.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT10A5.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT10A7.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT10A9.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT10B.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT10D.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT10F.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT111.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT113.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT115.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT117.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT119.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT11B.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT11D.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT11F.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT121.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT123.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT125.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT127.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT129.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT12B.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT12D.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT12F.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT131.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT133.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT135.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT137.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT139.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1392.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13B.tmp"

bkbrooks
2008-01-15, 17:03
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13B4.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13B7.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13B8.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13BA.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13BB.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13BC.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13BE.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13BF.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13C0.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13C2.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13C3.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13C6.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13C7.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13C8.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13CA.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13CB.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13CC.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13CD.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13CE.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13D.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13D0.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13D2.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13D3.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13D6.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13D8.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13DA.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13DD.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13DE.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13E0.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13E1.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13E2.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13E4.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13E6.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13E7.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13E8.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13EA.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13EC.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13ED.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13EE.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13F.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13F0.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13F1.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13F2.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13F4.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13F6.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13F7.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13F8.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13F9.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13FB.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13FC.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13FE.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT13FF.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1401.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1402.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1404.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1405.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1408.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1409.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT140A.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT140B.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT140E.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT140F.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT141.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1410.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1411.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1412.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1413.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1415.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1416.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1417.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1419.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT141A.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT141C.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT141D.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT141E.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT141F.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1422.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1423.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1424.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1425.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1427.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1428.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1429.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT142B.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT142C.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT142D.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT143.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1430.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1431.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1432.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1433.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1434.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1436.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1437.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1439.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT143B.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT143D.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT143E.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1440.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1441.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1442.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1444.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1445.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1446.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1449.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT144A.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT144C.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT144D.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT144E.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT145.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1450.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1451.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1452.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1453.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1454.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1456.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1458.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1459.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT145A.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT145C.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT145D.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT145E.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT145F.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1460.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1462.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1463.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1464.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1466.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1467.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1469.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT146A.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT146B.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT146C.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT146D.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT146F.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT147.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1470.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1471.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1473.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1474.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1475.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1477.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1478.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT147A.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT147C.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT147D.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT147E.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1480.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1481.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1482.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1484.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1485.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1486.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1488.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1489.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT148A.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT148C.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT148D.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT148E.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT149.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1490.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1491.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1492.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1494.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1495.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1497.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1499.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT149A.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT149B.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT149D.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT149F.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14A0.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14A1.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14A3.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14A4.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14A5.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14A7.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14A8.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14A9.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14AA.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14AB.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14AD.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14AE.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14AF.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14B.tmp"

bkbrooks
2008-01-15, 17:11
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14B1.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14B2.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14B3.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14B4.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14B6.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14B8.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14B9.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14BA.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14BD.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14BE.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14BF.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14C1.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14C2.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14C3.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14C5.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14C6.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14C7.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14C9.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14CA.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14CB.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14CD.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14CF.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14D.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14D0.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14D1.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14D3.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14D4.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14D5.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14D7.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14D8.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14D9.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14DB.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14DC.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14DD.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14DE.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14E0.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14E1.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14E3.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14E4.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14E5.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14E7.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14E8.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14E9.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14EB.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14EC.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14EE.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14EF.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14F.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14F0.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14F2.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14F3.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14F4.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14F5.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14F6.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14F8.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14F9.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14FA.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14FB.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14FC.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14FD.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14FF.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1500.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1501.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1503.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1504.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1505.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1507.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1508.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1509.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT150B.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT150C.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT150D.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT150F.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT151.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1510.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1512.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1513.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1514.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1515.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1516.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1517.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1518.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT151A.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT151B.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT151C.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT151D.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT151E.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT151F.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1520.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1521.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1522.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1523.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1525.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1526.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1527.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1528.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1529.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT152A.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT152B.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT152D.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT152E.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT152F.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT153.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1530.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1531.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1532.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1533.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1534.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1535.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1536.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1538.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1539.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT153A.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT153B.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT153C.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT153D.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT153E.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT153F.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1541.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1542.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1543.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1544.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1545.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1547.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1549.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT154A.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT154B.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT154C.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT154D.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT154E.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT154F.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT155.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1550.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1551.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1552.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1553.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1554.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1555.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1556.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1557.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1559.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT155A.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT155B.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT155D.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT155E.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT155F.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1560.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1561.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1562.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1563.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1565.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1566.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1567.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1568.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1569.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT156A.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT156C.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT156D.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT156F.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT157.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1570.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1571.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1572.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1573.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1574.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1575.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1577.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1578.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1579.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT157A.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT157B.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT157C.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT157D.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT157E.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT157F.tmp

bkbrooks
2008-01-15, 17:12
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1580.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1581.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1583.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1584.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1585.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1586.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1587.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1588.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1589.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT158B.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT158C.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT158D.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT158E.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT158F.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT159.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1590.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1591.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1593.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1594.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1595.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1596.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1597.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1598.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT159A.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT159B.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT159D.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT159E.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT159F.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15A0.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15A1.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15A2.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15A3.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15A5.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15A6.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15A7.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15A8.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15A9.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15AA.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15AB.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15AC.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15AE.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15AF.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15B.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15B0.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15B1.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15B2.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15B3.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15B5.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15B6.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15B7.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15B8.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15B9.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15BA.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15BB.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15BC.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15BD.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15BE.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15BF.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15C0.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15C1.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15C2.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15C4.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15C5.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15C6.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15C7.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15C8.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15C9.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15CA.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15CB.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15CD.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15CE.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15CF.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15D.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15D0.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15D1.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15D2.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15D3.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15D4.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15D5.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15D6.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15D7.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15D8.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15DA.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15DB.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15DC.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15DD.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15DE.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15DF.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15E0.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15E1.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15E2.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15E3.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15E4.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15E5.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15E6.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15E7.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15E8.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15E9.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15EA.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15EB.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15EC.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15ED.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15EF.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15F.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15F0.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15F1.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15F2.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15F3.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15F4.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15F5.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15F6.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15F7.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15F8.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15F9.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15FA.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15FB.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15FC.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15FD.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15FE.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT15FF.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1600.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1601.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1603.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1604.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1605.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1606.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1608.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1609.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT160A.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT160B.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT160C.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT160D.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT160E.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT160F.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT161.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1610.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1611.tmp"
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1612.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1613.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1614.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1615.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1616.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1617.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1618.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1619.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT161B.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT161C.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT161D.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT161E.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT161F.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1620.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1622.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1623.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1624.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1625.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1626.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1627.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1628.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT162A.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT162B.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT162C.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT162D.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT162E.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT163.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1630.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1631.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1632.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1633.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1634.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1635.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1636.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1638.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1639.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT163A.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT163C.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT163E.tmp"

bkbrooks
2008-01-15, 17:13
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1640.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1641.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1642.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1644.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1645.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1646.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1647.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1648.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT164A.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT164B.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT164C.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT164E.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT164F.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT165.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1650.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1651.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1652.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1654.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1655.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1656.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1658.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1659.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT165A.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT165B.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT165C.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT165D.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT165E.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT165F.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1660.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1661.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1662.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1664.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1665.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1666.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1667.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1668.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1669.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT166A.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT166B.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT166C.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT166E.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT166F.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT167.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1670.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1671.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1672.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1673.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1674.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1675.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1676.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1677.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1679.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT167A.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT167B.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT167C.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT167D.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT167E.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT167F.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1680.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1681.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1682.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1683.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1684.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1686.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1687.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1688.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1689.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT168A.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT168B.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT168C.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT168D.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT168E.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT168F.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT169.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1690.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1691.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1692.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1693.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1694.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1695.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1696.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1697.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1698.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT1699.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT169B.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT169C.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT169D.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT169F.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16A0.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16A1.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16A2.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16A3.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16A4.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16A5.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16A6.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16A7.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16A8.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16A9.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16AB.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16AC.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16AD.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16AE.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16AF.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16B.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16B0.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16B1.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16B2.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16B3.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16B4.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16B5.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16B6.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16B7.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16B8.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16B9.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16BA.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16BB.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16BC.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16BE.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16BF.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16C1.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16C2.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16C3.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16C4.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16C5.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16C6.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16C7.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16C8.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16C9.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16CA.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16CB.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16CC.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16CD.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16CE.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16CF.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16D.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16D0.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16D1.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16D2.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16D3.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16D4.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16D5.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16D6.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16D7.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16D8.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16D9.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16DA.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16DB.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16DC.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16DD.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16DE.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16DF.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16E0.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16E1.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16E2.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16E3.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16E4.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16E5.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16E6.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16E7.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16E8.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16E9.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16EA.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16EC.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16ED.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16EE.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16EF.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16F.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16F0.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16F1.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16F2.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16F3.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16F4.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16F5.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16F6.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16F7.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16F8.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16FA.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16FB.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16FC.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16FE.tmp"
Mon 7 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT16FF.tmp"

bkbrooks
2008-01-15, 17:15
It continues like that for another 10 pages or so... posting the end. If you need the additional data in the middle, I can continue to post, but dont want to spam the board with posts if not needed...

Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BITEF.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BITEF1.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BITEF3.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BITF00.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BITF06.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BITF1.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BITF1F.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BITF26.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BITF3.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BITF32.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BITF3B.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BITF4B.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BITF5.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BITF59.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BITF60.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BITF7.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BITF79.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BITF7B.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BITF9.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BITF92.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BITF96.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BITF9E.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BITFA6.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BITFA7.tmp"
Sat 5 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BITFAE.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BITFB.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BITFD.tmp"
Tue 8 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BITFF.tmp"
Wed 12 Dec 2007 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\0a67b6c406b1d7e0f5c1e6f6d44a3f6e\BIT5D.tmp"
Wed 12 Dec 2007 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\26924cbc8132a10b438ce6e2b49d4652\BIT5B.tmp"
Wed 12 Dec 2007 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\2769b111678c52099a3b3123b12f2325\BIT5F.tmp"
Wed 12 Dec 2007 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\b69c46c5109d0f8b0dee9fab84906813\BIT5E.tmp"
Wed 12 Dec 2007 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\d77b9b5b8fed23dd91f50d167cce60d3\BIT60.tmp"
Wed 12 Dec 2007 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\fa6c916bb150f8a929e7a4ffdfbc120f\BIT5C.tmp"
Tue 21 Feb 2006 285,184 ...H. --- "C:\Documents and Settings\Brian\Application Data\Microsoft\Word\~WRL1045.tmp"
Tue 17 Apr 2007 397,312 ...H. --- "C:\Documents and Settings\Brian\Application Data\Microsoft\Word\~WRL1406.tmp"
Sun 23 Mar 2003 87,552 ...H. --- "C:\Documents and Settings\Brian\Application Data\Microsoft\Word\~WRL1797.tmp"
Tue 21 Feb 2006 285,696 ...H. --- "C:\Documents and Settings\Brian\Application Data\Microsoft\Word\~WRL3496.tmp"
Mon 17 Dec 2007 40,960 ...H. --- "C:\Documents and Settings\Debbie\Application Data\Microsoft\Word\~WRL0125.tmp"
Sun 3 Apr 2005 8 A..H. --- "C:\Documents and Settings\All Users\Application Data\GTek\GTUpdate\AUpdate\Channels\ch1\lock.tmp"
Sat 21 May 2005 8 A..H. --- "C:\Documents and Settings\All Users\Application Data\GTek\GTUpdate\AUpdate\Channels\ch2\lock.tmp"
Sat 21 May 2005 8 A..H. --- "C:\Documents and Settings\All Users\Application Data\GTek\GTUpdate\AUpdate\Channels\ch3\lock.tmp"
Sat 21 May 2005 8 A..H. --- "C:\Documents and Settings\All Users\Application Data\GTek\GTUpdate\AUpdate\Channels\ch4\lock.tmp"
Sat 21 May 2005 8 A..H. --- "C:\Documents and Settings\All Users\Application Data\GTek\GTUpdate\AUpdate\Channels\ch5\lock.tmp"
Thu 27 Sep 2007 8 A..H. --- "C:\Documents and Settings\All Users\Application Data\GTek\GTUpdate\AUpdate\Channels\ch6\lock.tmp"

Finished!

pskelley
2008-01-15, 17:15
What are all of the Temp files like this: BIT14B1.tmp ???
Sun 6 Jan 2008 0 A..H. --- "C:\Documents and Settings\Debbie\Local Settings\Temp\BIT14B1.tmp"
If you don't know, navigate to that folder and delete the contents:
C:\Documents and Settings\Debbie\Local Settings\Temp\ <<< delete the complete contents. A few old files may not delete.

Thanks

pskelley
2008-01-15, 17:21
It continues like that for another 10 pages or so... posting the end. If you need the additional data in the middle, I can continue to post, but dont want to spam the board with posts if not needed...No, do not post more of it, I would really like to know why all of this Temp junk is being stored in her Temp folder???
Debbie\Local Settings\Temp\

Please do not scan with Kaspersky until you delete that junk, or if has value, move it to a safe folder elsewhere on the computer. NOT in a Temp folder.

Once you do that, then scan with Kaspersky.

Thanks

bkbrooks
2008-01-15, 18:25
I have no idea what these temp files are... i was hoping you could tell me. :)

I will deleted, then run Kapersky.

Will post when finished...

Thanks

bkbrooks
2008-01-15, 21:50
I have followed previous instructions, and deleted the files in the temp folders. Computer seems to be running fine. no symptoms - no popups in iExplorer. but scan found one infection:

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Tuesday, January 15, 2008 1:42:05 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 15/01/2008
Kaspersky Anti-Virus database records: 478407
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: standard
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\

Scan Statistics:
Total number of scanned objects: 119356
Number of viruses found: 1
Number of infected objects: 1
Number of suspicious objects: 0
Duration of the scan process: 02:38:50

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\2008-01-15_Log.ALUSchedulerSvc.LiveUpdate Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBConfig.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBDebug.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBDetect.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBNotify.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBRefr.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetCfg.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetCfg2.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetDev.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetLoc.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetUsr.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBStHash.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBValid.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\SPPolicy.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\SPStart.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\SPStop.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtErEvt.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtETmp\64AB2FC9.TMP Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtETmp\D1F6A5C7.TMP Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtMoEvt.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtNvEvt.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtScEvt.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtTxFEvt.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtViEvt.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SubEng\submissions.idx Object is locked skipped
C:\Documents and Settings\Brian\Cookies\INDEX.DAT Object is locked skipped
C:\Documents and Settings\Brian\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\Brian\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Brian\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Brian\Local Settings\History\History.IE5\INDEX.DAT Object is locked skipped
C:\Documents and Settings\Brian\Local Settings\History\History.IE5\MSHist012008011520080116\index.dat Object is locked skipped
C:\Documents and Settings\Brian\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Brian\ntuser.dat Object is locked skipped
C:\Documents and Settings\Brian\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\INDEX.DAT Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\INDEX.DAT Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\INDEX.DAT Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\EENGINE\EPERSIST.DAT Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\NFWEVT.LOG Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDALRT.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDCON.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDDBG.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDFW.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDIDS.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDSYS.log Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\00000002.ps1 Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\00000002.ps2 Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\00010002.ci Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\cicat.fid Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\cicat.hsh Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\CiCL0001.000 Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\CiP10000.000 Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\CiP20000.000 Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\CiPT0000.000 Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\CiSL0001.000 Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\CiSP0000.000 Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\CiST0000.000 Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\CiVP0000.000 Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\INDEX.000 Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\propstor.bk1 Object is locked skipped
C:\Program Files\Dell\Support\UI\Search\catalog.wci\propstor.bk2 Object is locked skipped
C:\Program Files\Norton AntiVirus\AVApp.log Object is locked skipped
C:\Program Files\Norton AntiVirus\AVError.log Object is locked skipped
C:\Program Files\Norton AntiVirus\AVVirus.log Object is locked skipped
C:\System Volume Information\catalog.wci\00000002.ps1 Object is locked skipped
C:\System Volume Information\catalog.wci\00000002.ps2 Object is locked skipped
C:\System Volume Information\catalog.wci\00010002.ci Object is locked skipped
C:\System Volume Information\catalog.wci\cicat.fid Object is locked skipped
C:\System Volume Information\catalog.wci\cicat.hsh Object is locked skipped
C:\System Volume Information\catalog.wci\CiCL0001.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiP10000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiP20000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiPT0000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiSL0001.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiSP0000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiST0000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiVP0000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\INDEX.000 Object is locked skipped
C:\System Volume Information\catalog.wci\propstor.bk1 Object is locked skipped
C:\System Volume Information\catalog.wci\propstor.bk2 Object is locked skipped
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}\RP1902\A0156326.ocx Infected: Trojan.Win32.Agent.dpv skipped
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}\RP1912\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\AppEvent.Evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\Internet.evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\ODiag.evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\OSession.evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SAM Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SAM.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SecEvent.Evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SECURITY Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SECURITY.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SysEvent.Evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\H323LOG.TXT Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\WIADEBUG.LOG Object is locked skipped
C:\WINDOWS\WIASERVC.LOG Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.

pskelley
2008-01-15, 22:04
Thanks for returning the scan results, you may want to ask that user what she is downloading. It might have something to do with:
http://www.bittorrent.com/download ?? But I can not say that for sure. ATF-Cleaner should have cleaned that Temp folder, are you sure you use "Select All" when you cleaned? That should have cleaned "All Users Temp".

KASPERSKY ONLINE SCANNER REPORT Tuesday, January 15, 2008 1:42:05 PM

C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}\RP1902\A0156326.ocx ------> Trojan.Win32.Agent.dpv

One infected System Restore file, use the information in this link to clean your System Restore.
http://www.microsoft.com/windowsxp/using/helpandsupport/learnmore/tips/mcgill1.mspx

Safe surfing:cowboy:

Some good information for you:
http://users.telenet.be/bluepatchy/miekiemoes/slowcomputer.html

Here is some great information from experts in this field that will help you stay clean and safe online.
http://users.telenet.be/bluepatchy/miekiemoes/prevention.html
http://forums.spybot.info/showthread.php?t=279
http://russelltexas.com/malware/allclear.htm
http://forum.malwareremoval.com/viewtopic.php?t=14
http://www.bleepingcomputer.com/forums/topict2520.html
http://cybercoyote.org/security/not-admin.shtml

Thanks...pskelley
Safer Networking Forums
http://www.spybot.info/en/donate/index.html
If you are reading this information...thank a teacher,
If you are reading it in English...thank a soldier.

bkbrooks
2008-01-15, 22:51
I have reset the system restore, and all looks good. Thank you so much for your help and experience. You provide a great service!!!

Thanks again.. I am Clean!

bkbrooks