View Full Version : Windows Security Virus (Resolved)
RKennedy
2010-02-26, 22:21
Here is a link to my original thread that the moderator asked me to include. He also instructed me to start this new thread. Sorry about that.
http://forums.spybot.info/showthread.php?t=55817
Hello:
Yesterday the fake Windows Security thing popped up on my screen. In order to be able to get on my computer I had to boot up in Safe Mode and run MalwareBytes. I was able to do this and it seemed to remove the bulk of the virus since I am now able to boot up normally without the virus thing showing up.
UPDATE: I am able to get online now. I reset the defaults on Internet explorer. Would still like logs looked at to make sure Im clean.
1.Booted up in Safe mode and ran Malware Bytes. Removed all found. See scan.
2. Ran Spybot and removed all found.
3. Turned system restore off and then back on again.
4. Ran Hijack this. Log Attached.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:18:50 PM, on 2/26/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\aol\ACS\acsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\Common Files\Dell\EUSW\Support.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\PROGRA~1\SBCSEL~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\eFax Messenger 4.2\J2GDllCmd.exe
C:\Program Files\Pure Networks\Network Magic\nmapp.exe
C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Free Desktop Clock\DesktopClock.exe
C:\Program Files\Eraser\Eraser.exe
C:\Program Files\eFax Messenger 4.2\J2GTray.exe
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://www.yahoo.com/ext/search/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*http://www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dellnet.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5555
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
O4 - HKLM\..\Run: [DwlClient] C:\Program Files\Common Files\Dell\EUSW\Support.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AdaptecDirectCD] C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\SBCSEL~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [eFax 4.2] "C:\Program Files\eFax Messenger 4.2\J2GDllCmd.exe" /R
O4 - HKLM\..\Run: [nmapp] "C:\Program Files\Pure Networks\Network Magic\nmapp.exe" -autorun -nosplash
O4 - HKLM\..\Run: [nmctxth] "C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe"
O4 - HKLM\..\Run: [Linksys Wireless Manager] "C:\Program Files\Linksys\Linksys Wireless Manager\LinksysWirelessManager.exe" /cm /min /lcid 1033
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [BlackBerryAutoUpdate] C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe /background
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SkinClock] C:\Program Files\Free Desktop Clock\DesktopClock.exe
O4 - HKCU\..\Run: [Eraser] C:\Program Files\Eraser\Eraser.exe -hide
O4 - HKUS\S-1-5-18\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'Default user')
O4 - Startup: ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE
O4 - Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
O4 - Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: eFax 4.2.lnk = C:\Program Files\eFax Messenger 4.2\J2GTray.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: SBC Self Support Tool.lnk = C:\Program Files\SBC Self Support Tool\bin\matcli.exe
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: Garmin Communicator Plug-In - https://my.garmin.com/static/m/cab/2.6.4/GarminAxControl.CAB
O16 - DPF: {0246ECA8-996F-11D1-BE2F-00A0C9037DFE} (TDServer Control) - http://www.truedoc.com/activex/tdserver.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {3DC2E31C-371A-4BD3-9A27-CDF57CE604CF} (MSN Money Charting) - http://moneycentral.msn.com/cabs/pmupd806.exe
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.0.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,84/mcinsctl.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://go.divx.com/plugin/DivXBrowserPlugin.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,21/mcgdmgr.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\aol\ACS\acsd.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Pure Networks Net2Go Service (nmraapache) - Pure Networks, Inc. - C:\Program Files\Pure Networks\Network Magic\WebServer\bin\nmraapache.exe
O23 - Service: Pure Networks Platform Service (nmservice) - Cisco Systems, Inc. - C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
--
End of file - 12423 bytes
Please note that all instructions given are customised for this computer only,
the tools used may cause damage if used on a computer with different infections.
If you think you have similar problems, please post a log in the HJT forum and wait for help.
Hello and welcome to the forums
My name is Katana and I will be helping you to remove any infection(s) that you may have.
Please observe these rules while we work:
Please Read All Instructions Carefully
If you don't understand something, stop and ask! Don't keep going on.
Please do not run any other tools or scans whilst I am helping you
Failure to reply within 5 days will result in the topic being closed.
Please continue to respond until I give you the "All Clear"
(Just because you can't see a problem doesn't mean it isn't there)
If you can do those few things, everything should go smoothly http://www.countingcows.de/laechel.gif
Some of the logs I request will be quite large, You may need to split them over a couple of replies.
Please Note, your security programs may give warnings for some of the tools I will ask you to use.
Be assured, any links I give are safe
----------------------------------------------------------------------------------------
Step 1
Fix With HJT
Close all other windows and then start HiJack This
Click Do A System Scan Only
When it has finished scanning put a check next to the following lines IF still present
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5555
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
- Close ALL open windows (especially Internet Explorer!)-
Now click Fix checked
Click yes to any prompts
Close HijackThis
----------------------------------------------------------------------------------------
Step 2
GMER Rootkit Detector
Please download GMER Rootkit Scanner from Here (http://www.gmer.net/gmer.zip) or Here (http://majorgeeks.com/downloadget.php?id=5198&file=15&evp=3f18075291813a665b2a25536a70b307)
***Please close any open programs ***
Extract the contents of the zip file to your desktop.
Disable your onboard Anti Virus and any other Active protection programs you have installed.
Double-click gmer.exe. The program will begin to run.
Note:- If GMER doesn't run, please Reboot and then rename gmer.exe to Look.exe and try again
**Caution**
These types of scans can produce false positives. Do NOT take any action on any "<--- ROOKIT" entries unless advised by a trained Security Analyst
If it gives you a warning about rootkit activity and asks if you want to run a full scan...click on NO,
Now use the following settings for a more complete scan..
http://i51.photobucket.com/albums/f387/Katana_1970/th_Gmer_initScan-1.gif (http://i51.photobucket.com/albums/f387/Katana_1970/Gmer_initScanfull.gif)
Click the image to enlarge it
In the right panel, you will see several boxes that have been checked. Ensure the following are UNCHECKED ...
Sections
IAT/EAT
Drives/Partition other than Systemdrive (typically C:\)
Show All (don't miss this one)
Then click the Scan button & wait for it to finish.
Once the scan is complete, you may receive another notice about rootkit activity. If you recive it, click OK.
Click on the Save button, and save the log as gmer.txt somewhere you can easily find it, such as your desktop.
DO NOT touch the PC at ALL for Whatever reason/s until it has 100% completed its scan, or attempted scan in case of some error etc !
Please post the results from the GMER scan in your reply.
----------------------------------------------------------------------------------------
Logs/Information to Post in Reply
Please post the following logs/Information in your reply
Some of the logs I request will be quite large, You may need to split them over a couple of replies.
GMER Log
A fresh HJT log
Contents of C:\RSIT\Info.txt
RKennedy
2010-03-04, 06:18
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:16:31 PM, on 3/3/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\aol\ACS\acsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\Common Files\Dell\EUSW\Support.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\PROGRA~1\SBCSEL~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\eFax Messenger 4.2\J2GDllCmd.exe
C:\Program Files\Pure Networks\Network Magic\nmapp.exe
C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Free Desktop Clock\DesktopClock.exe
C:\Program Files\Eraser\Eraser.exe
C:\Program Files\eFax Messenger 4.2\J2GTray.exe
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\AVG\AVG9\avgui.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://www.yahoo.com/ext/search/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*http://www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dellnet.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5555
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
O4 - HKLM\..\Run: [DwlClient] C:\Program Files\Common Files\Dell\EUSW\Support.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AdaptecDirectCD] C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\SBCSEL~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [eFax 4.2] "C:\Program Files\eFax Messenger 4.2\J2GDllCmd.exe" /R
O4 - HKLM\..\Run: [nmapp] "C:\Program Files\Pure Networks\Network Magic\nmapp.exe" -autorun -nosplash
O4 - HKLM\..\Run: [nmctxth] "C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe"
O4 - HKLM\..\Run: [Linksys Wireless Manager] "C:\Program Files\Linksys\Linksys Wireless Manager\LinksysWirelessManager.exe" /cm /min /lcid 1033
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [BlackBerryAutoUpdate] C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe /background
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SkinClock] C:\Program Files\Free Desktop Clock\DesktopClock.exe
O4 - HKCU\..\Run: [Eraser] C:\Program Files\Eraser\Eraser.exe -hide
O4 - HKUS\S-1-5-18\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'Default user')
O4 - Startup: ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE
O4 - Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
O4 - Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: eFax 4.2.lnk = C:\Program Files\eFax Messenger 4.2\J2GTray.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: SBC Self Support Tool.lnk = C:\Program Files\SBC Self Support Tool\bin\matcli.exe
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: Garmin Communicator Plug-In - https://my.garmin.com/static/m/cab/2.6.4/GarminAxControl.CAB
O16 - DPF: {0246ECA8-996F-11D1-BE2F-00A0C9037DFE} (TDServer Control) - http://www.truedoc.com/activex/tdserver.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {3DC2E31C-371A-4BD3-9A27-CDF57CE604CF} (MSN Money Charting) - http://moneycentral.msn.com/cabs/pmupd806.exe
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.0.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,84/mcinsctl.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://go.divx.com/plugin/DivXBrowserPlugin.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,21/mcgdmgr.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\aol\ACS\acsd.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Pure Networks Net2Go Service (nmraapache) - Pure Networks, Inc. - C:\Program Files\Pure Networks\Network Magic\WebServer\bin\nmraapache.exe
O23 - Service: Pure Networks Platform Service (nmservice) - Cisco Systems, Inc. - C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
--
End of file - 12403 bytes
RKennedy
2010-03-04, 06:21
GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-03-03 22:15:57
Windows 5.1.2600 Service Pack 3
Running: gmer.exe; Driver: C:\DOCUME~1\Bob\LOCALS~1\Temp\pxtdypog.sys
---- System - GMER 1.0.15 ----
SSDT sptd.sys ZwCreateKey [0xF84400B0]
SSDT sptd.sys ZwEnumerateKey [0xF844584C]
SSDT sptd.sys ZwEnumerateValueKey [0xF8445BEC]
SSDT sptd.sys ZwOpenKey [0xF8440090]
SSDT sptd.sys ZwQueryKey [0xF8445CC4]
SSDT sptd.sys ZwQueryValueKey [0xF8445B44]
SSDT sptd.sys ZwSetValueKey [0xF8445D56]
---- Devices - GMER 1.0.15 ----
Device \FileSystem\Ntfs \Ntfs 833681D8
Device \FileSystem\Fastfat \FatCdrom FFB46980
Device \FileSystem\Udfs \UdfsCdRom FFBAE7E8
Device \FileSystem\Udfs \UdfsDisk FFBAE7E8
AttachedDevice \Driver\Tcpip \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
Device \Driver\usbuhci \Device\USBPDO-0 82B736F0
Device \Driver\usbuhci \Device\USBPDO-1 82B736F0
Device \Driver\usbuhci \Device\USBPDO-2 82B736F0
Device \Driver\usbehci \Device\USBPDO-3 82B52770
Device pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation)
AttachedDevice \Driver\Tcpip \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
Device \Driver\Ftdisk \Device\HarddiskVolume1 833D81D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 833D81D8
Device \Driver\Cdrom \Device\CdRom0 82B16600
Device \Driver\Cdrom \Device\CdRom1 82B16600
Device \Driver\Ftdisk \Device\HarddiskVolume3 833D81D8
Device \Driver\atapi \Device\Ide\IdePort0 [F83BAB40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\atapi \Device\Ide\IdePort1 [F83BAB40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device ACPI.sys (ACPI Driver for NT/Microsoft Corporation)
Device \Driver\NetBT \Device\NetBt_Wins_Export FFB53980
Device \Driver\USBSTOR \Device\00000077 829A51D8
Device \Driver\USBSTOR \Device\00000078 829A51D8
Device \Driver\sbp2port \Device\Sbp2Port0 833D61D8
Device \Driver\NetBT \Device\NetbiosSmb FFB53980
AttachedDevice \Driver\Tcpip \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
Device \Driver\NetBT \Device\NetBT_Tcpip_{5CDA8B3C-8EAC-4D7C-8610-CADE092C8EE5} FFB53980
AttachedDevice \Driver\Tcpip \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
Device \Driver\usbuhci \Device\USBFDO-0 82B736F0
Device \Driver\usbuhci \Device\USBFDO-1 82B736F0
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver FFB8A1D8
Device \Driver\usbuhci \Device\USBFDO-2 82B736F0
Device \FileSystem\MRxSmb \Device\LanmanRedirector FFB8A1D8
Device \Driver\usbehci \Device\USBFDO-3 82B52770
Device \Driver\Ftdisk \Device\FtControl 833D81D8
Device \FileSystem\Fastfat \Fat FFB46980
AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
Device \FileSystem\Cdfs \Cdfs 8298A980
---- Registry - GMER 1.0.15 ----
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s1 -187011755
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s2 507497861
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@h0 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@ujdew 0xA7 0x77 0xE7 0x01 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 0
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@ujdew 0xA7 0x77 0xE7 0x01 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 0
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@ujdew 0xA7 0x77 0xE7 0x01 ...
---- EOF - GMER 1.0.15 ----
RKennedy
2010-03-04, 06:27
Logfile of random's system information tool 1.06 (written by random/random)
Run by Bob at 2010-03-03 22:24:33
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 8 GB (29%) free of 29 GB
Total RAM: 510 MB (20% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:24:57 PM, on 3/3/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\aol\ACS\acsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\Common Files\Dell\EUSW\Support.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\PROGRA~1\SBCSEL~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\eFax Messenger 4.2\J2GDllCmd.exe
C:\Program Files\Pure Networks\Network Magic\nmapp.exe
C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Free Desktop Clock\DesktopClock.exe
C:\Program Files\Eraser\Eraser.exe
C:\Program Files\eFax Messenger 4.2\J2GTray.exe
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Documents and Settings\Bob\Desktop\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Bob.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://www.yahoo.com/ext/search/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*http://www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dellnet.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5555
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
O4 - HKLM\..\Run: [DwlClient] C:\Program Files\Common Files\Dell\EUSW\Support.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AdaptecDirectCD] C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\SBCSEL~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [eFax 4.2] "C:\Program Files\eFax Messenger 4.2\J2GDllCmd.exe" /R
O4 - HKLM\..\Run: [nmapp] "C:\Program Files\Pure Networks\Network Magic\nmapp.exe" -autorun -nosplash
O4 - HKLM\..\Run: [nmctxth] "C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe"
O4 - HKLM\..\Run: [Linksys Wireless Manager] "C:\Program Files\Linksys\Linksys Wireless Manager\LinksysWirelessManager.exe" /cm /min /lcid 1033
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [BlackBerryAutoUpdate] C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe /background
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SkinClock] C:\Program Files\Free Desktop Clock\DesktopClock.exe
O4 - HKCU\..\Run: [Eraser] C:\Program Files\Eraser\Eraser.exe -hide
O4 - HKUS\S-1-5-18\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'Default user')
O4 - Startup: ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE
O4 - Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
O4 - Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: eFax 4.2.lnk = C:\Program Files\eFax Messenger 4.2\J2GTray.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: SBC Self Support Tool.lnk = C:\Program Files\SBC Self Support Tool\bin\matcli.exe
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: Garmin Communicator Plug-In - https://my.garmin.com/static/m/cab/2.6.4/GarminAxControl.CAB
O16 - DPF: {0246ECA8-996F-11D1-BE2F-00A0C9037DFE} (TDServer Control) - http://www.truedoc.com/activex/tdserver.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {3DC2E31C-371A-4BD3-9A27-CDF57CE604CF} (MSN Money Charting) - http://moneycentral.msn.com/cabs/pmupd806.exe
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.0.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,84/mcinsctl.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://go.divx.com/plugin/DivXBrowserPlugin.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,21/mcgdmgr.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\aol\ACS\acsd.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Pure Networks Net2Go Service (nmraapache) - Pure Networks, Inc. - C:\Program Files\Pure Networks\Network Magic\WebServer\bin\nmraapache.exe
O23 - Service: Pure Networks Platform Service (nmservice) - Cisco Systems, Inc. - C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
--
End of file - 12340 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Ad-Aware Update (Daily 1).job
C:\WINDOWS\tasks\Ad-Aware Update (Daily 2).job
C:\WINDOWS\tasks\Ad-Aware Update (Daily 3).job
C:\WINDOWS\tasks\Ad-Aware Update (Daily 4).job
C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{622DC8BF-5DC0-43FC-829B-F944D2B2EB67}.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
&Yahoo! Toolbar Helper - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll [2009-03-13 908528]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG9\avgssie.dll [2010-02-18 1484056]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897}]
Yahoo! IE Services Button - C:\Program Files\Yahoo!\Common\yiesrvc.dll [2006-10-31 198136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-07-22 256112]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2009-11-14 764912]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll [2009-07-22 458736]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-12-15 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll [2009-03-13 908528]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-07-22 256112]
Locked
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"DVDSentry"=C:\WINDOWS\System32\DSentry.exe [2002-08-14 28672]
"DwlClient"=C:\Program Files\Common Files\Dell\EUSW\Support.exe [2003-10-07 294912]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2003-05-06 151597]
"AdaptecDirectCD"=C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe [2004-09-15 684032]
"StorageGuard"=C:\Program Files\VERITAS Software\Update Manager\sgtray.exe [2002-06-17 155648]
"Motive SmartBridge"=C:\PROGRA~1\SBCSEL~1\SMARTB~1\MotiveSB.exe [2003-12-10 380928]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2005-10-19 155648]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2005-10-19 126976]
"eFax 4.2"=C:\Program Files\eFax Messenger 4.2\J2GDllCmd.exe [2006-06-19 107008]
"nmapp"=C:\Program Files\Pure Networks\Network Magic\nmapp.exe [2008-05-21 451896]
"nmctxth"=C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe [2008-12-12 642856]
"Linksys Wireless Manager"=C:\Program Files\Linksys\Linksys Wireless Manager\LinksysWirelessManager.exe [2009-02-16 1358384]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2009-09-05 417792]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-09-21 305440]
"BlackBerryAutoUpdate"=C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe [2009-11-19 623960]
"AVG9_TRAY"=C:\PROGRA~1\AVG\AVG9\avgtray.exe [2010-02-18 2033432]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-04-28 68856]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360]
"SkinClock"=C:\Program Files\Free Desktop Clock\DesktopClock.exe [2006-10-01 334848]
"Eraser"=C:\Program Files\Eraser\Eraser.exe [2009-06-10 334224]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdaptecDirectCD]
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe [2004-09-15 684032]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
C:\WINDOWS\System32\hkcmd.exe [2005-10-19 126976]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
C:\WINDOWS\System32\igfxtray.exe [2005-10-19 155648]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
C:\WINDOWS\system32\dumprep 0 -k []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2008-04-13 1695232]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\qttask.exe [2009-09-05 417792]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2003-05-06 151597]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^America Online 9.0 Tray Icon.lnk]
C:\PROGRA~1\AMERIC~1.0A\aoltray.exe [2003-09-24 36954]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^America Online Tray Icon.lnk]
C:\PROGRA~1\AMERIC~2.0\aoltray.exe [2003-09-24 36954]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Digital Line Detect.lnk]
C:\PROGRA~1\DIGITA~1\DLG.exe [2002-09-12 24576]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]
C:\PROGRA~1\MICROS~2\Office10\OSA.EXE [2001-02-13 83360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Bob^Start Menu^Programs^Startup^PowerReg Scheduler V3.exe]
C:\Documents and Settings\Bob\Start Menu\Programs\Startup\PowerReg Scheduler V3.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"anem"=2
C:\Documents and Settings\All Users\Start Menu\Programs\Startup
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
eFax 4.2.lnk - C:\Program Files\eFax Messenger 4.2\J2GTray.exe
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE
SBC Self Support Tool.lnk - C:\Program Files\SBC Self Support Tool\bin\matcli.exe
C:\Documents and Settings\Bob\Start Menu\Programs\Startup
ERUNT AutoBackup.lnk - C:\Program Files\ERUNT\AUTOBACK.EXE
Microsoft Find Fast.lnk - C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
Office Startup.lnk - C:\Program Files\Microsoft Office\Office\OSA.EXE
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
C:\WINDOWS\system32\avgrsstx.dll [2010-02-18 12464]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxsrvc.dll [2005-10-19 348160]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\AIM\aim.exe"="C:\Program Files\AIM\aim.exe:*:Disabled:AOL Instant Messenger"
"C:\Program Files\Real\RealPlayer\realplay.exe"="C:\Program Files\Real\RealPlayer\realplay.exe:*:Disabled:RealOne Player"
"C:\Program Files\Yahoo!\Messenger\YServer.exe"="C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:YServer Module"
"C:\Program Files\America Online 9.0a\waol.exe"="C:\Program Files\America Online 9.0a\waol.exe:*:Enabled:America Online 9.0a"
"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\AVG\AVG8\avgemc.exe"="C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe"
"C:\Program Files\Microsoft Office\Office10\FRONTPG.EXE"="C:\Program Files\Microsoft Office\Office10\FRONTPG.EXE:*:Enabled:Microsoft FrontPage"
"C:\Program Files\Common Files\aol\Loader\aolload.exe"="C:\Program Files\Common Files\aol\Loader\aolload.exe:*:Enabled:AOL Loader"
"C:\Program Files\AIM6\aim6.exe"="C:\Program Files\AIM6\aim6.exe:*:Enabled:AIM"
"C:\Program Files\Internet Explorer\iexplore.exe"="C:\Program Files\Internet Explorer\iexplore.exe:*:Disabled:Internet Explorer"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Disabled:Firefox"
"C:\Program Files\AVG\AVG9\avgupd.exe"="C:\Program Files\AVG\AVG9\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\AVG\AVG9\avgnsx.exe"="C:\Program Files\AVG\AVG9\avgnsx.exe:*:Enabled:avgnsx.exe"
"C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe"="C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe:LocalSubNet:Enabled:Pure Networks Platform Service"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\America Online 9.0a\waol.exe"="C:\Program Files\America Online 9.0a\waol.exe:*:Enabled:America Online 9.0a"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D]
shell\AutoRun\command - D:\SETUP.EXE
======List of files/folders created in the last 1 months======
2010-02-24 03:00:41 ----HDC---- C:\WINDOWS\$NtUninstallKB979306$
2010-02-19 08:15:32 ----A---- C:\WINDOWS\system32\igfxzoom.exe
2010-02-18 19:36:36 ----HD---- C:\$AVG
2010-02-18 19:34:51 ----D---- C:\Documents and Settings\All Users\Application Data\avg9
2010-02-10 03:14:35 ----HDC---- C:\WINDOWS\$NtUninstallKB978262$
2010-02-10 03:14:13 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2010-02-10 03:04:57 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-02-10 03:04:40 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-02-10 03:04:21 ----HDC---- C:\WINDOWS\$NtUninstallKB978251$
2010-02-10 03:04:02 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-02-10 03:03:37 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-02-10 03:03:01 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-02-10 03:02:29 ----HDC---- C:\WINDOWS\$NtUninstallKB977165$
2010-02-04 00:06:39 ----D---- C:\Documents and Settings\All Users\Application Data\Research In Motion
2010-02-04 00:06:25 ----D---- C:\Program Files\Common Files\Roxio Shared
======List of files/folders modified in the last 1 months======
2010-03-03 22:24:37 ----D---- C:\WINDOWS\Temp
2010-03-03 22:24:37 ----D---- C:\WINDOWS\Prefetch
2010-03-03 07:29:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-03-02 16:00:15 ----AH---- C:\WINDOWS\system32\FFASTLOG.TXT
2010-03-01 20:09:54 ----D---- C:\WINDOWS\system32\CatRoot2
2010-02-26 14:06:39 ----D---- C:\Program Files\Mozilla Firefox
2010-02-26 11:47:01 ----RD---- C:\Program Files
2010-02-26 10:09:45 ----SHD---- C:\System Volume Information
2010-02-26 10:09:45 ----D---- C:\WINDOWS\system32\Restore
2010-02-26 09:45:58 ----A---- C:\WINDOWS\ntbtlog.txt
2010-02-24 08:29:17 ----D---- C:\WINDOWS
2010-02-24 03:20:25 ----D---- C:\WINDOWS\SYSTEM32
2010-02-24 03:03:32 ----HD---- C:\WINDOWS\INF
2010-02-24 03:03:31 ----RSHD---- C:\WINDOWS\system32\DLLCACHE
2010-02-24 03:01:24 ----HD---- C:\WINDOWS\$hf_mig$
2010-02-24 03:01:01 ----A---- C:\WINDOWS\imsins.BAK
2010-02-22 18:17:07 ----D---- C:\WINDOWS\system32\DRIVERS
2010-02-22 18:17:07 ----D---- C:\WINDOWS\Resources
2010-02-21 14:12:35 ----D---- C:\Documents and Settings\Bob\Application Data\LimeWire
2010-02-19 08:15:58 ----D---- C:\Program Files\Free History Eraser
2010-02-19 08:15:26 ----D---- C:\I386
2010-02-18 19:35:54 ----A---- C:\WINDOWS\system32\avgrsstx.dll
2010-02-18 19:34:54 ----D---- C:\Program Files\AVG
2010-02-18 19:33:09 ----SHD---- C:\WINDOWS\Installer
2010-02-18 19:33:09 ----D---- C:\Config.Msi
2010-02-18 19:33:07 ----D---- C:\WINDOWS\WinSxS
2010-02-12 12:46:20 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-02-04 00:24:20 ----D---- C:\Documents and Settings\Bob\Application Data\Blackberry Desktop
2010-02-04 00:14:33 ----D---- C:\WINDOWS\system32\CatRoot
2010-02-04 00:13:23 ----RSD---- C:\WINDOWS\Fonts
2010-02-04 00:13:22 ----D---- C:\Program Files\Research In Motion
2010-02-04 00:06:42 ----D---- C:\Program Files\Common Files\Research In Motion
2010-02-04 00:06:25 ----D---- C:\Program Files\Common Files
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 AvgLdx86;AVG AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2010-02-18 333192]
R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2010-02-18 28424]
R1 AvgTdiX;AVG8 Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2010-02-18 360584]
R1 Cdr4_xp;Cdr4_xp; C:\WINDOWS\system32\drivers\Cdr4_xp.sys [2004-09-15 62288]
R1 Cdralw2k;Cdralw2k; C:\WINDOWS\system32\drivers\Cdralw2k.sys [2004-09-15 23436]
R1 cdudf_xp;cdudf_xp; C:\WINDOWS\system32\drivers\cdudf_xp.sys [2004-09-15 241280]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-13 36352]
R1 omci;OMCI WDM Device Driver; C:\WINDOWS\System32\DRIVERS\omci.sys [2002-07-19 17153]
R1 pwd_2k;pwd_2k; C:\WINDOWS\system32\drivers\pwd_2k.sys [2004-09-15 144250]
R1 UdfReadr_xp;UdfReadr_xp; C:\WINDOWS\system32\drivers\UdfReadr_xp.sys [2004-09-15 206464]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2002-08-29 12032]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\System32\DRIVERS\mdmxsdk.sys [2002-10-07 11027]
R2 pnarp;Pure Networks Device Discovery Driver; C:\WINDOWS\system32\DRIVERS\pnarp.sys [2008-12-12 23984]
R2 purendis;Pure Networks Wireless Driver; C:\WINDOWS\system32\DRIVERS\purendis.sys [2008-12-12 25264]
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2002-04-01 4816]
R3 dvd_2K;dvd_2K; C:\WINDOWS\system32\drivers\dvd_2K.sys [2004-09-15 25930]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2009-05-18 26600]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 HSF_DP;HSF_DP; C:\WINDOWS\System32\DRIVERS\HSF_DP.sys [2002-10-29 1175536]
R3 HSFHWBS2;HSFHWBS2; C:\WINDOWS\System32\DRIVERS\HSFHWBS2.sys [2002-10-29 170499]
R3 ialm;ialm; C:\WINDOWS\System32\DRIVERS\ialmnt5.sys [2005-10-19 807998]
R3 L6DP;L6DP; C:\WINDOWS\System32\Drivers\l6dp.sys [2002-07-15 26496]
R3 mmc_2K;mmc_2K; C:\WINDOWS\system32\drivers\mmc_2K.sys [2004-09-15 30662]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2003-03-21 9856]
R3 RimVSerPort;RIM Virtual Serial Port v2; C:\WINDOWS\system32\DRIVERS\RimSerial.sys [2009-01-09 27136]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2002-08-29 5888]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2002-12-19 539008]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Microsoft USB Standard Hub Driver; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 wanatw;WAN Miniport (ATW); C:\WINDOWS\System32\DRIVERS\wanatw4.sys [2002-10-08 33588]
R3 winachsf;winachsf; C:\WINDOWS\System32\DRIVERS\HSF_CNXT.sys [2002-10-29 604240]
R3 WUSB54GCv3;Compact Wireless-G USB Network Adapter; C:\WINDOWS\system32\DRIVERS\WUSB54GCv3.sys [2008-12-04 627072]
S1 P3;Intel PentiumIII Processor Driver; C:\WINDOWS\System32\DRIVERS\p3.sys [2008-04-13 42752]
S3 {6080A529-897E-4629-A488-ABA0C29B635E};Intel(R) Graphics Platform (SoftBIOS) Driver; C:\WINDOWS\system32\drivers\ialmsbw.sys [2003-01-14 108736]
S3 {D31A0762-0CEB-444e-ACFF-B049A1F6FE91};Intel(R) Graphics Chipset (KCH) Driver; C:\WINDOWS\system32\drivers\ialmkchw.sys [2003-01-14 78272]
S3 61883;61883 Unit Device; C:\WINDOWS\System32\DRIVERS\61883.sys [2008-04-13 48128]
S3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 Avc;AVC Device; C:\WINDOWS\System32\DRIVERS\avc.sys [2008-04-13 38912]
S3 bcm4sbxp;Broadcom 440x 10/100 Integrated Controller XP Driver; C:\WINDOWS\System32\DRIVERS\bcm4sbxp.sys [2003-01-15 42368]
S3 Bridge;MAC Bridge; C:\WINDOWS\System32\DRIVERS\bridge.sys [2008-04-13 71552]
S3 BridgeMP;MAC Bridge Miniport; C:\WINDOWS\System32\DRIVERS\bridge.sys [2008-04-13 71552]
S3 bvrp_pci;bvrp_pci; C:\WINDOWS\system32\drivers\bvrp_pci.sys []
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 EL90XBC;3Com EtherLink XL 90XB/C Adapter Driver; C:\WINDOWS\System32\DRIVERS\el90xbc5.sys [2001-08-17 66591]
S3 i81x;i81x; C:\WINDOWS\System32\DRIVERS\i81xnt5.sys [2004-08-03 161020]
S3 iAimFP0;iAimFP0; C:\WINDOWS\System32\DRIVERS\wADV01nt.sys [2004-08-03 12415]
S3 iAimFP1;iAimFP1; C:\WINDOWS\System32\DRIVERS\wADV02NT.sys [2004-08-03 12127]
S3 iAimFP2;iAimFP2; C:\WINDOWS\System32\DRIVERS\wADV05NT.sys [2004-08-03 11775]
S3 iAimFP3;iAimFP3; C:\WINDOWS\System32\DRIVERS\wSiINTxx.sys [2004-08-03 12063]
S3 iAimFP4;iAimFP4; C:\WINDOWS\System32\DRIVERS\wVchNTxx.sys [2004-08-03 19455]
S3 iAimTV0;iAimTV0; C:\WINDOWS\System32\DRIVERS\wATV01nt.sys [2004-08-03 29311]
S3 iAimTV1;iAimTV1; C:\WINDOWS\System32\DRIVERS\wATV02NT.sys [2004-08-03 19551]
S3 iAimTV2;iAimTV2; C:\WINDOWS\System32\DRIVERS\wATV03nt.sys []
S3 iAimTV3;iAimTV3; C:\WINDOWS\System32\DRIVERS\wATV04nt.sys [2004-08-03 33599]
S3 iAimTV4;iAimTV4; C:\WINDOWS\System32\DRIVERS\wCh7xxNT.sys [2004-08-03 23615]
S3 L6PODLV;PODxt Live Service; C:\WINDOWS\System32\Drivers\L6PODLV.sys [2005-05-04 114048]
S3 MSDV;Microsoft DV Camera and VCR; C:\WINDOWS\System32\DRIVERS\msdv.sys [2008-04-13 51200]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\System32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2008-04-13 61824]
S3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2004-08-03 1897408]
S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\System32\PCAMPR5.SYS []
S3 pxtdypog;pxtdypog; \??\C:\DOCUME~1\Bob\LOCALS~1\Temp\pxtdypog.sys []
S3 RDID1003;EDIROL UM-2; C:\WINDOWS\system32\Drivers\rdwm1003.sys [2006-09-27 80481]
S3 RDWM1005;EDIROL UA-5 (WDM); C:\WINDOWS\system32\Drivers\rdwm1005.sys [2001-11-28 98822]
S3 RimUsb;BlackBerry Smartphone; C:\WINDOWS\System32\Drivers\RimUsb.sys [2008-05-20 22784]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\System32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 sonyhcs;Sony Digital Imaging Video; C:\WINDOWS\System32\DRIVERS\sonyhcs.sys [2001-11-05 299923]
S3 streamip;BDA IPSink; C:\WINDOWS\System32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbaudio;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 WLUX96;3Com 3CRSHEW696 Wireless LAN USB Adapter; C:\WINDOWS\System32\DRIVERS\WLUX96F.SYS [2002-09-05 80896]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\System32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 agp440;Intel AGP Bus Filter; C:\WINDOWS\System32\DRIVERS\agp440.sys [2008-04-13 42368]
S4 agpCPQ;Compaq AGP Bus Filter; C:\WINDOWS\System32\DRIVERS\agpCPQ.sys [2008-04-13 44928]
S4 alim1541;ALI AGP Bus Filter; C:\WINDOWS\System32\DRIVERS\alim1541.sys [2008-04-13 42752]
S4 amdagp;AMD AGP Bus Filter Driver; C:\WINDOWS\System32\DRIVERS\amdagp.sys [2008-04-13 43008]
S4 cbidf;cbidf; C:\WINDOWS\System32\DRIVERS\cbidf2k.sys [2001-08-17 13952]
S4 IntelIde;IntelIde; C:\WINDOWS\System32\DRIVERS\intelide.sys [2008-04-13 5504]
S4 sisagp;SIS AGP Bus Filter; C:\WINDOWS\System32\DRIVERS\sisagp.sys [2008-04-13 40960]
S4 viaagp;VIA AGP Bus Filter; C:\WINDOWS\System32\DRIVERS\viaagp.sys [2008-04-13 42240]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AOL ACS;AOL Connectivity Service; C:\PROGRA~1\COMMON~1\aol\ACS\acsd.exe [2004-04-21 1434848]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-08-28 144672]
R2 avg9wd;AVG Free WatchDog; C:\Program Files\AVG\AVG9\avgwdsvc.exe [2010-02-18 285392]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 nmservice;Pure Networks Platform Service; C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe [2008-12-12 642856]
R2 WANMiniportService;WAN Miniport (ATW) Service; C:\WINDOWS\wanmpsvc.exe [2003-08-27 65536]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]
R2 YahooAUService;Yahoo! Updater; C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe [2008-11-09 602392]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2009-09-21 545568]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2006-10-11 72704]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe []
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-05-01 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 Macromedia Licensing Service;Macromedia Licensing Service; C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe [2004-05-28 68096]
S3 nmraapache;Pure Networks Net2Go Service; C:\Program Files\Pure Networks\Network Magic\WebServer\bin\nmraapache.exe [2008-05-21 12800]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]
-----------------EOF-----------------
Download and Run ComboFix (by sUBs)
Please visit this webpage for instructions for downloading and running ComboFix:
Bleeping Computer ComboFix Tutorial (http://www.bleepingcomputer.com/combofix/how-to-use-combofix)
You must download it to and run it from your Desktop
Now STOP all your monitoring programs (Antivirus/Antispyware, Guards and Shields) as they could easily interfere with ComboFix.
Double click combofix.exe & follow the prompts.
When finished, it will produce a log. Please save that log to post in your next reply
Re-enable all the programs that were disabled during the running of ComboFix..
A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix on your own.
This tool is not a toy and not for everyday use.
ComboFix SHOULD NOT be used unless requested by a forum helper
For instructions on how to disable your security programs, please see this topic
How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs (http://www.bleepingcomputer.com/forums/topic114351.html)
----------------------------------------------------------------------------------------
Logs/Information to Post in Reply
Please post the following logs/Information in your reply
Some of the logs I request will be quite large, You may need to split them over a couple of replies.
Combofix Log
C:\Qoobox\Add-Remove Programs.txt
RKennedy
2010-03-05, 14:38
ComboFix 10-03-04.02 - Bob 03/05/2010 0:19.2.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.510.184 [GMT -6:00]
Running from: c:\documents and settings\Bob\Desktop\ComboFix.exe
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\program files\Windows Media Player\pidgen.dll
c:\windows\box boat blue.ico
c:\windows\system32\ie.ico
c:\windows\Web\PRINTERS\ipatvrs.bak1
c:\windows\Web\PRINTERS\ipatvrs.ini
.
((((((((((((((((((((((((( Files Created from 2010-02-05 to 2010-03-05 )))))))))))))))))))))))))))))))
.
2010-02-26 04:58 . 2010-03-01 10:34 -------- d-----w- c:\documents and settings\Bob\Local Settings\Application Data\wbsrov
2010-02-19 14:15 . 2010-02-19 14:15 114688 ----a-w- c:\windows\system32\igfxzoom.exe
2010-02-19 01:36 . 2010-02-19 01:40 -------- d-----w- C:\$AVG
2010-02-19 01:34 . 2010-02-19 01:34 -------- d-----w- c:\documents and settings\All Users\Application Data\avg9
2010-02-04 06:17 . 2010-02-04 06:33 256 ----a-w- c:\windows\system32\pool.bin
2010-02-04 06:06 . 2010-02-12 18:40 -------- d-----w- c:\documents and settings\All Users\Application Data\Research In Motion
2010-02-04 06:06 . 2010-02-04 06:06 -------- d-----w- c:\program files\Common Files\Roxio Shared
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-02-21 20:12 . 2007-09-14 04:49 -------- d-----w- c:\documents and settings\Bob\Application Data\LimeWire
2010-02-19 14:15 . 2003-10-15 05:58 -------- d-----w- c:\program files\Free History Eraser
2010-02-19 01:35 . 2007-03-01 16:09 28424 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2010-02-19 01:35 . 2008-07-02 14:43 12464 ----a-w- c:\windows\system32\avgrsstx.dll
2010-02-19 01:35 . 2008-06-19 13:21 360584 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-02-19 01:35 . 2008-06-19 13:21 333192 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2010-02-19 01:34 . 2008-06-19 13:20 -------- d-----w- c:\program files\AVG
2010-02-04 06:24 . 2007-03-31 16:20 -------- d-----w- c:\documents and settings\Bob\Application Data\Blackberry Desktop
2010-02-04 06:13 . 2007-03-31 16:20 -------- d-----w- c:\program files\Research In Motion
2010-02-04 06:06 . 2007-03-31 16:20 -------- d-----w- c:\program files\Common Files\Research In Motion
2010-02-02 15:15 . 2005-09-17 20:58 -------- d-----w- c:\documents and settings\Bob\Application Data\Lavasoft
2010-02-01 14:22 . 2008-10-10 16:56 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-01-31 23:24 . 2010-01-20 07:16 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft
2010-01-25 20:07 . 2010-01-25 20:07 -------- d-----w- c:\program files\ERUNT
2010-01-07 22:07 . 2008-10-10 16:56 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-01-07 22:07 . 2008-10-10 16:56 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-12-31 16:50 . 2004-11-22 19:12 353792 ----a-w- c:\windows\system32\drivers\srv.sys
2009-12-21 19:14 . 2004-11-22 19:13 916480 ----a-w- c:\windows\system32\wininet.dll
2009-12-16 18:43 . 2004-11-22 19:13 343040 ----a-w- c:\windows\system32\mspaint.exe
2009-12-14 07:08 . 2004-11-22 19:12 33280 ----a-w- c:\windows\system32\csrsrv.dll
2009-12-08 19:27 . 2004-11-22 19:12 2189184 ----a-w- c:\windows\system32\ntoskrnl.exe
2009-12-08 18:43 . 2004-11-22 19:12 2066048 ----a-w- c:\windows\system32\ntkrnlpa.exe
2004-02-19 02:22 . 2004-02-27 06:11 1009152 ----a-w- c:\program files\K-Tuner.msi
1998-02-10 22:34 . 2003-05-10 05:31 128000 ----a-w- c:\program files\UNWISE.EXE
2010-02-26 19:55 . 2007-01-06 04:38 67688 ----a-w- c:\program files\mozilla firefox\components\jar50.dll
2010-02-26 19:55 . 2007-01-06 04:38 54368 ----a-w- c:\program files\mozilla firefox\components\jsd3250.dll
2010-02-26 19:55 . 2007-01-06 04:38 34944 ----a-w- c:\program files\mozilla firefox\components\myspell.dll
2010-02-26 19:55 . 2007-01-06 04:38 46712 ----a-w- c:\program files\mozilla firefox\components\spellchk.dll
2010-02-26 19:55 . 2007-01-06 04:38 172136 ----a-w- c:\program files\mozilla firefox\components\xpinstal.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-04-28 68856]
"SkinClock"="c:\program files\Free Desktop Clock\DesktopClock.exe" [2006-10-01 334848]
"Eraser"="c:\program files\Eraser\Eraser.exe" [2009-06-10 334224]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate"="c:\windows\system32\Macromed\Flash\FlashUtil10d.exe" [2009-10-28 257440]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DVDSentry"="c:\windows\System32\DSentry.exe" [2002-08-14 28672]
"DwlClient"="c:\program files\Common Files\Dell\EUSW\Support.exe" [2003-10-07 294912]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2003-05-06 151597]
"AdaptecDirectCD"="c:\program files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" [2004-09-16 684032]
"StorageGuard"="c:\program files\VERITAS Software\Update Manager\sgtray.exe" [2002-06-18 155648]
"Motive SmartBridge"="c:\progra~1\SBCSEL~1\SMARTB~1\MotiveSB.exe" [2003-12-10 380928]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2005-10-19 155648]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2005-10-19 126976]
"eFax 4.2"="c:\program files\eFax Messenger 4.2\J2GDllCmd.exe" [2006-06-20 107008]
"nmapp"="c:\program files\Pure Networks\Network Magic\nmapp.exe" [2008-05-21 451896]
"nmctxth"="c:\program files\Common Files\Pure Networks Shared\Platform\nmctxth.exe" [2008-12-12 642856]
"Linksys Wireless Manager"="c:\program files\Linksys\Linksys Wireless Manager\LinksysWirelessManager.exe" [2009-02-16 1358384]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-09-05 417792]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-09-21 305440]
"BlackBerryAutoUpdate"="c:\program files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe" [2009-11-20 623960]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-04-28 68856]
c:\documents and settings\Bob\Start Menu\Programs\Startup\
ERUNT AutoBackup.lnk - c:\program files\ERUNT\AUTOBACK.EXE [2005-10-20 38912]
Microsoft Find Fast.lnk - c:\program files\Microsoft Office\Office\FINDFAST.EXE [1996-11-16 111376]
Office Startup.lnk - c:\program files\Microsoft Office\Office\OSA.EXE [1996-11-16 51984]
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696]
eFax 4.2.lnk - c:\program files\eFax Messenger 4.2\J2GTray.exe [2006-7-5 612352]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]
SBC Self Support Tool.lnk - c:\program files\SBC Self Support Tool\bin\matcli.exe [2004-10-30 217088]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2010-02-19 01:35 12464 ----a-w- c:\windows\SYSTEM32\avgrsstx.dll
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^America Online 9.0 Tray Icon.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\America Online 9.0 Tray Icon.lnk
backup=c:\windows\pss\America Online 9.0 Tray Icon.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^America Online Tray Icon.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\America Online Tray Icon.lnk
backup=c:\windows\pss\America Online Tray Icon.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Digital Line Detect.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Digital Line Detect.lnk
backup=c:\windows\pss\Digital Line Detect.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^Bob^Start Menu^Programs^Startup^PowerReg Scheduler V3.exe]
path=c:\documents and settings\Bob\Start Menu\Programs\Startup\PowerReg Scheduler V3.exe
backup=c:\windows\pss\PowerReg Scheduler V3.exeStartup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
c:\windows\system32\dumprep 0 -k [X]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdaptecDirectCD]
2004-09-16 00:24 684032 ----a-w- c:\program files\Roxio\Easy CD Creator 5\DirectCD\Directcd.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
2005-10-19 13:59 126976 ----a-w- c:\windows\SYSTEM32\hkcmd.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
2005-10-19 13:59 155648 ----a-w- c:\windows\SYSTEM32\igfxtray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 00:12 1695232 ----a-w- c:\program files\Messenger\msmsgs.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2009-09-05 06:54 417792 ----a-w- c:\program files\QuickTime\QTTask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
2003-05-06 18:50 151597 ----a-w- c:\program files\Common Files\Real\Update_OB\realsched.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"anem"=2 (0x2)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\AIM\\aim.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"c:\\Program Files\\America Online 9.0a\\waol.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office10\\FRONTPG.EXE"=
"c:\\Program Files\\Common Files\\aol\\Loader\\aolload.exe"=
"c:\\Program Files\\AIM6\\aim6.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"67:UDP"= 67:UDP:DHCP Discovery Service
R0 sonyhcb;Sony Digital Imaging Base;c:\windows\SYSTEM32\DRIVERS\sonyhcb.sys [7/7/2003 8:39 PM 6097]
R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\SYSTEM32\DRIVERS\avgldx86.sys [6/19/2008 7:21 AM 333192]
R1 AvgTdiX;AVG8 Network Redirector;c:\windows\SYSTEM32\DRIVERS\avgtdix.sys [6/19/2008 7:21 AM 360584]
R2 avg9wd;AVG Free WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [2/18/2010 7:34 PM 285392]
R3 L6DP;L6DP;c:\windows\SYSTEM32\DRIVERS\l6dp.sys [7/15/2002 9:39 PM 26496]
R3 WUSB54GCv3;Compact Wireless-G USB Network Adapter;c:\windows\SYSTEM32\DRIVERS\WUSB54GCv3.sys [6/22/2009 10:31 AM 627072]
S0 sptd;sptd;c:\windows\SYSTEM32\DRIVERS\sptd.sys [11/27/2006 10:18 PM 639224]
S3 L6PODLV;PODxt Live Service;c:\windows\SYSTEM32\DRIVERS\L6PODLV.sys [10/5/2004 7:58 PM 114048]
S3 RDID1003;EDIROL UM-2;c:\windows\SYSTEM32\DRIVERS\Rdwm1003.sys [11/5/2007 1:30 AM 80481]
S3 RDWM1005;EDIROL UA-5 (WDM);c:\windows\SYSTEM32\DRIVERS\Rdwm1005.sys [5/22/2003 10:35 PM 98822]
S3 sonyhcs;Sony Digital Imaging Video;c:\windows\SYSTEM32\DRIVERS\sonyhcs.sys [7/7/2003 8:39 PM 299923]
S3 WLUX96;3Com 3CRSHEW696 Wireless LAN USB Adapter;c:\windows\SYSTEM32\DRIVERS\wlux96f.sys [5/22/2003 11:06 PM 80896]
.
Contents of the 'Scheduled Tasks' folder
2010-03-05 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 17:34]
2010-03-04 c:\windows\Tasks\User_Feed_Synchronization-{622DC8BF-5DC0-43FC-829B-F944D2B2EB67}.job
- c:\windows\system32\msfeedssync.exe [2007-08-14 09:31]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://google.com/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
mStart Page = hxxp://www.yahoo.com/
uInternet Connection Wizard,ShellNext = hxxp://www.dellnet.com/
uInternet Settings,ProxyOverride = <local>
uInternet Settings,ProxyServer = http=127.0.0.1:5555
uSearchURL,(Default) = hxxp://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Garmin Communicator Plug-In - hxxps://my.garmin.com/static/m/cab/2.6.4/GarminAxControl.CAB
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Bob\Application Data\Mozilla\Firefox\Profiles\9u3mbtvu.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.yahoo.com/search?fr=ffsp1&p=
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.com/
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=ffds1&p=
FF - component: c:\program files\Mozilla Firefox\components\xpinstal.dll
---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - true.
- - - - ORPHANS REMOVED - - - -
Toolbar-Locked - (no file)
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
AddRemove-AP Guitar Tuner 1.02 - c:\program files\Audio Phonics
AddRemove-Cakewalk Pro Audio 9 - c:\program files\Cakewalk\Cakewalk Pro Audio 9\CWPA9_Uninst.isu
AddRemove-Orbit - c:\program files\Common Files\OE\uninstallwa.exe
AddRemove-rgc:audio sfz VSTi_is1 - c:\program files\Vstplugins\unins000.exe
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-05 00:34
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
DwlClient = c:\program files\Common Files\Dell\EUSW\Support.exe?l?e?s?\?D?e?l?l?\?E?U?S?W?\?S?u?p?p?o?r?t?.?e?x?e???????X:??h???x???@???X???????????@???P???? ?w? ?w)??p????????(???y????U?w????????????0??????w, ?w?M?wW??w???w)??p????????x'@?????????X????????"@?e?????
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2010-03-05 00:47:36
ComboFix-quarantined-files.txt 2010-03-05 06:47
ComboFix2.txt 2009-01-26 05:26
Pre-Run: 8,457,646,080 bytes free
Post-Run: 8,454,467,584 bytes free
WindowsXP-KB310994-SP2-Home-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Home Edition" /fastdetect /NoExecute=OptIn
- - End Of File - - F3471741E6307182B7CAE8F11519B7D0
RKennedy
2010-03-05, 14:44
4Front Piano Module 1.0 VSTi
Adobe Bridge 1.0
Adobe Creative Suite 2
Adobe Flash Player 10 ActiveX
Adobe Help Center 1.0
Adobe Illustrator CS2
Adobe InDesign CS2
Adobe Photoshop CS2
Adobe Reader 7.0
Adobe Stock Photos 1.0
Adobe SVG Viewer 3.0
AIM 6
Amara - Flash Slide Show Builder
America Online (Choose which version to remove)
Antares Auto-Tune 3.03 DirectX
AOL Instant Messenger
AP Guitar Tuner 1.02
Apple Application Support
Apple Mobile Device Support
Apple Software Update
AVG Free 9.0
BACS
Banctec Service Agreement
BlackBerry Desktop Software 5.0.1
BlackBerry v4.2.1 for the 8100 Series Wireless Handheld
BlackBerry® Media Sync
Bonjour
Britannica Ready Reference
Broadcom Advanced Control Suite
Cakewalk Pro Audio 9
Cakewalk VST Adapter 4.4.0
CD-Cover Editor v2.5
CD/DVD Jewel Case and Label Creator
CoffeeCup Flash Firestarter
CoffeeCup GIF Animator
CoffeeCup Web JukeBox - Registered
CoffeeCup Web Video Player - Registered
Conexant SmartHSFi V92 56K DF PCI Modem
Critical Update for Windows Media Player 11 (KB959772)
cwenc v1.2
DAO
Dell Picture Studio - Dell Image Expert
Dell ResourceCD
Dell Solution Center
Digital Line Detect
DivX Web Player
DreamStation DXi2
DVDSentry
DVDx
Earthlink Installer - uninstall 'Earthlink 5.0' entry first if present
Easy CD Creator 5 Basic
EasyZip
eFax Messenger 4.2
ELNKInst
Eraser 5.8.7
ERUNT 1.1j
Free Desktop Clock 2.2
Free History Eraser
Garmin USB Drivers
Google Toolbar for Internet Explorer
GT-8FxFloorBoard 1.1a
Guitar Pro 4 Demo
Guitar Pro 5.0
GuitarPort 2.51 (Remove Only)
Help and Support Customization
HijackThis 2.0.2
Home Studio 2004
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB970653-v3)
Hotfix for Windows XP (KB976098-v2)
Hotfix for Windows XP (KB979306)
Intel(R) Extreme Graphics Driver
InterLok Driver Kit
iTunes
iZotope Ozone 3
Java(TM) 6 Update 17
Java(TM) 6 Update 7
K-Tuner
Learn2 Player (Uninstall Only)
Line 6 Edit (remove only)
Linksys Wireless Manager
Macromedia Shockwave Player
Malwarebytes' Anti-Malware
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Data Access Components KB870669
Microsoft FrontPage 2002
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office 97, Professional Edition
Microsoft Office XP Small Business
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Web Embedding Fonts Tool (III)
Modem Helper
Mozilla Firefox (2.0.0.20)
MSN Money Investment Toolbox
MSN Music Assistant
MyDVD
Neato MediaFACE
NetWaiting
Network Magic
NoteTab Light (Remove only)
OLYMPUS CAMEDIA Master 2.5
Paint Shop Pro 7
Panda ActiveScan
PIXELA ImageMixer
PODxt Drivers 2.6.2.0 (Remove Only)
PODxt Drivers 2.6.3.0 (Remove Only)
PODxt Drivers 2.6.5.0 (Remove Only)
PODxt Drivers 2.6.8.0 (Remove Only)
Power Tab Editor 1.7
PowerDVD
Pure Networks Platform
QuickTime
RealOne Player
REAPER
rgc:audio sfz VSTi v1.93
SBC Self Support Tool
SBC Yahoo! Dial (remove only)
SBC Yahoo! DSL
SBC Yahoo! DSL Utilities
SBC Yahoo! Internet Mail
SBC Yahoo! Parental Controls
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 7 (KB969897)
Security Update for Windows Internet Explorer 8 (KB969897)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB972260)
Security Update for Windows Internet Explorer 8 (KB974455)
Security Update for Windows Internet Explorer 8 (KB976325)
Security Update for Windows Internet Explorer 8 (KB978207)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows Media Player 9 Series (KB969878)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB938464-v2)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978706)
ShowBiz
Spybot - Search & Destroy
Spybot - Search & Destroy 1.5.2.20
Style Enhancer Micro 1.28
Suite Specific
TEFView 2.64
U.S. Robotics Wireless Installation CD
Ulead VideoStudio 6
Update for Windows Internet Explorer 8 (KB971930)
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows Internet Explorer 8 (KB976749)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
VERITAS RecordNow DX
VERITAS RecordNow DX Update Manager
Viewpoint Media Player
Virtual Sound Canvas DXi
VistaPrint Electronic Business Card
Voxengo Soniformer VST 2.2
Web Assistant
WebClean
WebFldrs XP
Win32 BI Application
Winamp3 (remove only)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices (03/08/2007 2.2.1.0)
Windows Genuine Advantage Notifications (KB905474)
Windows Internet Explorer 7
Windows Internet Explorer 8
Windows Media 8 Encoding Utility
Windows Media Encoder 7.1
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Player 9 Series Winter Fun Pack
Windows XP Hotfix (SP2) [See KB810243 for more information]
Windows XP Service Pack 3
WordPerfect Office 2002
Yahoo! Browser Services
Yahoo! Install Manager
Yahoo! Mail
Yahoo! Messenger Explorer Bar
Yahoo! Software Update
Yahoo! Toolbar
----------------------------------------------------------------------------------------
Step 1
Custom CFScript
Please open Notepad (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the code box below:
DirLook::
c:\documents and settings\Bob\Local Settings\Application Data\wbsrov
DDS::
uInternet Settings,ProxyOverride = <local>
uInternet Settings,ProxyServer = http=127.0.0.1:5555
ADS::
Save this as CFScript.txt and place it on your desktop.
http://i51.photobucket.com/albums/f387/Katana_1970/CFScriptb.gif
Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
When finished, it will produce a log for you. Copy and paste the contents of the log in your next reply.
CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.
Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.
A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix on your own. This tool is not a toy and not for everyday use.
ComboFix SHOULD NOT be used unless requested by a forum helper
----------------------------------------------------------------------------------------
Step 2
Kaspersky Online Scanner .
Your Antivirus and/or Antispyware may give a warning during the scan. This is perfectly normal
NOTE:- This scan is best done from IE (Internet Explorer)
NOTE:- Vista users should start IE by Start(Vista Orb) >> Internet Explorer >> Right-Click Run As Admin
Go Here http://www.kaspersky.com/kos/eng/partner/default/kavwebscan.html
Read the Requirements and limitations before you click Accept.
Once the database has downloaded, click My Computer in the left pane
Now go and put the kettle on !
When the scan has completed, click Save Report As...
Enter a name for the file in the Filename: text box and then click the down arrow to the right of Save as type: and select text file (*.txt)
Click Save - by default the file will be saved to your Desktop, but you can change this if you wish.
**Note**
To optimize scanning time and produce a more sensible report for review: Close any open programs.
Turn off the real-time scanner of all antivirus or antispyware programs while performing the online scan.
Note for Internet Explorer 7 users: If at any time you have trouble viewing the accept button of the license, click on the Zoom tool located at the bottom right of the IE window and set the zoom to 75%. Once the license is accepted, reset to 100%.
----------------------------------------------------------------------------------------
Logs/Information to Post in Reply
Please post the following logs/Information in your reply
Some of the logs I request will be quite large, You may need to split them over a couple of replies.
Combofix Log
Kaspersky Log
---------------------------------------------------------------------------------------------------
---------------------------------------------------------------------------------------------------
Additional Notes
Your Java and Adobe is out of date. Older versions have vulnerabilities that malware can use to infect your system.
Please follow these steps to remove older version Java and Adobe components and update.
Updating Java:
Download the latest version of Java Runtime Environment (JRE) from HERE (http://java.sun.com/javase/downloads/index.jsp)
Scroll down to where it says "Java SE Runtime Environment (JRE)".
Click the "Download" button to the right.
Platform = Windows Language = Multi Language
Check the box that says: "Accept License Agreement".
The page will refresh.
Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
Update Adobe Acrobat Reader
Adobe Reader is a large program and uses unnecessary space.
If you prefer a smaller program you can get Foxit 3.0 from http://www.foxitsoftware.com/pdf/rd_intro.php << Recommended
Please go to this link Adobe Acrobat Reader Download Link (http://www.adobe.com/products/acrobat/readstep2.html)
Cllick Download
On the right Untick Adobe Phototshop Album Starter Edition if you do not wish to include this in the installation.
Click the Continue button
Click Run, and click Run again
Next click the Install Now button and follow the on screen prompts
Now close all windows, including your browser.
Double click on the Java installation that you downloaded and follow the prompts.
Remove Programs
Now click Start---Control Panel. Double click Add or Remove Programs. If any of the following programs are listed there,
click on the program to highlight it, and click on remove.
Adobe Reader 7.0
Java(TM) 6 Update 17
Java(TM) 6 Update 7
Now close the Control Panel.
Reboot your machine.
RKennedy
2010-03-06, 19:06
ComboFix 10-03-04.02 - Bob 03/06/2010 10:34:45.3.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.510.290 [GMT -6:00]
Running from: c:\documents and settings\Bob\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\Bob\Desktop\CFScript.txt
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
((((((((((((((((((((((((( Files Created from 2010-02-06 to 2010-03-06 )))))))))))))))))))))))))))))))
.
2010-02-26 04:58 . 2010-03-01 10:34 -------- d-----w- c:\documents and settings\Bob\Local Settings\Application Data\wbsrov
2010-02-19 14:15 . 2010-02-19 14:15 114688 ----a-w- c:\windows\system32\igfxzoom.exe
2010-02-19 01:36 . 2010-02-19 01:40 -------- d-----w- C:\$AVG
2010-02-19 01:34 . 2010-02-19 01:34 -------- d-----w- c:\documents and settings\All Users\Application Data\avg9
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-02-21 20:12 . 2007-09-14 04:49 -------- d-----w- c:\documents and settings\Bob\Application Data\LimeWire
2010-02-19 14:15 . 2003-10-15 05:58 -------- d-----w- c:\program files\Free History Eraser
2010-02-19 01:35 . 2007-03-01 16:09 28424 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2010-02-19 01:35 . 2008-07-02 14:43 12464 ----a-w- c:\windows\system32\avgrsstx.dll
2010-02-19 01:35 . 2008-06-19 13:21 360584 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-02-19 01:35 . 2008-06-19 13:21 333192 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2010-02-19 01:34 . 2008-06-19 13:20 -------- d-----w- c:\program files\AVG
2010-02-12 18:40 . 2010-02-04 06:06 -------- d-----w- c:\documents and settings\All Users\Application Data\Research In Motion
2010-02-04 06:33 . 2010-02-04 06:17 256 ----a-w- c:\windows\system32\pool.bin
2010-02-04 06:24 . 2007-03-31 16:20 -------- d-----w- c:\documents and settings\Bob\Application Data\Blackberry Desktop
2010-02-04 06:13 . 2007-03-31 16:20 -------- d-----w- c:\program files\Research In Motion
2010-02-04 06:06 . 2007-03-31 16:20 -------- d-----w- c:\program files\Common Files\Research In Motion
2010-02-04 06:06 . 2010-02-04 06:06 -------- d-----w- c:\program files\Common Files\Roxio Shared
2010-02-02 15:15 . 2005-09-17 20:58 -------- d-----w- c:\documents and settings\Bob\Application Data\Lavasoft
2010-02-01 14:22 . 2008-10-10 16:56 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-01-31 23:24 . 2010-01-20 07:16 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft
2010-01-25 20:07 . 2010-01-25 20:07 -------- d-----w- c:\program files\ERUNT
2010-01-07 22:07 . 2008-10-10 16:56 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-01-07 22:07 . 2008-10-10 16:56 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-12-31 16:50 . 2004-11-22 19:12 353792 ----a-w- c:\windows\system32\drivers\srv.sys
2009-12-21 19:14 . 2004-11-22 19:13 916480 ------w- c:\windows\system32\wininet.dll
2009-12-16 18:43 . 2004-11-22 19:13 343040 ----a-w- c:\windows\system32\mspaint.exe
2009-12-14 07:08 . 2004-11-22 19:12 33280 ----a-w- c:\windows\system32\csrsrv.dll
2009-12-08 19:27 . 2004-11-22 19:12 2189184 ------w- c:\windows\system32\ntoskrnl.exe
2009-12-08 18:43 . 2004-11-22 19:12 2066048 ------w- c:\windows\system32\ntkrnlpa.exe
2004-02-19 02:22 . 2004-02-27 06:11 1009152 ----a-w- c:\program files\K-Tuner.msi
1998-02-10 22:34 . 2003-05-10 05:31 128000 ----a-w- c:\program files\UNWISE.EXE
2010-02-26 19:55 . 2007-01-06 04:38 67688 ----a-w- c:\program files\mozilla firefox\components\jar50.dll
2010-02-26 19:55 . 2007-01-06 04:38 54368 ----a-w- c:\program files\mozilla firefox\components\jsd3250.dll
2010-02-26 19:55 . 2007-01-06 04:38 34944 ----a-w- c:\program files\mozilla firefox\components\myspell.dll
2010-02-26 19:55 . 2007-01-06 04:38 46712 ----a-w- c:\program files\mozilla firefox\components\spellchk.dll
2010-02-26 19:55 . 2007-01-06 04:38 172136 ----a-w- c:\program files\mozilla firefox\components\xpinstal.dll
.
(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
---- Directory of c:\documents and settings\Bob\Local Settings\Application Data\wbsrov ----
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-04-28 68856]
"SkinClock"="c:\program files\Free Desktop Clock\DesktopClock.exe" [2006-10-01 334848]
"Eraser"="c:\program files\Eraser\Eraser.exe" [2009-06-10 334224]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DVDSentry"="c:\windows\System32\DSentry.exe" [2002-08-14 28672]
"DwlClient"="c:\program files\Common Files\Dell\EUSW\Support.exe" [2003-10-07 294912]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2003-05-06 151597]
"AdaptecDirectCD"="c:\program files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" [2004-09-16 684032]
"StorageGuard"="c:\program files\VERITAS Software\Update Manager\sgtray.exe" [2002-06-18 155648]
"Motive SmartBridge"="c:\progra~1\SBCSEL~1\SMARTB~1\MotiveSB.exe" [2003-12-10 380928]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2005-10-19 155648]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2005-10-19 126976]
"eFax 4.2"="c:\program files\eFax Messenger 4.2\J2GDllCmd.exe" [2006-06-20 107008]
"nmapp"="c:\program files\Pure Networks\Network Magic\nmapp.exe" [2008-05-21 451896]
"nmctxth"="c:\program files\Common Files\Pure Networks Shared\Platform\nmctxth.exe" [2008-12-12 642856]
"Linksys Wireless Manager"="c:\program files\Linksys\Linksys Wireless Manager\LinksysWirelessManager.exe" [2009-02-16 1358384]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-09-05 417792]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-09-21 305440]
"BlackBerryAutoUpdate"="c:\program files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe" [2009-11-20 623960]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-04-28 68856]
c:\documents and settings\Bob\Start Menu\Programs\Startup\
ERUNT AutoBackup.lnk - c:\program files\ERUNT\AUTOBACK.EXE [2005-10-20 38912]
Microsoft Find Fast.lnk - c:\program files\Microsoft Office\Office\FINDFAST.EXE [1996-11-16 111376]
Office Startup.lnk - c:\program files\Microsoft Office\Office\OSA.EXE [1996-11-16 51984]
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696]
eFax 4.2.lnk - c:\program files\eFax Messenger 4.2\J2GTray.exe [2006-7-5 612352]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]
SBC Self Support Tool.lnk - c:\program files\SBC Self Support Tool\bin\matcli.exe [2004-10-30 217088]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2010-02-19 01:35 12464 ----a-w- c:\windows\SYSTEM32\avgrsstx.dll
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^America Online 9.0 Tray Icon.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\America Online 9.0 Tray Icon.lnk
backup=c:\windows\pss\America Online 9.0 Tray Icon.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^America Online Tray Icon.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\America Online Tray Icon.lnk
backup=c:\windows\pss\America Online Tray Icon.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Digital Line Detect.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Digital Line Detect.lnk
backup=c:\windows\pss\Digital Line Detect.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^Bob^Start Menu^Programs^Startup^PowerReg Scheduler V3.exe]
path=c:\documents and settings\Bob\Start Menu\Programs\Startup\PowerReg Scheduler V3.exe
backup=c:\windows\pss\PowerReg Scheduler V3.exeStartup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
c:\windows\system32\dumprep 0 -k [X]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdaptecDirectCD]
2004-09-16 00:24 684032 ----a-w- c:\program files\Roxio\Easy CD Creator 5\DirectCD\Directcd.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
2005-10-19 13:59 126976 ----a-w- c:\windows\SYSTEM32\hkcmd.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
2005-10-19 13:59 155648 ----a-w- c:\windows\SYSTEM32\igfxtray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 00:12 1695232 ----a-w- c:\program files\Messenger\msmsgs.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2009-09-05 06:54 417792 ----a-w- c:\program files\QuickTime\QTTask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
2003-05-06 18:50 151597 ----a-w- c:\program files\Common Files\Real\Update_OB\realsched.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"anem"=2 (0x2)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\AIM\\aim.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"c:\\Program Files\\America Online 9.0a\\waol.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office10\\FRONTPG.EXE"=
"c:\\Program Files\\Common Files\\aol\\Loader\\aolload.exe"=
"c:\\Program Files\\AIM6\\aim6.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"67:UDP"= 67:UDP:DHCP Discovery Service
R0 sonyhcb;Sony Digital Imaging Base;c:\windows\SYSTEM32\DRIVERS\sonyhcb.sys [7/7/2003 8:39 PM 6097]
R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\SYSTEM32\DRIVERS\avgldx86.sys [6/19/2008 7:21 AM 333192]
R1 AvgTdiX;AVG8 Network Redirector;c:\windows\SYSTEM32\DRIVERS\avgtdix.sys [6/19/2008 7:21 AM 360584]
R2 avg9wd;AVG Free WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [2/18/2010 7:34 PM 285392]
R3 L6DP;L6DP;c:\windows\SYSTEM32\DRIVERS\l6dp.sys [7/15/2002 9:39 PM 26496]
R3 WUSB54GCv3;Compact Wireless-G USB Network Adapter;c:\windows\SYSTEM32\DRIVERS\WUSB54GCv3.sys [6/22/2009 10:31 AM 627072]
S0 sptd;sptd;c:\windows\SYSTEM32\DRIVERS\sptd.sys [11/27/2006 10:18 PM 639224]
S3 L6PODLV;PODxt Live Service;c:\windows\SYSTEM32\DRIVERS\L6PODLV.sys [10/5/2004 7:58 PM 114048]
S3 RDID1003;EDIROL UM-2;c:\windows\SYSTEM32\DRIVERS\Rdwm1003.sys [11/5/2007 1:30 AM 80481]
S3 RDWM1005;EDIROL UA-5 (WDM);c:\windows\SYSTEM32\DRIVERS\Rdwm1005.sys [5/22/2003 10:35 PM 98822]
S3 sonyhcs;Sony Digital Imaging Video;c:\windows\SYSTEM32\DRIVERS\sonyhcs.sys [7/7/2003 8:39 PM 299923]
S3 WLUX96;3Com 3CRSHEW696 Wireless LAN USB Adapter;c:\windows\SYSTEM32\DRIVERS\wlux96f.sys [5/22/2003 11:06 PM 80896]
.
Contents of the 'Scheduled Tasks' folder
2010-03-05 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 17:34]
2010-03-05 c:\windows\Tasks\User_Feed_Synchronization-{622DC8BF-5DC0-43FC-829B-F944D2B2EB67}.job
- c:\windows\system32\msfeedssync.exe [2007-08-14 09:31]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://google.com/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
mStart Page = hxxp://www.yahoo.com/
uInternet Connection Wizard,ShellNext = hxxp://www.dellnet.com/
uSearchURL,(Default) = hxxp://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Garmin Communicator Plug-In - hxxps://my.garmin.com/static/m/cab/2.6.4/GarminAxControl.CAB
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Bob\Application Data\Mozilla\Firefox\Profiles\9u3mbtvu.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.yahoo.com/search?fr=ffsp1&p=
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.com/
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=ffds1&p=
FF - component: c:\program files\Mozilla Firefox\components\xpinstal.dll
---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - true.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-06 10:50
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
DwlClient = c:\program files\Common Files\Dell\EUSW\Support.exe?l?e?s?\?D?e?l?l?\?E?U?S?W?\?S?u?p?p?o?r?t?.?e?x?e???????X:??h???x???@???X???????????@???P???? ?w? ?w)??p????????(???y????U?w????????????0??????w, ?w?M?wW??w???w)??p????????x'@?????????X????????"@?e?????
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
- - - - - - - > 'explorer.exe'(664)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Completion time: 2010-03-06 11:00:15
ComboFix-quarantined-files.txt 2010-03-06 17:00
ComboFix2.txt 2010-03-05 06:47
ComboFix3.txt 2009-01-26 05:26
Pre-Run: 8,426,278,912 bytes free
Post-Run: 8,460,103,680 bytes free
- - End Of File - - A3E631FDAE9C41CB28EF3E78D1E8E585
RKennedy
2010-03-07, 18:17
--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7.0: scan report
Sunday, March 7, 2010
Operating system: Microsoft Windows XP Home Edition Service Pack 3 (build 2600)
Kaspersky Online Scanner version: 7.0.26.13
Last database update: Saturday, March 06, 2010 13:26:35
Records in database: 3714519
--------------------------------------------------------------------------------
Scan settings:
scan using the following database: extended
Scan archives: yes
Scan e-mail databases: yes
Scan area - My Computer:
C:\
D:\
E:\
F:\
Scan statistics:
Objects scanned: 102542
Threats found: 3
Infected objects found: 5
Suspicious objects found: 0
Scan duration: 05:31:03
File name / Threat / Threats count
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\32\7836d960-5527f041 Infected: Trojan.Java.ClassLoader.as 3
C:\Documents and Settings\Bob\Local Settings\Temporary Internet Files\DSLDDSM.DCH\87NX57MK\thread%20sucks[1].jpg Infected: Trojan-Clicker.HTML.IFrame.rp 1
C:\WINDOWS\Downloaded Program Files\flash.inf Infected: not-a-virus:AdWare.Win32.BetterInternet.be 1
Selected area has been scanned.
OTMoveIt
Please download OTM by OldTimer (http://oldtimer.geekstogo.com/OTM.exe) and save it to your desktop
Double-click OTM.exe to run it.
Copy the lines in the codebox below. ( Make sure you include :Processes )
:Processes
:Files
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\*.* /s
C:\Documents and Settings\Bob\Local Settings\Temporary Internet Files\DSLDDSM.DCH\87NX57MK\*.jpg
C:\WINDOWS\Downloaded Program Files\flash.inf
:Commands
[Purity]
[EmptyTemp]
Return to OTM, right click in the Paste List of Files/Folders to Move window (under the yellow bar) and choose Paste.
- Close ALL open windows (especially Internet Explorer!)-
Click the red Moveit! button.
Copy everything in the Results window (under the green bar), and paste it in your next reply.
Close OTM
If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.
RKennedy
2010-03-07, 23:04
All processes killed
========== PROCESSES ==========
========== FILES ==========
DllUnregisterServer procedure not found in C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\58fb3e0f-723b934a-n\decora-d3d.dll
DllUnregisterServer procedure not found in C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\58fb3e0f-723b934a-n\decora-sse.dll
DllUnregisterServer procedure not found in C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\58fb3e0f-723b934a-n\msvcp71.dll
DllUnregisterServer procedure not found in C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\58fb3e0f-723b934a-n\msvcr71.dll
DllUnregisterServer procedure not found in C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\17\6d0ad391-79899a61-n\decora-d3d.dll
DllUnregisterServer procedure not found in C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\17\6d0ad391-79899a61-n\decora-sse.dll
DllUnregisterServer procedure not found in C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\21\14e5d595-11be08b3-n\decora-d3d.dll
DllUnregisterServer procedure not found in C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\21\14e5d595-11be08b3-n\decora-sse.dll
DllUnregisterServer procedure not found in C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\21\14e5d595-11be08b3-n\msvcp71.dll
DllUnregisterServer procedure not found in C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\21\14e5d595-11be08b3-n\msvcr71.dll
DllUnregisterServer procedure not found in C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\45\4f710eed-6cc2c2f7-n\gluegen-rt.dll
DllUnregisterServer procedure not found in C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\46\759e98ee-2ea8f929-n\decora-d3d.dll
DllUnregisterServer procedure not found in C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\46\759e98ee-2ea8f929-n\decora-sse.dll
DllUnregisterServer procedure not found in C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\46\759e98ee-2ea8f929-n\msvcp71.dll
DllUnregisterServer procedure not found in C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\46\759e98ee-2ea8f929-n\msvcr71.dll
DllUnregisterServer procedure not found in C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\54\1a209876-7f9736fc-n\msvcp71.dll
DllUnregisterServer procedure not found in C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\54\1a209876-7f9736fc-n\msvcr71.dll
DllUnregisterServer procedure not found in C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-3f35ed3c-n\jogl.dll
LoadLibrary failed for C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-3f35ed3c-n\jogl_awt.dll
LoadLibrary failed for C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-3f35ed3c-n\jogl_cg.dll
DllUnregisterServer procedure not found in C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\6bd546be-6d8799b9-n\decora-d3d.dll
DllUnregisterServer procedure not found in C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\6bd546be-6d8799b9-n\decora-sse.dll
DllUnregisterServer procedure not found in C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\6bd546be-6d8799b9-n\msvcp71.dll
DllUnregisterServer procedure not found in C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\6bd546be-6d8799b9-n\msvcr71.dll
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\lastAccessed moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\0\67af5180-6e5bfdf4 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\0\67af5180-6e5bfdf4.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\0\72208500-649a6da7 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\0\72208500-649a6da7.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\1\31f3fe41-15628dc9 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\1\31f3fe41-15628dc9.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\1\56865601-40f457d9 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\1\56865601-40f457d9.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\1\56c99c41-3d314400 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\1\56c99c41-3d314400.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\1\7e884641-32fc89de moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\1\7e884641-32fc89de.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\10\1451e78a-52f52a9e moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\10\1451e78a-52f52a9e.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\10\2c73dcca-68bb448a moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\10\2c73dcca-68bb448a.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\10\54c8774a-4e261e28 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\10\54c8774a-4e261e28.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\10\7c0e34ca-54595042 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\10\7c0e34ca-54595042.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\10\a62d40a-43ce310b moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\10\a62d40a-43ce310b.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\11\2b98eb8b-1e7989ec moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\11\2b98eb8b-1e7989ec.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\11\3c5a7f4b-7b449bd2 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\11\3c5a7f4b-7b449bd2.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\12\1ee324cc-5fb1058a moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\12\1ee324cc-5fb1058a.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\12\3ed53fcc-7d135537 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\12\3ed53fcc-7d135537.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\12\4316610c-6c24da8e moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\12\4316610c-6c24da8e.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\12\7b6030cc-271a87e7 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\12\7b6030cc-271a87e7.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\12\7e3cb64c-5b7ab91a moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\12\7e3cb64c-5b7ab91a.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\13\245eddcd-595651f1 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\13\245eddcd-595651f1.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\14\1972944e-2a04edd1 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\14\1972944e-2a04edd1.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\14\3034814e-71d4c0a0 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\14\3034814e-71d4c0a0.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\14\38eee3ce-3d4fe5eb moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\14\38eee3ce-3d4fe5eb.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\14\3d3951ce-2b6a0ed8 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\14\3d3951ce-2b6a0ed8.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\14\4883150e-789a344e moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\14\4883150e-789a344e.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\14\51ea7b8e-6f951ef9 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\14\51ea7b8e-6f951ef9.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\14\53dc330e-1534b332 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\14\53dc330e-1534b332.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\14\567353ce-6a5dd1c3 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\14\567353ce-6a5dd1c3.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\14\64680cce-70ab31fb moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\14\64680cce-70ab31fb.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\14\757e808e-58313448 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\14\757e808e-58313448.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\162bd34f-1ab44b6b moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\162bd34f-1ab44b6b.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\192d24cf-2fd152e4 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\192d24cf-2fd152e4.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\2aa292cf-325b1ce0 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\2aa292cf-325b1ce0.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\48d7188f-5d3cda63 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\48d7188f-5d3cda63.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\48e0acf-1e219c1c moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\48e0acf-1e219c1c.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\4aede6cf-264528b8 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\4aede6cf-264528b8.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\578e7e0f-746b4079 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\578e7e0f-746b4079.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\58800b8f-1f1e1164 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\58800b8f-1f1e1164.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\58fb3e0f-723b934a moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\58fb3e0f-723b934a.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\5ec71d8f-5a9b60af moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\5ec71d8f-5a9b60af.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\58fb3e0f-723b934a-n\decora-d3d.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\58fb3e0f-723b934a-n\decora-sse.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\58fb3e0f-723b934a-n\jmc.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\58fb3e0f-723b934a-n\msvcp71.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\15\58fb3e0f-723b934a-n\msvcr71.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\16\1df15a90-4284b767 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\16\1df15a90-4284b767.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\16\31b123d0-4c2ccf03 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\16\31b123d0-4c2ccf03.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\16\45b7fe90-55b38107 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\16\45b7fe90-55b38107.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\16\59aff850-461ae340 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\16\59aff850-461ae340.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\16\60553d90-24558e1c moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\16\60553d90-24558e1c.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\16\63dab710-3249e51a moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\16\63dab710-3249e51a.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\16\6f05a4d0-2b34f047 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\16\6f05a4d0-2b34f047.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\16\7c4f90d0-48f8c013 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\16\7c4f90d0-48f8c013.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\16\7d1a22d0-1095f55c moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\16\7d1a22d0-1095f55c.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\17\1b239cd1-5e4f5ee1 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\17\1b239cd1-5e4f5ee1.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\17\36f6e551-5f9c240c moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\17\36f6e551-5f9c240c.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\17\6d0ad391-79899a61 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\17\6d0ad391-79899a61.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\17\6d0ad391-79899a61-n\decora-d3d.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\17\6d0ad391-79899a61-n\decora-sse.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\18\115f3552-78fba709 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\18\115f3552-78fba709.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\18\2188ff92-265ce46c moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\18\2188ff92-265ce46c.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\18\2272fa52-772b6122 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\18\2272fa52-772b6122.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\18\2dc47a92-16d376c9 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\18\2dc47a92-16d376c9.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\18\3bb08952-7592b254 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\18\3bb08952-7592b254.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\18\3e9b75d2-18344e3e moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\18\3e9b75d2-18344e3e.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\18\44029d52-44335fb4 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\18\44029d52-44335fb4.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\18\4739b852-41b9400d moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\18\4739b852-41b9400d.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\18\4db54d2-44591f26 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\18\4db54d2-44591f26.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\18\5268d492-7b0ce25e moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\18\5268d492-7b0ce25e.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\18\63e6ad12-72090e59 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\18\63e6ad12-72090e59.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\18\72cf6d2-6c09d0af moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\18\72cf6d2-6c09d0af.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\18\73c5acd2-2ae49fae moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\18\73c5acd2-2ae49fae.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\18\768bbd12-47b79753 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\18\768bbd12-47b79753.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\19\161b15d3-38674f54 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\19\161b15d3-38674f54.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\19\1ffdd613-5ebaa1c9 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\19\1ffdd613-5ebaa1c9.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\19\26806753-4dc4c86d moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\19\26806753-4dc4c86d.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\19\40a1f353-14d0d3ae moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\19\40a1f353-14d0d3ae.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\19\764767d3-24fbd713 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\19\764767d3-24fbd713.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\19\7877bdd3-69fd0a73 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\19\7877bdd3-69fd0a73.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\2\3b903b82-22363c14 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\2\3b903b82-22363c14.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\2\47185142-795879ea moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\2\47185142-795879ea.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\2\53b32282-599256ad moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\2\53b32282-599256ad.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\2\53b43a82-3c06b5f5 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\2\53b43a82-3c06b5f5.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\2\5637b2c2-2a408be5 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\2\5637b2c2-2a408be5.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\2\6d9ea042-33ba00fc moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\2\6d9ea042-33ba00fc.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\20\135eaed4-3b368469 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\20\135eaed4-3b368469.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\20\1c73dd94-6db063a5 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\20\1c73dd94-6db063a5.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\20\20e3a554-3b4d3754 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\20\20e3a554-3b4d3754.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\20\2cd47214-6485b122 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\20\2cd47214-6485b122.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\20\361d3614-4fb50652 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\20\361d3614-4fb50652.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\20\5e6a8f54-5496fd59 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\20\5e6a8f54-5496fd59.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\20\719126d4-3ec54f4c moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\20\719126d4-3ec54f4c.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\20\7daf47d4-54d92647 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\20\7daf47d4-54d92647.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\21\145e2715-4193318e moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\21\145e2715-4193318e.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\21\14e5d595-11be08b3 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\21\14e5d595-11be08b3.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\21\26fbc215-6cd887aa moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\21\26fbc215-6cd887aa.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\21\297e16d5-1d5bde5b moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\21\297e16d5-1d5bde5b.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\21\5f95c755-663e8d6f moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\21\5f95c755-663e8d6f.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\21\6093bd15-7b508d38 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\21\6093bd15-7b508d38.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\21\61be7b95-645ad688 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\21\61be7b95-645ad688.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\21\75411895-689f1434 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\21\75411895-689f1434.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\21\7f641d5-20420b82 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\21\7f641d5-20420b82.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\21\14e5d595-11be08b3-n\decora-d3d.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\21\14e5d595-11be08b3-n\decora-sse.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\21\14e5d595-11be08b3-n\jmc.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\21\14e5d595-11be08b3-n\msvcp71.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\21\14e5d595-11be08b3-n\msvcr71.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\22\1cf0fb96-40017fb5 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\22\1cf0fb96-40017fb5.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\22\1cf0fb96-417b8d0c moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\22\1cf0fb96-417b8d0c.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\22\1cf0fb96-464f04e5 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\22\1cf0fb96-464f04e5.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\22\1cf0fb96-7e776c0b moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\22\1cf0fb96-7e776c0b.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\22\29eae656-2446d780 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\22\29eae656-2446d780.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\22\44316a16-35ce94ab moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\22\44316a16-35ce94ab.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\22\50713d96-5b1ee461 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\22\50713d96-5b1ee461.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\22\58adf016-3d457c56 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\22\58adf016-3d457c56.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\22\5b1aaf96-24d4193e moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\22\5b1aaf96-24d4193e.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\22\6b681916-32d2abe9 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\22\6b681916-32d2abe9.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\22\c59a616-5124a968 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\22\c59a616-5124a968.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\23\21702e97-4fc8e658 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\23\21702e97-4fc8e658.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\23\31915c17-586a07fb moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\23\31915c17-586a07fb.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\23\3419ee97-149d03d1 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\23\3419ee97-149d03d1.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\23\484a19d7-7fe6f2a2 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\23\484a19d7-7fe6f2a2.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\23\49f93017-24fc2b19 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\23\49f93017-24fc2b19.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\23\4bd43557-4f69452d moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\23\4bd43557-4f69452d.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\23\5148d217-7ad266a5 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\23\5148d217-7ad266a5.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\23\57630317-2539ebc2 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\23\57630317-2539ebc2.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\23\cbfd357-648c56e9 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\23\cbfd357-648c56e9.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\24\2808ddd8-3114a0c4 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\24\2808ddd8-3114a0c4.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\24\2a20e358-13e905c1.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\24\2a20e358-20c79be5.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\24\2a20e358-239f6acf.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\24\2a20e358-337873e2.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\24\2a20e358-4a3de337.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\24\2a20e358-71f7f33d moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\24\2a20e358-71f7f33d.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\24\308452d8-605d1925 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\24\308452d8-605d1925.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\24\4e6bcb18-11eb66b5 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\24\4e6bcb18-11eb66b5.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\24\5ac1dc58-7b29b791 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\24\5ac1dc58-7b29b791.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\24\96cee98-63c54e92 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\24\96cee98-63c54e92.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\25\4d499559-1457d17b moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\25\4d499559-1457d17b.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\25\5cbf08d9-38015ec1 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\25\5cbf08d9-38015ec1.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\25\5cbf08d9-77726bc7 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\25\5cbf08d9-77726bc7.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\25\794f2bd9-39b8f1ec moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\25\794f2bd9-39b8f1ec.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\26\2d280e1a-24cc7546-1.1.1a- moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\26\2d280e1a-24cc7546-1.1.1a-.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\26\314a695a-168fc6c6 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\26\314a695a-168fc6c6.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\27\20d3eedb-4e3c2794 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\27\20d3eedb-4e3c2794.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\27\37bc35db-57c61ea5 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\27\37bc35db-57c61ea5.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\27\3a3fec5b-69d7a5c2 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\27\3a3fec5b-69d7a5c2.idx moved successfully.
RKennedy
2010-03-07, 23:05
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\27\4778cf1b-73ce446b moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\27\4778cf1b-73ce446b.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\27\4a6ad85b-6e3276ec moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\27\4a6ad85b-6e3276ec.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\27\4e69b95b-14169e01 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\27\4e69b95b-14169e01.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\27\520e021b-3f47018e moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\27\520e021b-3f47018e.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\27\6aaeba9b-46c4d379 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\27\6aaeba9b-46c4d379.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\27\76be635b-6c7d93bc moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\27\76be635b-6c7d93bc.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\28\158aaedc-4f4c94e1 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\28\158aaedc-4f4c94e1.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\28\23efc5dc-612daea7 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\28\23efc5dc-612daea7.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\28\32f59a5c-3e5d73f7 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\28\32f59a5c-3e5d73f7.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\28\3a9ab39c-7260587c moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\28\3a9ab39c-7260587c.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\28\7e354cdc-4402930a moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\28\7e354cdc-4402930a.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\28\7e5bee5c-3aa918a1 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\28\7e5bee5c-3aa918a1.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\29\153a3d1d-13f7471d moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\29\153a3d1d-13f7471d.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\29\235f109d-2ef0deaa moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\29\235f109d-2ef0deaa.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\29\42a0785d-19d13e7f moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\29\42a0785d-19d13e7f.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\29\5a65085d-53b23a92 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\29\5a65085d-53b23a92.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\29\68fe0a1d-43cf98a0 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\29\68fe0a1d-43cf98a0.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\29\691249dd-2e888130 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\29\691249dd-2e888130.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\3\120f5483-61eccb46 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\3\120f5483-61eccb46.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\3\26430303-309ac299 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\3\26430303-309ac299.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\3\2b9aba03-2a80aed5 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\3\2b9aba03-2a80aed5.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\3\53c01a83-4f47096b moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\3\53c01a83-4f47096b.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\3\5449a203-72f5dee8 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\3\5449a203-72f5dee8.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\3\5f055983-7033ed09 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\3\5f055983-7033ed09.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\3\7f2fce03-661f33e8 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\3\7f2fce03-661f33e8.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\30\12be9b1e-4b8fab02 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\30\12be9b1e-4b8fab02.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\30\1e587e1e-765958d5 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\30\1e587e1e-765958d5.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\30\2154585e-7d242baa moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\30\2154585e-7d242baa.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\30\2cbe9a1e-3914a94d moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\30\2cbe9a1e-3914a94d.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\30\3894e25e-25f82dd3 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\30\3894e25e-25f82dd3.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\30\3cd46a1e-47f79238 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\30\3cd46a1e-47f79238.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\30\45cc8bde-7ce50d21 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\30\45cc8bde-7ce50d21.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\30\4b50315e-5d308daf moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\30\4b50315e-5d308daf.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\30\4f77981e-7f53d25a moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\30\4f77981e-7f53d25a.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\30\57aa3ede-365b6149 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\30\57aa3ede-365b6149.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\30\81d719e-31357750 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\30\81d719e-31357750.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\31\14e4dcdf-6e2bce2b moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\31\14e4dcdf-6e2bce2b.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\31\170f4a9f-782767be moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\31\170f4a9f-782767be.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\31\268e175f-510b4c6e moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\31\268e175f-510b4c6e.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\31\6073005f-4f659a4a moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\31\6073005f-4f659a4a.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\31\70d8321f-50fd4380 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\31\70d8321f-50fd4380.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\31\7a30b25f-24b19ba5 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\31\7a30b25f-24b19ba5.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\32\2fd82a60-4a573769 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\32\2fd82a60-4a573769.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\32\3c877e0-36f4dfdb moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\32\3c877e0-36f4dfdb.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\32\3c877e0-3835ab91.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\32\48ff7ae0-52c582a3 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\32\48ff7ae0-52c582a3.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\32\6c34baa0-18fea95f.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\32\6c34baa0-4ba9b638.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\32\6c34baa0-552596f5.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\32\6c34baa0-5a9a577e moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\32\6c34baa0-5a9a577e.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\32\6c34baa0-5fa1e38c.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\32\6c34baa0-77430ebe.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\32\6c34baa0-7f31e08b.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\32\7836d960-5527f041 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\32\7836d960-5527f041.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\32\eaf33e0-6ef6e0d8 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\32\eaf33e0-6ef6e0d8.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\33\25704461-31d7cb1e moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\33\25704461-31d7cb1e.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\33\2f0fa9a1-6f55d9b3 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\33\2f0fa9a1-6f55d9b3.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\33\40b30f21-79199ce2 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\33\40b30f21-79199ce2.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\33\52db6c61-58b33f13 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\33\52db6c61-58b33f13.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\33\5382561-1ce383a6 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\33\5382561-1ce383a6.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\33\6bb4f921-42d4d556 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\33\6bb4f921-42d4d556.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\34\1d1bcf22-183d3898 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\34\1d1bcf22-183d3898.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\34\2f40eae2-3b964ffb moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\34\2f40eae2-3b964ffb.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\34\386b8362-18c1119c moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\34\386b8362-18c1119c.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\34\414bf4a2-57f8362d moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\34\414bf4a2-57f8362d.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\34\5a921422-54ccbffd moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\34\5a921422-54ccbffd.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\34\6618f8e2-6f957fbd moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\34\6618f8e2-6f957fbd.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\34\d49ece2-6c1ff26f moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\34\d49ece2-6c1ff26f.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\35\362cfe3-32cfe97c.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\36\35f4f6e4-33f10260 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\36\35f4f6e4-33f10260.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\36\3d5ed364-4c328be2 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\36\3d5ed364-4c328be2.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\36\76fc10a4-33923b4e moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\36\76fc10a4-33923b4e.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\36\7aa3d9a4-3d4f950a moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\36\7aa3d9a4-3d4f950a.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\36\8ef8224-79811ff6 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\36\8ef8224-79811ff6.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\37\21a5ac65-4c796b26 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\37\21a5ac65-4c796b26.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\37\2373365-4618bebd moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\37\2373365-4618bebd.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\37\2b865a25-5e79d4f5 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\37\2b865a25-5e79d4f5.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\37\2f4b9465-1b1493a3 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\37\2f4b9465-1b1493a3.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\37\53b85a5-2f79bcc6 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\37\53b85a5-2f79bcc6.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\38\12b79d66-5164ceb8 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\38\12b79d66-5164ceb8.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\38\44a12926-3160249c moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\38\44a12926-3160249c.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\38\4d26f7e6-5be3644b moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\38\4d26f7e6-5be3644b.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\38\50494a66-36445461 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\38\50494a66-36445461.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\38\63a3ed66-47aebe56 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\38\63a3ed66-47aebe56.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\38\6623f6e6-76c73e83 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\38\6623f6e6-76c73e83.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\38\f25efa6-654e44a1 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\38\f25efa6-654e44a1.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\39\21e4b67-5c081a46 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\39\21e4b67-5c081a46.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\39\25e25767-7493ad17 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\39\25e25767-7493ad17.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\39\386e13e7-295bc7e9 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\39\386e13e7-295bc7e9.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\39\39b42827-140679b0 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\39\39b42827-140679b0.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\39\3a7bdde7-53f6475d moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\39\3a7bdde7-53f6475d.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\39\517b5f67-55f40085 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\39\517b5f67-55f40085.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\39\5f3acde7-6f8d84d8 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\39\5f3acde7-6f8d84d8.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\39\5fa9bd67-16aea189 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\39\5fa9bd67-16aea189.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\39\6d2f5be7-7feafc45 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\39\6d2f5be7-7feafc45.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\4\185a4444-42fdf8a8 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\4\185a4444-42fdf8a8.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\4\1a5101c4-689f6a74 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\4\1a5101c4-689f6a74.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\4\2a2afb44-402dc97b moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\4\2a2afb44-402dc97b.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\4\33247184-551056bd moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\4\33247184-551056bd.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\4\3e228284-2e41c21f moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\4\3e228284-2e41c21f.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\4\506e3c84-173a2c0f moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\4\506e3c84-173a2c0f.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\4\c64b484-5ee6ae46 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\4\c64b484-5ee6ae46.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\40\1a1c9228-5b84fd8d moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\40\1a1c9228-5b84fd8d.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\40\1c42c4e8-683c3be7 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\40\1c42c4e8-683c3be7.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\40\2cfef128-30582db4 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\40\2cfef128-30582db4.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\40\382c4868-2ac31725 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\40\382c4868-2ac31725.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\40\3c4cd0e8-689296ba moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\40\3c4cd0e8-689296ba.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\40\3f669e8-21ee79f0 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\40\3f669e8-21ee79f0.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\40\3f7a2a28-5672614b moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\40\3f7a2a28-5672614b.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\40\4d35da28-5e32f51a moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\40\4d35da28-5e32f51a.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\40\7f7d5068-418437ee moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\40\7f7d5068-418437ee.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\41\31058969-3a0ede8c moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\41\31058969-3a0ede8c.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\41\3bada869-3d2c96c9 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\41\3bada869-3d2c96c9.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\41\3fab869-4fdac5ab moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\41\3fab869-4fdac5ab.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\41\434977a9-17a706e1 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\41\434977a9-17a706e1.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\41\47f880a9-6075e9b6 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\41\47f880a9-6075e9b6.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\41\9d1c0e9-7e3b946d moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\41\9d1c0e9-7e3b946d.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\41\b54db69-7556cdfb moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\41\b54db69-7556cdfb.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\42\141aff2a-5afe8644 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\42\141aff2a-5afe8644.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\42\22d493ea-655464e1 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\42\22d493ea-655464e1.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\42\2f36b7aa-7a97e4ef moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\42\2f36b7aa-7a97e4ef.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\42\319224aa-38cb95d3 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\42\319224aa-38cb95d3.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\42\32ccb62a-44debdd4 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\42\32ccb62a-44debdd4.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\42\4b195aea-29add0b1 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\42\4b195aea-29add0b1.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\42\6b3eeaaa-56439228 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\42\6b3eeaaa-56439228.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\42\6d01a1aa-1a2a6c62 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\42\6d01a1aa-1a2a6c62.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\42\7d57b52a-52c4abb8 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\42\7d57b52a-52c4abb8.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\42\b21f66a-43bb6714 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\42\b21f66a-43bb6714.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\43\15dc826b-336583c9 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\43\15dc826b-336583c9.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\43\1cfe8eeb-4736327d moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\43\1cfe8eeb-4736327d.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\43\30e539ab-60bcbfd0 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\43\30e539ab-60bcbfd0.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\43\5a00422b-37d51460 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\43\5a00422b-37d51460.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\44\1a3c202c-4f59c141 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\44\1a3c202c-4f59c141.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\44\2a5d41ec-7f45f541 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\44\2a5d41ec-7f45f541.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\44\3780beec-7d82c8f0 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\44\3780beec-7d82c8f0.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\44\387852c-38b13bb5 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\44\387852c-38b13bb5.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\44\43aaedac-4488cdce moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\44\43aaedac-4488cdce.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\44\50f3f12c-1e2faabd moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\44\50f3f12c-1e2faabd.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\44\6ce3076c-63dea052 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\44\6ce3076c-63dea052.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\45\2a842c2d-4f896051 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\45\2a842c2d-4f896051.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\45\4f710eed-6cc2c2f7 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\45\4f710eed-6cc2c2f7.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\45\a973b6d-6528e420 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\45\a973b6d-6528e420.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\45\4f710eed-6cc2c2f7-n\gluegen-rt.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\46\27394b6e-52ba7947 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\46\27394b6e-52ba7947.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\46\32522c6e-2e110ae7 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\46\32522c6e-2e110ae7.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\46\4b73b9ee-2917eefb moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\46\4b73b9ee-2917eefb.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\46\54cc3aee-6d2433e4 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\46\54cc3aee-6d2433e4.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\46\555519ee-3e9dae8a moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\46\555519ee-3e9dae8a.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\46\5be60dae-7c2710c6 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\46\5be60dae-7c2710c6.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\46\647f302e-5a2ddd39 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\46\647f302e-5a2ddd39.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\46\69bba9ee-79f4253d moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\46\69bba9ee-79f4253d.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\46\759e98ee-2ea8f929 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\46\759e98ee-2ea8f929.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\46\759e98ee-2ea8f929-n\decora-d3d.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\46\759e98ee-2ea8f929-n\decora-sse.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\46\759e98ee-2ea8f929-n\jmc.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\46\759e98ee-2ea8f929-n\msvcp71.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\46\759e98ee-2ea8f929-n\msvcr71.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\47\27e6fcaf-13a928f5 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\47\27e6fcaf-13a928f5.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\47\4710692f-7c09a05b moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\47\4710692f-7c09a05b.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\47\4dd88def-748da71a moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\47\4dd88def-748da71a.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\47\626fa2ef-4c285d27 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\47\626fa2ef-4c285d27.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\47\661e116f-6bb0738c moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\47\661e116f-6bb0738c.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\47\7e0477ef-59c3925d moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\47\7e0477ef-59c3925d.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\48\1a6e7af0-38b4bf6d moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\48\1a6e7af0-38b4bf6d.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\48\26760070-3df542c0-1.0b06a- moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\48\26760070-3df542c0-1.0b06a-.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\48\35fada70-24e38145 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\48\35fada70-24e38145.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\48\395d1930-6d1685ae moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\48\395d1930-6d1685ae.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\48\7817ba70-2c6596eb moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\48\7817ba70-2c6596eb.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\49\118b56b1-6e922884 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\49\118b56b1-6e922884.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\49\32e392b1-502d8faa moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\49\32e392b1-502d8faa.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\49\4677ee71-76080e6b moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\49\4677ee71-76080e6b.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\49\50a75bf1-2336d886 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\49\50a75bf1-2336d886.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\49\526b1eb1-5c84611f moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\49\526b1eb1-5c84611f.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\49\5d4d73f1-5cd243ff moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\49\5d4d73f1-5cd243ff.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\49\5f0af0f1-45f1d266 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\49\5f0af0f1-45f1d266.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\49\7adda8f1-54b2856a moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\49\7adda8f1-54b2856a.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\5\2e0c1445-1504d91b moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\5\2e0c1445-1504d91b.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\5\3de2db85-77315f2d moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\5\3de2db85-77315f2d.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\5\3ef103c5-581d82de moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\5\3ef103c5-581d82de.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\5\568f9445-40750cff moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\5\568f9445-40750cff.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\5\643f5b05-15c412ce moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\5\643f5b05-15c412ce.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\5\7050df05-3350c41a moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\5\7050df05-3350c41a.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\5\7c063445-4e041eb7 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\5\7c063445-4e041eb7.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\5\d5b2785-417667fa moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\5\d5b2785-417667fa.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\50\1b8a9fb2-3ed22e2d moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\50\1b8a9fb2-3ed22e2d.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\50\28bd3632-20b9f09c moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\50\28bd3632-20b9f09c.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\50\394aaa32-687090ef moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\50\394aaa32-687090ef.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\50\563d9632-266ce614 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\50\563d9632-266ce614.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\50\5ea575f2-572afb64 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\50\5ea575f2-572afb64.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\50\6cbf18b2-4c36fd4b moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\50\6cbf18b2-4c36fd4b.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\50\7c3102b2-5d8c7c2e moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\50\7c3102b2-5d8c7c2e.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\51\215c9973-5bb2afa9 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\51\215c9973-5bb2afa9.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\51\306c7833-6e86584c moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\51\306c7833-6e86584c.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\51\4be7c073-79707e48 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\51\4be7c073-79707e48.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\51\586ea8b3-2e84ab87 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\51\586ea8b3-2e84ab87.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\51\6cce27f3-7290f7c7 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\51\6cce27f3-7290f7c7.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\51\6ef8d973-202fee0f moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\51\6ef8d973-202fee0f.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\51\7bbadf3-2286b5d8 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\51\7bbadf3-2286b5d8.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\52\1b12474-38d3f7bf moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\52\1b12474-38d3f7bf.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\52\3dad11f4-3a56548b moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\52\3dad11f4-3a56548b.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\52\4b3eaf4-1ac28619 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\52\4b3eaf4-1ac28619.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\52\540d5c74-22868747 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\52\540d5c74-22868747.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\52\61c193f4-3bcb016e moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\52\61c193f4-3bcb016e.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\52\7e773b74-34bf6755 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\52\7e773b74-34bf6755.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\53\20206ff5-5bb26221 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\53\20206ff5-5bb26221.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\53\2203a575-5d0a5438 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\53\2203a575-5d0a5438.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\53\28d059b5-4c948bcb moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\53\28d059b5-4c948bcb.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\53\344b7075-6b60f3cb moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\53\344b7075-6b60f3cb.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\53\3dbd5975-6a842455 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\53\3dbd5975-6a842455.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\53\59823075-5c396f92 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\53\59823075-5c396f92.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\53\76d30f75-17e8fcd5 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\53\76d30f75-17e8fcd5.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\53\80ed835-30f3b9c2 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\53\80ed835-30f3b9c2.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\53\9036c75-643b7ff7 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\53\9036c75-643b7ff7.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\53\9309ff5-15e2479f moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\53\9309ff5-15e2479f.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\54\1a209876-7f9736fc moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\54\1a209876-7f9736fc.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\54\20805276-7d92cff6 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\54\20805276-7d92cff6.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\54\72facf36-1e65188d moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\54\72facf36-1e65188d.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\54\794bc036-1e05372b moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\54\794bc036-1e05372b.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\54\b2e8d76-6d95e91b moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\54\b2e8d76-6d95e91b.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\54\1a209876-7f9736fc-n\jmc.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\54\1a209876-7f9736fc-n\msvcp71.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\54\1a209876-7f9736fc-n\msvcr71.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\55\21b7b7f7-31753969 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\55\21b7b7f7-31753969.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\55\28db50f7-323b87ce moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\55\28db50f7-323b87ce.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\55\50a64177-1584048e moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\55\50a64177-1584048e.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\56\21a7ab8-7e5349dd moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\56\21a7ab8-7e5349dd.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\56\33d91d38-29878d33 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\56\33d91d38-29878d33.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\56\352b6e38-38c7bce4 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\56\352b6e38-38c7bce4.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\56\37654338-16d9ed01 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\56\37654338-16d9ed01.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\56\49d4a238-4bf00e28 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\56\49d4a238-4bf00e28.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\56\5addf3b8-3a041ea8 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\56\5addf3b8-3a041ea8.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\56\5fb7c0b8-28ab941e moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\56\5fb7c0b8-28ab941e.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\56\66aecd38-40047364 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\56\66aecd38-40047364.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\56\caf15f8-1705b9b4 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\56\caf15f8-1705b9b4.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\56\f3935f8-75ba81a4 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\56\f3935f8-75ba81a4.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\57\2f5a3439-3c616767 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\57\2f5a3439-3c616767.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\57\30d7bbf9-3cab1e83 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\57\30d7bbf9-3cab1e83.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\57\44896c39-51545a5d moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\57\44896c39-51545a5d.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\57\4bd460f9-6af6a3c6 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\57\4bd460f9-6af6a3c6.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\57\54f06139-1742af38 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\57\54f06139-1742af38.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\57\5eea7839-31315e88 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\57\5eea7839-31315e88.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\57\7185ee39-4fd1fc7b moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\57\7185ee39-4fd1fc7b.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\57\7474d39-1aa9dbea moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\57\7474d39-1aa9dbea.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\57\74d71db9-42f56792 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\57\74d71db9-42f56792.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\57\79785d39-710bfadb moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\57\79785d39-710bfadb.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\58\2134a6fa-445701b5 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\58\2134a6fa-445701b5.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\58\297447fa-495de1d1 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\58\297447fa-495de1d1.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\58\2d6dfdfa-1b441e2d moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\58\2d6dfdfa-1b441e2d.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\58\2e85257a-64867bcb moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\58\2e85257a-64867bcb.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\58\35e161fa-479b7668 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\58\35e161fa-479b7668.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\58\3e1cfc7a-27411c08 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\58\3e1cfc7a-27411c08.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\58\4cca453a-7b53f20f moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\58\4cca453a-7b53f20f.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\58\5165d5fa-2ad165ea moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\58\5165d5fa-2ad165ea.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\58\6ba4523a-5fd0ab2a moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\58\6ba4523a-5fd0ab2a.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\58\75e6363a-7b24150c moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\58\75e6363a-7b24150c.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\58\c7af0ba-6adb313b moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\58\c7af0ba-6adb313b.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\58\f976c3a-4bcdf970 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\58\f976c3a-4bcdf970.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\59\1434077b-54534a53 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\59\1434077b-54534a53.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\59\1ea183bb-5faef19f moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\59\1ea183bb-5faef19f.idx moved successfully.
RKennedy
2010-03-07, 23:06
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\59\35d3e57b-3f1a4b85 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\59\35d3e57b-3f1a4b85.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\59\37311afb-31f9e3c8 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\59\37311afb-31f9e3c8.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\59\5db9a4fb-10c07e27 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\59\5db9a4fb-10c07e27.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\59\741526fb-3fec5ff6 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\59\741526fb-3fec5ff6.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\59\75320e3b-493b4123 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\59\75320e3b-493b4123.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\59\7835823b-596c720a moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\59\7835823b-596c720a.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\59\acb917b-2df3532b moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\59\acb917b-2df3532b.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\59\d78c27b-7413c76a moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\59\d78c27b-7413c76a.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\6\22d48146-2e542e36 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\6\22d48146-2e542e36.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\6\2c6fa786-583866e3 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\6\2c6fa786-583866e3.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\6\306e1546-26b6f524 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\6\306e1546-26b6f524.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\6\3c5a7886-487703ce moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\6\3c5a7886-487703ce.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\6\418fb06-2fd88f1e moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\6\418fb06-2fd88f1e.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\6\594b3306-67b741a1 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\6\594b3306-67b741a1.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\6\6fd85f06-56d94671 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\6\6fd85f06-56d94671.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\6\77cae046-49181239 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\6\77cae046-49181239.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\6\7bbe16c6-64e9c8d8 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\6\7bbe16c6-64e9c8d8.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\6\d3ab746-425b54b8 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\6\d3ab746-425b54b8.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\6\e765a06-7195d317 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\6\e765a06-7195d317.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\60\29910f3c-27f33728 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\60\29910f3c-27f33728.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\60\43ea9c7c-35285fd7 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\60\43ea9c7c-35285fd7.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\60\4be1747c-74985c6c moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\60\4be1747c-74985c6c.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\60\532e14bc-62c5c4c6 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\60\532e14bc-62c5c4c6.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\60\65b11b7c-70f763d1 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\60\65b11b7c-70f763d1.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\60\6ec654bc-10c6e005 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\60\6ec654bc-10c6e005.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\60\74eedbc-4bcc8cc9 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\60\74eedbc-4bcc8cc9.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\60\7c66eb7c-4af991b6 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\60\7c66eb7c-4af991b6.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\61\3048a73d-646a0721 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\61\3048a73d-646a0721.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\61\30e397d-4bbfa0f3 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\61\30e397d-4bbfa0f3.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\61\3bce873d-28111399 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\61\3bce873d-28111399.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\61\3fa62bfd-208a31f5 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\61\3fa62bfd-208a31f5.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\61\7101c3fd-70f79da8 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\61\7101c3fd-70f79da8.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\188d12be-1705223b moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\188d12be-1705223b.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\188d12be-30b2803f moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\188d12be-30b2803f.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\188d12be-6d98076d moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\188d12be-6d98076d.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\188d12be-781dce3f moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\188d12be-781dce3f.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\359f643e-3ccbe9fb moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\359f643e-3ccbe9fb.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\4ea5a2be-3342b23a moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\4ea5a2be-3342b23a.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\54ea55fe-15226ad0 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\54ea55fe-15226ad0.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\60fe903e-44b58cb6 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\60fe903e-44b58cb6.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-3f35ed3c moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-3f35ed3c.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\6bd546be-6d8799b9 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\6bd546be-6d8799b9.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\7bf9f1fe-361c9e12 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\7bf9f1fe-361c9e12.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-3f35ed3c-n\jogl.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-3f35ed3c-n\jogl_awt.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-3f35ed3c-n\jogl_cg.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\6bd546be-6d8799b9-n\decora-d3d.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\6bd546be-6d8799b9-n\decora-sse.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\6bd546be-6d8799b9-n\jmc.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\6bd546be-6d8799b9-n\msvcp71.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\62\6bd546be-6d8799b9-n\msvcr71.dll moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\63\2ac16f3f-3cb19af6 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\63\2ac16f3f-3cb19af6.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\63\6480d47f-1f0ed836 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\63\6480d47f-1f0ed836.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\63\659565bf-14cd1371 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\63\659565bf-14cd1371.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\63\659565bf-59eb336e moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\63\659565bf-59eb336e.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\63\7b3af37f-3e220cda moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\63\7b3af37f-3e220cda.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\63\7ef7f7f-66d33b32 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\63\7ef7f7f-66d33b32.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\63\7fb1937f-21421695 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\63\7fb1937f-21421695.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\63\c58393f-7b612368 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\63\c58393f-7b612368.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\7\178a3387-66c641b5 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\7\178a3387-66c641b5.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\7\45c507c7-6916e69c moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\7\45c507c7-6916e69c.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\7\4b3b72c7-14911f4e moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\7\4b3b72c7-14911f4e.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\7\6379b287-1e6b72c6 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\7\6379b287-1e6b72c6.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\8\13fdbd48-575833fe moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\8\13fdbd48-575833fe.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\8\16684748-565d99c8 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\8\16684748-565d99c8.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\8\317060c8-130b0421 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\8\317060c8-130b0421.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\8\4887a908-10b28276 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\8\4887a908-10b28276.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\8\5f6b7b48-23178a9f moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\8\5f6b7b48-23178a9f.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\8\623b1508-2369b9c2 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\8\623b1508-2369b9c2.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\8\728a62c8-420b1158 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\8\728a62c8-420b1158.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\9\2d2998c9-2bdae09b moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\9\2d2998c9-2bdae09b.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\9\320c8a09-745718f7 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\9\320c8a09-745718f7.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\9\71c8d509-40eafde5 moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\9\71c8d509-40eafde5.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\9\7efa4b89-7290dd7b moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\9\7efa4b89-7290dd7b.idx moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\host\16fe9ce7-4ae53591.hst moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\host\2e036d99-6e745ca9.hst moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\host\5039c66a-5611c9d4.hst moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\host\752fd2b7-25414ad0.hst moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\host\752fd2b7-29c9fb71.hst moved successfully.
C:\Documents and Settings\Bob\Application Data\Sun\Java\Deployment\cache\6.0\host\7e116e45-6672b48e.hst moved successfully.
C:\Documents and Settings\Bob\Local Settings\Temporary Internet Files\DSLDDSM.DCH\87NX57MK\46351094-02134741[1].jpg moved successfully.
C:\Documents and Settings\Bob\Local Settings\Temporary Internet Files\DSLDDSM.DCH\87NX57MK\Anon1246996822-TheWaitTheWallAndTheWinners379847_p2[1].jpg moved successfully.
C:\Documents and Settings\Bob\Local Settings\Temporary Internet Files\DSLDDSM.DCH\87NX57MK\Anon1247002661-SearsTowerUnveils103rdFloorGlassB959542_p2[1].jpg moved successfully.
C:\Documents and Settings\Bob\Local Settings\Temporary Internet Files\DSLDDSM.DCH\87NX57MK\default[1].jpg moved successfully.
C:\Documents and Settings\Bob\Local Settings\Temporary Internet Files\DSLDDSM.DCH\87NX57MK\fred-willard[1].jpg moved successfully.
C:\Documents and Settings\Bob\Local Settings\Temporary Internet Files\DSLDDSM.DCH\87NX57MK\sot.jackson.brooke.shields.cnn.88x49[1].jpg moved successfully.
C:\Documents and Settings\Bob\Local Settings\Temporary Internet Files\DSLDDSM.DCH\87NX57MK\starred_big_off[1].jpg moved successfully.
C:\Documents and Settings\Bob\Local Settings\Temporary Internet Files\DSLDDSM.DCH\87NX57MK\thread%20sucks[1].jpg moved successfully.
C:\Documents and Settings\Bob\Local Settings\Temporary Internet Files\DSLDDSM.DCH\87NX57MK\t_1111513252312[1].jpg moved successfully.
C:\WINDOWS\Downloaded Program Files\flash.inf moved successfully.
========== COMMANDS ==========
[EMPTYTEMP]
User: Administrator
User: All Users
User: Bob
->Temp folder emptied: 99134642 bytes
->Temporary Internet Files folder emptied: 218345984 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 12770563 bytes
->Flash cache emptied: 1913329 bytes
User: Bob.D6DP1S21
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: LocalService
->Temp folder emptied: 65536 bytes
->Temporary Internet Files folder emptied: 49219 bytes
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
User: Owner
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 58625 bytes
%systemroot%\System32 .tmp files removed: 64572626 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 379.00 mb
OTM by OldTimer - Version 3.1.10.0 log created on 03072010_144842
Files moved on Reboot...
Registry entries deleted on Reboot...
Congratulations your logs look clean :)
Let's see if I can help you keep it that way
First lets tidy up
Uninstall Combofix
This will clear your System Volume Information restore points and remove all the infected files that were quarantined
Click START then RUN
Now type Combofix /Uninstall in the runbox and click OK. Note the space between the X and the /U, it needs to be there.
http://neoshine.co.uk/mina/Katana/CFU.gif
Uninstall OTMoveIt (OTM.exe)
Open OTMoveIt Click Cleanup,
When a box pops up click YES.
You can also delete any logs we have produced and any other tools we have downloaded.
----------------------------------------------------------- -----------------------------------------------------------
The following is some info to help you stay safe and clean.
You may already have some of the following programs, but I include the full list for the benefit of all the other people who will be reading this thread in the future.
( Vista users must ensure that any programs are Vista compatible BEFORE installing )
Online Scanners
I would recommend a scan at one or more of the following sites at least once a month.
http://www.pandasecurity.com/activescan
http://www.kaspersky.com/kos/eng/partner/71706/kavwebscan.html
!!! Make sure that all your programs are updated !!!
Secunia Software Inspector does all the work for you, .... see HERE (http://secunia.com/software_inspector/) for details
AntiSpyware
AntiSpyware is not the same thing as Antivirus.
Different AntiSpyware programs detect different things, so in this case it is recommended that you have more than one.
You should only have one running all the time, the other/s should be used "on demand" on a regular basis.
Most of the programs in this list have a free (for Home Users ) and paid versions,
it is worth paying for one and having "realtime" protection, unless you intend to do a manual scan often.
Spybot - Search & Destroy (http://www.safer-networking.org/) <<< A must have program It includes host protection and registry protection A hosts file is a bit like a phone book, it points to the actual numeric address (i.e. the IP address) from the human friendly name of a website. This feature can be used to block malicious websites
MalwareBytes Anti-malware (http://www.malwarebytes.org/mbam.php) <<< A New and effective program
a-squared Free (http://www.emsisoft.com/en/software/free/) <<< A good "realtime" or "on demand" scanner
superantispyware (http://www.superantispyware.com/) <<< A good "realtime" or "on demand" scanner
Prevention
These programs don't detect malware, they help stop it getting on your machine in the first place.
Each does a different job, so you can have more than one
Winpatrol (http://www.winpatrol.com) An excellent startup manager and then some !! Notifies you if programs are added to startup Allows delayed startup A must have addition
SpywareBlaster 4.0 (http://www.javacoolsoftware.com/spywareblaster.html) SpywareBlaster sets killbits in the registry to prevent known malicious activex controls from installing themselves on your computer.
SpywareGuard 2.2 (http://www.javacoolsoftware.com/spywareguard.html) SpywareGuard provides real-time protection against spyware. Not required if you have other "realtime" antispyware or Winpatrol
ZonedOut (http://www.funkytoad.com/index.php?option=com_content&view=article&id=15&Itemid=33) Formerly known as IE-SPYAD, adds a long list of sites and domains associated with known advertisers and marketers to the Restricted sites zone of Internet Explorer.
MVPS HOSTS (http://www.mvps.org/winhelp2002/hosts.zip) This little program packs a powerful punch as it blocks ads, banners, 3rd party Cookies, 3rd party page counters, web bugs, and many hijackers. For information on how to download and install, please read this tutorial (http://www.mvps.org/winhelp2002/hosts.htm) by WinHelp2002. Not required if you are using other host file protections
Internet Browsers
Microsoft has worked hard to make IE.7 a more secure browser, unfortunately whilst it is still the leading browser of choice it will always be under attack from the bad guys.
Using a different web browser can help stop malware getting on your machine.
Make your Internet Explorer more secure - This can be done by following these simple instructions:
From within Internet Explorer click on the Tools menu and then click on Options.
Click once on the Security tab
Click once on the Internet icon so it becomes highlighted.
Click once on the Custom Level button.
Change the Download signed ActiveX controls to Prompt
Change the Download unsigned ActiveX controls to Disable
Change the Initialise and script ActiveX controls not marked as safe to Disable
Change the Installation of desktop items to Prompt
Change the Launching programs and files in an IFRAME to Prompt
Change the Navigate sub-frames across different domains to Prompt
When all these settings have been made, click on the OK button.
If it prompts you as to whether or not you want to save the settings, press the Yes button.
Next press the Apply button and then the OK to exit the Internet Properties page.
If you are still using IE6 then either update, or get one of the following.
FireFox (http://www.mozilla.com/en-US/firefox/) With many addons available that make customization easy this is a very popular choice NoScript and AdBlockPlus addons are essential
Opera (http://www.opera.com/) Another popular alternative
Netscape (http://browser.netscape.com/addons) Another popular alternative Also has Addons available
Cleaning Temporary Internet Files and Tracking Cookies
Temporary Internet Files are mainly the files that are downloaded when you open a web page.
Unfortunately, if the site you visit is of a dubious nature or has been hacked, they can also be an entry point for malware.
It is a good idea to empty the Temporary Internet Files folder on a regular basis.
Tracking Cookies are files that websites use to monitor which sites you visit and how often.
A lot of Antispyware scanners pick up these tracking cookies and flag them as unwanted.
CAUTION :- If you delete all your cookies you will lose any autologin information for sites that you visit, and will need your passwords
Both of these can be cleaned manually, but a quicker option is to use a program
ATF Cleaner (http://www.atribune.org/index.php?option=com_content&task=view&id=25&Itemid=25) Free and very simple to use
CCleaner (http://www.ccleaner.com/) Free and very flexible, you can chose which cookies to keep
Also PLEASE read this article.....So How Did I Get Infected In The First Place (http://forum.malwareremoval.com/viewtopic.php?t=4959)
The last and most important thing I can tell you is UPDATE.
If you don't update your security programs (Antivirus, Antispyware even Windows) then you are at risk.
Malware changes on a day to day basis. You should update every week at the very least.
If you follow this advice then (with a bit of luck) you will never have to hear from me again :D
If you could post back one more time to let me know everything is OK, then I can have this thread archived.
Happy surfing K'
RKennedy
2010-03-09, 02:28
Everything seems good. Thank you for the thorough cleaning. Much appreciated.