Help please. Here is my log.

bertdigity · Jan 19, 2008

If someone has time could you please check this log and maybe advise me on whats going on. Plus i'm having problems w/ my browser. I cannot open pages with internet explorer and firefox. I'm on safari and it works fine. thanks to who ever can help.

Logfile of HijackThis v1.99.1
Scan saved at 11:16:36 AM, on 1/19/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Safari\Safari.exe
C:\Documents and Settings\Connie De Leon\Desktop\Unused Icons\HijackThis.exe

O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
O4 - HKLM\..\Run: [Reminder] C:\Windows\CREATOR\Remind_XP.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [Winupdate Engine] C:\WINDOWS\system32\wupeng.exe
O4 - HKLM\..\Run: [lsass] C:\WINDOWS\lsass.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q106&bd=presario&pf=laptop
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photos.walmart.com/WalmartActivia.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Bonjour Service - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Norton Internet Security\comHost.exe
O23 - Service: GoogleDesktopManager - Unknown owner - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

bertdigity · Jan 19, 2008

correction

sorry sorry i usesd an old version of highjack. here is the current one:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:49:28 AM, on 1/19/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Safari\Safari.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
O4 - HKLM\..\Run: [Reminder] C:\Windows\CREATOR\Remind_XP.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [Winupdate Engine] C:\WINDOWS\system32\wupeng.exe
O4 - HKLM\..\Run: [lsass] C:\WINDOWS\lsass.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q106&bd=presario&pf=laptop
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photos.walmart.com/WalmartActivia.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Bonjour Service - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Norton Internet Security\comHost.exe
O23 - Service: GoogleDesktopManager - Unknown owner - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

--
End of file - 6648 bytes

bertdigity · Jan 19, 2008

Here is my log. Please Help

i really am new to this. i've nver asked for help before. so here is my log. pleae let me know what i need to do. thanks:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:05:26 PM, on 1/19/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\ctfmon .exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Safari\Safari.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
O4 - HKLM\..\Run: [Reminder] C:\Windows\CREATOR\Remind_XP.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [Winupdate Engine] C:\WINDOWS\system32\wupeng.exe
O4 - HKLM\..\Run: [lsass] C:\WINDOWS\lsass.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q106&bd=presario&pf=laptop
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photos.walmart.com/WalmartActivia.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Bonjour Service - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Norton Internet Security\comHost.exe
O23 - Service: GoogleDesktopManager - Unknown owner - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

--
End of file - 7195 bytes

Shaba · Jan 21, 2008

Hi bertdigity and welcome to Safer Networking Forums

Rename HijackThis.exe to bertdigity.exe and post back a fresh HijackThis log, please.

bertdigity · Jan 25, 2008

I really need some help please. Just point me in the right direction if anything

i am so new to this removal thing. My internet exlorer and firefox doesn't open webpages so i have safari and its the only thing thats working for me. I can't seem the download spybot and i can't use the online scanner cuz it only works on internet explorer. so here is my hijack log cuz its all can really do. so please can anyone help me or at least kinda show me which was to go. thanks

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:43:54 PM, on 1/24/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Safari\Safari.exe
C:\Program Files\Safari\Safari.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
O4 - HKLM\..\Run: [Reminder] C:\Windows\CREATOR\Remind_XP.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [Winupdate Engine] C:\WINDOWS\system32\wupeng.exe
O4 - HKLM\..\Run: [lsass] C:\WINDOWS\lsass.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q106&bd=presario&pf=laptop
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photos.walmart.com/WalmartActivia.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Bonjour Service - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Norton Internet Security\comHost.exe
O23 - Service: GoogleDesktopManager - Unknown owner - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

--
End of file - 7133 bytes

tashi · Jan 25, 2008

Hello bertdigity.

I merged three topics, please don't start any more.

:

Shaba responded to you earlier in this thread, 2008-01-21.

Cheers.

Shaba · Jan 25, 2008

Hi bertdigity

Just follow my previous instructions, please.

If there is something you don't understand, then just ask

bertdigity · Jan 26, 2008

sorry here it is i changed hijackthis.exe to bertdigity.exe:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:51:13 PM, on 1/25/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\ctfmon .exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Safari\Safari.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
O4 - HKLM\..\Run: [Reminder] C:\Windows\CREATOR\Remind_XP.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [Winupdate Engine] C:\WINDOWS\system32\wupeng.exe
O4 - HKLM\..\Run: [lsass] C:\WINDOWS\lsass.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q106&bd=presario&pf=laptop
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photos.walmart.com/WalmartActivia.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Bonjour Service - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Norton Internet Security\comHost.exe
O23 - Service: GoogleDesktopManager - Unknown owner - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

--
End of file - 6779 bytes

Shaba · Jan 26, 2008

Hi

I think that you renamed shortcut and not the file:

Rename HijackThis.exe to bertdigity.exe by doing the following;

Navigate here using Windows Explorer (windows button + E) or My Computer -> Local Disk C: -> C:\Program Files\Trend Micro\HijackThis
Right-click on the HijackThis.exe
Choose from the pull-down menu; "Rename"
And now Rename HijackThis.exe to bertdigity.exe
When you've renamed HijackThis, open HijackThis again.
Take a fresh HijackThis log (click Do a system scan and save a log file)
Post the fresh HijackThis log here.

bertdigity · Jan 26, 2008

sorry yeah i think i did do that.

here it is now:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:50:00 AM, on 1/26/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\ctfmon .exe
C:\Program Files\Safari\Safari.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Symantec\LiveUpdate\AUpdate.exe
C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
C:\Program Files\Trend Micro\HijackThis\bertdigity.exe

O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {191E1C13-BE10-4CCE-A49B-E1B1DBD6FAF0} - C:\WINDOWS\system32\vtutt.dll
O2 - BHO: (no name) - {2E9D4C81-9F27-4c14-B804-7B0F6BC88A4F} - C:\Program Files\Outerinfo\Outerinfo.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: CNavExtBho Class - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: (no name) - {FA16FE06-B462-470E-9653-79C54B1871FF} - C:\WINDOWS\system32\qomliff.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
O4 - HKLM\..\Run: [Reminder] C:\Windows\CREATOR\Remind_XP.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [Winupdate Engine] C:\WINDOWS\system32\wupeng.exe
O4 - HKLM\..\Run: [lsass] C:\WINDOWS\lsass.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q106&bd=presario&pf=laptop
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photos.walmart.com/WalmartActivia.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O20 - Winlogon Notify: qomliff - C:\WINDOWS\SYSTEM32\qomliff.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Bonjour Service - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Norton Internet Security\comHost.exe
O23 - Service: GoogleDesktopManager - Unknown owner - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

--
End of file - 8301 bytes

Shaba · Jan 26, 2008

Hi

1. Download combofix from any of these links and save it to Desktop:
Link 1
Link 2
Link 3

**Note: It is important that it is saved directly to your desktop**

2. Double click combofix.exe & follow the prompts.
3. When finished, it shall produce a log for you (C:\ComboFix.txt). Post that log in your next reply

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall

Combofix should never take more that 20 minutes including the reboot if malware is detected.
If it does, open Task Manager then Processes tab (press ctrl, alt and del at the same time) and end any processes of findstr, find, sed or swreg, then combofix should continue.
If that happened we want to know, and also what process you had to end.

If you have problems with Combofix usage, see here

Post:

- a fresh HijackThis log
- combofix report

bertdigity · Jan 27, 2008

here is the hijack log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:36:12 PM, on 1/26/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\ctfmon .exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Safari\Safari.exe
C:\Program Files\Trend Micro\HijackThis\bertdigity.exe

F3 - REG:win.ini: load=C:\WINDOWS\system32\vtutt.exe
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {2E9D4C81-9F27-4c14-B804-7B0F6BC88A4F} - C:\Program Files\Outerinfo\Outerinfo.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: CNavExtBho Class - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: (no name) - {FBD17051-1E72-4F66-A7D8-B4A3BBAFD899} - C:\WINDOWS\system32\vtutt.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
O4 - HKLM\..\Run: [Reminder] C:\Windows\CREATOR\Remind_XP.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [Winupdate Engine] C:\WINDOWS\system32\wupeng.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q106&bd=presario&pf=laptop
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photos.walmart.com/WalmartActivia.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Bonjour Service - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Norton Internet Security\comHost.exe
O23 - Service: GoogleDesktopManager - Unknown owner - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

--
End of file - 7965 bytes

bertdigity · Jan 27, 2008

here is the combofix is really long

ComboFix 08-01-23.1C - Connie De Leon 2008-01-26 21:03:48.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.37 [GMT -8:00]
Running from: C:\Documents and Settings\Connie De Leon\Desktop\ComboFix.exe
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Connie De Leon\My Documents\pos2AE.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2AF.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2B0.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2B1.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2B2.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2B3.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2B4.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2B5.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2B6.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2B7.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2B8.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2B9.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2BA.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2BB.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2BC.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2BD.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2BE.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2BF.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2C0.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2C1.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2C2.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2C3.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2C4.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2C5.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2C6.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2C7.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2C8.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2C9.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2CA.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2CB.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2CC.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2CD.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2CE.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2CF.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2D0.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2D1.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2D2.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2D3.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2D4.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2D5.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2D6.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2D7.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2D8.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2D9.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2DA.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2DB.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2DC.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2DD.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2DE.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2DF.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2E0.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2E1.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2E2.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2E3.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2E4.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2E5.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2E6.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2E7.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2E8.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2E9.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2EA.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2EB.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2EC.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2ED.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2EE.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2EF.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2F0.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2F1.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2F2.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2F3.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2F4.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2F5.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2F6.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2F7.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2F8.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2F9.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2FA.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2FB.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2FC.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2FD.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2FE.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos2FF.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos300.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos301.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos302.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos303.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos304.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos305.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos306.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos307.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos308.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos309.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos30A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos30B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos30C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos30D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos30E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos30F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos310.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos311.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos312.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos313.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos314.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos315.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos316.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos317.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos318.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos319.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos31A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos31B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos31C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos31D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos31E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos31F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos320.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos321.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos322.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos323.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos324.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos325.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos326.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos327.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos328.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos329.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos32A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos32B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos32C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos32D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos32E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos32F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos330.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos331.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos332.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos333.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos334.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos335.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos336.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos337.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos338.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos339.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos33A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos33B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos33C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos33D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos33E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos33F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos340.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos341.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos342.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos343.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos344.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos345.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos346.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos347.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos348.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos349.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos34A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos34B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos34C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos34D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos34E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos34F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos350.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos351.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos352.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos353.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos354.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos355.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos356.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos357.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos358.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos359.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos35A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos35B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos35C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos35D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos35E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos35F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos360.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos361.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos362.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos363.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos364.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos365.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos366.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos367.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos368.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos369.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos36A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos36B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos36C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos36D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos36E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos36F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos370.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos371.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos372.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos373.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos374.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos375.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos376.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos377.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos378.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos379.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos37A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos37B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos37C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos37D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos37E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos37F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos380.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos381.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos382.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos383.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos384.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos385.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos386.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos387.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos388.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos389.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos38A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos38B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos38C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos38D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos38E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos38F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos390.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos391.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos392.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos393.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos394.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos395.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos396.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos397.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos398.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos399.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos39A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos39B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos39C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos39D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos39E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos39F.tmp

bertdigity · Jan 27, 2008

C:\Documents and Settings\Connie De Leon\My Documents\pos3A0.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3A1.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3A2.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3A3.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3A4.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3A5.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3A6.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3A7.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3A8.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3A9.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3AA.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3AB.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3AC.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3AD.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3AE.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3AF.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3B0.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3B1.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3B2.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3B3.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3B4.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3B5.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3B6.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3B7.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3B8.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3B9.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3BA.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3BB.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3BC.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3BD.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3BE.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3BF.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3C0.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3C1.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3C2.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3C3.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3C4.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3C5.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3C6.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3C7.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3C8.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3C9.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3CA.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3CB.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3CC.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3CD.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3CE.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3CF.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3D0.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3D1.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3D2.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3D3.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3D4.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3D5.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3D6.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3D7.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3D8.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3D9.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3DA.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3DB.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3DC.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3DD.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3DE.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3DF.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3E0.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3E1.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3E2.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3E3.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3E4.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3E5.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3E6.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3E7.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3E8.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3E9.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3EA.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3EB.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3EC.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3ED.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3EE.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3EF.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3F0.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3F1.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3F2.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3F3.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3F4.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3F5.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3F6.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3F7.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3F8.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3F9.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3FA.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3FB.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3FC.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3FD.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3FE.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos3FF.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos400.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos401.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos402.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos403.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos404.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos405.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos406.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos407.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos408.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos409.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos40A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos40B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos40C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos40D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos40E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos40F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos410.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos411.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos412.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos413.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos414.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos415.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos416.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos417.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos418.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos419.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos41A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos41B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos41C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos41D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos41E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos41F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos420.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos421.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos422.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos423.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos424.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos425.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos426.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos427.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos428.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos429.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos42A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos42B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos42C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos42D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos42E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos42F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos430.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos431.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos432.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos433.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos434.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos435.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos436.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos437.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos438.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos439.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos43A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos43B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos43C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos43D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos43E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos43F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos440.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos441.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos442.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos443.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos444.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos445.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos446.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos447.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos448.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos449.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos44A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos44B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos44C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos44D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos44E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos44F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos450.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos451.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos452.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos453.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos454.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos455.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos456.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos457.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos458.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos459.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos45A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos45B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos45C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos45D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos45E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos45F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos460.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos461.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos462.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos463.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos464.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos465.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos466.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos467.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos468.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos469.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos46A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos46B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos46C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos46D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos46E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos46F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos470.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos471.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos472.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos473.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos474.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos475.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos476.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos477.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos478.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos479.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos47A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos47B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos47C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos47D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos47E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos47F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos480.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos481.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos482.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos483.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos484.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos485.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos486.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos487.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos488.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos489.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos48A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos48B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos48C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos48D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos48E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos48F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos490.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos491.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos492.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos493.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos494.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos495.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos496.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos497.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos498.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos499.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos49A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos49B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos49C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos49D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos49E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos49F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4A0.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4A1.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4A2.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4A3.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4A4.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4A5.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4A6.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4A7.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4A8.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4A9.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4AA.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4AB.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4AC.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4AD.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4AE.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4AF.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4B0.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4B1.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4B2.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4B3.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4B4.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4B5.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4B6.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4B7.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4B8.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4B9.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4BA.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4BB.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4BC.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4BD.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4BE.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4BF.tmp

bertdigity · Jan 27, 2008

C:\Documents and Settings\Connie De Leon\My Documents\pos4C0.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4C1.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4C2.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4C3.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4C4.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4C5.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4C6.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4C7.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4C8.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4C9.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4CA.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4CB.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4CC.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4CD.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4CE.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4CF.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4D0.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4D1.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4D2.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4D3.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4D4.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4D5.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4D6.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4D7.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4D8.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4D9.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4DA.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4DB.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4DC.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4DD.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4DE.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4DF.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4E0.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4E1.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4E2.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4E3.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4E4.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4E5.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4E6.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4E7.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4E8.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4E9.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4EA.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4EB.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4EC.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4ED.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4EE.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4EF.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4F0.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4F1.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4F2.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4F3.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4F4.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4F5.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4F6.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4F7.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4F8.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4F9.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4FA.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4FB.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4FC.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4FD.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4FE.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos4FF.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos500.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos501.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos502.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos503.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos504.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos505.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos506.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos507.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos508.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos509.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos50A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos50B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos50C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos50D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos50E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos50F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos510.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos511.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos512.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos513.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos514.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos515.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos516.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos517.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos518.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos519.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos51A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos51B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos51C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos51D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos51E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos51F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos520.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos521.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos522.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos523.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos524.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos525.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos526.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos527.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos528.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos529.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos52A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos52B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos52C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos52D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos52E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos52F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos530.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos531.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos532.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos533.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos534.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos535.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos536.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos537.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos538.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos539.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos53A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos53B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos53C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos53D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos53E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos53F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos540.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos541.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos542.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos543.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos544.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos545.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos546.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos547.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos548.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos549.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos54A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos54B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos54C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos54D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos54E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos54F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos550.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos551.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos552.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos553.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos554.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos555.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos556.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos557.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos558.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos559.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos55A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos55B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos55C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos55D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos55E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos55F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos560.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos561.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos562.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos563.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos564.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos565.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos566.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos567.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos568.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos569.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos56A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos56B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos56C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos56D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos56E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos56F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos570.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos571.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos572.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos573.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos574.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos575.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos576.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos577.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos578.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos579.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos57A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos57B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos57C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos57D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos57E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos57F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos580.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos581.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos582.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos583.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos584.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos585.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos586.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos587.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos588.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos589.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos58A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos58B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos58C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos58D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos58E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos58F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos590.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos591.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos592.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos593.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos594.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos595.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos596.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos597.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos598.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos599.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos59A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos59B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos59C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos59D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos59E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos59F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5A0.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5A1.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5A2.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5A3.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5A4.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5A5.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5A6.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5A7.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5A8.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5A9.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5AA.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5AB.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5AC.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5AD.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5AE.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5AF.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5B0.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5B1.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5B2.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5B3.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5B4.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5B5.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5B6.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5B7.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5B8.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5B9.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5BA.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5BB.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5BC.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5BD.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5BE.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5BF.tmp

bertdigity · Jan 27, 2008

C:\Documents and Settings\Connie De Leon\My Documents\pos5C0.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5C1.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5C2.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5C3.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5C4.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5C5.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5C6.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5C7.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5C8.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5C9.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5CA.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5CB.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5CC.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5CD.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5CE.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5CF.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5D0.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5D1.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5D2.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5D3.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5D4.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5D5.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5D6.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5D7.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5D8.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5D9.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5DA.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5DB.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5DC.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5DD.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5DE.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5DF.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5E0.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5E1.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5E2.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5E3.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5E4.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5E5.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5E6.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5E7.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5E8.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5E9.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5EA.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5EB.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5EC.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5ED.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5EE.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5EF.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5F0.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5F1.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5F2.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5F3.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5F4.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5F5.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5F6.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5F7.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5F8.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5F9.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5FA.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5FB.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5FC.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5FD.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5FE.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos5FF.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos600.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos601.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos602.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos603.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos604.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos605.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos606.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos607.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos608.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos609.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos60A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos60B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos60C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos60D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos60E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos60F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos610.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos611.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos612.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos613.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos614.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos615.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos616.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos617.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos618.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos619.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos61A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos61B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos61C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos61D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos61E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos61F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos620.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos621.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos622.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos623.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos624.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos625.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos626.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos627.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos628.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos629.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos62A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos62B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos62C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos62D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos62E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos62F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos630.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos631.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos632.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos633.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos634.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos635.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos636.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos637.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos638.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos639.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos63A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos63B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos63C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos63D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos63E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos63F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos640.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos641.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos642.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos643.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos644.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos645.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos646.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos647.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos648.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos649.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos64A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos64B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos64C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos64D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos64E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos64F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos650.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos651.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos652.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos653.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos654.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos655.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos656.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos657.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos658.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos659.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos65A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos65B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos65C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos65D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos65E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos65F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos660.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos661.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos662.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos663.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos664.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos665.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos666.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos667.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos668.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos669.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos66A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos66B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos66C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos66D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos66E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos66F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos670.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos671.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos672.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos673.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos674.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos675.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos676.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos677.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos678.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos679.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos67A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos67B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos67C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos67D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos67E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos67F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos680.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos681.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos682.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos683.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos684.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos685.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos686.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos687.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos688.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos689.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos68A.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos68B.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos68C.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos68D.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos68E.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos68F.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos690.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos691.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos692.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos693.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos694.tmp
C:\Documents and Settings\Connie De Leon\My Documents\pos695.tmp

bertdigity · Jan 27, 2008

C:\pos10.tmp
C:\pos100.tmp
C:\pos101.tmp
C:\pos102.tmp
C:\pos103.tmp
C:\pos104.tmp
C:\pos105.tmp
C:\pos106.tmp
C:\pos107.tmp
C:\pos108.tmp
C:\pos109.tmp
C:\pos10A.tmp
C:\pos10B.tmp
C:\pos10C.tmp
C:\pos10D.tmp
C:\pos10E.tmp
C:\pos10F.tmp
C:\pos11.tmp
C:\pos110.tmp
C:\pos111.tmp
C:\pos112.tmp
C:\pos113.tmp
C:\pos114.tmp
C:\pos115.tmp
C:\pos116.tmp
C:\pos117.tmp
C:\pos118.tmp
C:\pos119.tmp
C:\pos11A.tmp
C:\pos11B.tmp
C:\pos11C.tmp
C:\pos11D.tmp
C:\pos11E.tmp
C:\pos11F.tmp
C:\pos12.tmp
C:\pos120.tmp
C:\pos121.tmp
C:\pos122.tmp
C:\pos123.tmp
C:\pos124.tmp
C:\pos125.tmp
C:\pos126.tmp
C:\pos127.tmp
C:\pos128.tmp
C:\pos129.tmp
C:\pos12A.tmp
C:\pos12B.tmp
C:\pos12C.tmp
C:\pos12D.tmp
C:\pos12E.tmp
C:\pos12F.tmp
C:\pos13.tmp
C:\pos130.tmp
C:\pos131.tmp
C:\pos132.tmp
C:\pos133.tmp
C:\pos134.tmp
C:\pos135.tmp
C:\pos136.tmp
C:\pos137.tmp
C:\pos138.tmp
C:\pos139.tmp
C:\pos13A.tmp
C:\pos13B.tmp
C:\pos13C.tmp
C:\pos13D.tmp
C:\pos13E.tmp
C:\pos13F.tmp
C:\pos14.tmp
C:\pos140.tmp
C:\pos141.tmp
C:\pos142.tmp
C:\pos143.tmp
C:\pos144.tmp
C:\pos145.tmp
C:\pos146.tmp
C:\pos147.tmp
C:\pos148.tmp
C:\pos149.tmp
C:\pos14A.tmp
C:\pos14B.tmp
C:\pos14C.tmp
C:\pos14D.tmp
C:\pos14E.tmp
C:\pos14F.tmp
C:\pos15.tmp
C:\pos150.tmp
C:\pos151.tmp
C:\pos152.tmp
C:\pos153.tmp
C:\pos154.tmp
C:\pos155.tmp
C:\pos156.tmp
C:\pos157.tmp
C:\pos158.tmp
C:\pos159.tmp
C:\pos15A.tmp
C:\pos15B.tmp
C:\pos15C.tmp
C:\pos15D.tmp
C:\pos15E.tmp
C:\pos15F.tmp
C:\pos16.tmp
C:\pos160.tmp
C:\pos161.tmp
C:\pos162.tmp
C:\pos163.tmp
C:\pos164.tmp
C:\pos165.tmp
C:\pos166.tmp
C:\pos167.tmp
C:\pos168.tmp
C:\pos169.tmp
C:\pos16A.tmp
C:\pos16B.tmp
C:\pos16C.tmp
C:\pos16D.tmp
C:\pos16E.tmp
C:\pos16F.tmp
C:\pos17.tmp
C:\pos170.tmp
C:\pos171.tmp
C:\pos172.tmp
C:\pos173.tmp
C:\pos174.tmp
C:\pos175.tmp
C:\pos176.tmp
C:\pos177.tmp
C:\pos178.tmp
C:\pos179.tmp
C:\pos17A.tmp
C:\pos17B.tmp
C:\pos17C.tmp
C:\pos17D.tmp
C:\pos17E.tmp
C:\pos17F.tmp
C:\pos18.tmp
C:\pos180.tmp
C:\pos181.tmp
C:\pos182.tmp
C:\pos183.tmp
C:\pos184.tmp
C:\pos185.tmp
C:\pos186.tmp
C:\pos187.tmp
C:\pos188.tmp
C:\pos189.tmp
C:\pos18A.tmp
C:\pos18B.tmp
C:\pos18C.tmp
C:\pos18D.tmp
C:\pos18E.tmp
C:\pos18F.tmp
C:\pos19.tmp
C:\pos190.tmp
C:\pos191.tmp
C:\pos192.tmp
C:\pos193.tmp
C:\pos194.tmp
C:\pos195.tmp
C:\pos196.tmp
C:\pos197.tmp
C:\pos198.tmp
C:\pos199.tmp
C:\pos19A.tmp
C:\pos19B.tmp
C:\pos19C.tmp
C:\pos19D.tmp
C:\pos19E.tmp
C:\pos19F.tmp
C:\pos20.tmp
C:\pos200.tmp
C:\pos201.tmp
C:\pos202.tmp
C:\pos203.tmp
C:\pos204.tmp
C:\pos205.tmp
C:\pos206.tmp
C:\pos207.tmp
C:\pos208.tmp
C:\pos209.tmp
C:\pos20A.tmp
C:\pos20B.tmp
C:\pos20C.tmp
C:\pos20D.tmp
C:\pos20E.tmp
C:\pos20F.tmp
C:\pos210.tmp
C:\pos211.tmp
C:\pos212.tmp
C:\pos213.tmp
C:\pos214.tmp
C:\pos215.tmp
C:\pos216.tmp
C:\pos217.tmp
C:\pos218.tmp
C:\pos219.tmp
C:\pos21A.tmp
C:\pos21B.tmp
C:\pos21C.tmp
C:\pos21D.tmp
C:\pos21E.tmp
C:\pos21F.tmp
C:\pos22.tmp
C:\pos220.tmp
C:\pos221.tmp
C:\pos222.tmp
C:\pos223.tmp
C:\pos224.tmp
C:\pos225.tmp
C:\pos226.tmp
C:\pos227.tmp
C:\pos228.tmp
C:\pos229.tmp
C:\pos22A.tmp
C:\pos22B.tmp
C:\pos22C.tmp
C:\pos22D.tmp
C:\pos22E.tmp
C:\pos22F.tmp
C:\pos23.tmp
C:\pos230.tmp
C:\pos231.tmp
C:\pos232.tmp
C:\pos233.tmp
C:\pos234.tmp
C:\pos235.tmp
C:\pos236.tmp
C:\pos237.tmp
C:\pos238.tmp
C:\pos239.tmp
C:\pos23A.tmp
C:\pos23B.tmp
C:\pos23C.tmp
C:\pos23D.tmp
C:\pos23E.tmp
C:\pos23F.tmp
C:\pos24.tmp
C:\pos240.tmp
C:\pos241.tmp
C:\pos242.tmp
C:\pos243.tmp
C:\pos244.tmp
C:\pos245.tmp
C:\pos246.tmp
C:\pos247.tmp
C:\pos248.tmp
C:\pos249.tmp
C:\pos24A.tmp
C:\pos24B.tmp
C:\pos24C.tmp
C:\pos24D.tmp
C:\pos24E.tmp
C:\pos24F.tmp
C:\pos25.tmp
C:\pos250.tmp
C:\pos251.tmp
C:\pos252.tmp
C:\pos253.tmp
C:\pos254.tmp
C:\pos255.tmp
C:\pos256.tmp
C:\pos257.tmp
C:\pos258.tmp
C:\pos259.tmp
C:\pos25A.tmp
C:\pos25B.tmp
C:\pos25C.tmp
C:\pos25D.tmp
C:\pos25E.tmp
C:\pos25F.tmp
C:\pos26.tmp
C:\pos260.tmp
C:\pos261.tmp
C:\pos262.tmp
C:\pos263.tmp
C:\pos264.tmp
C:\pos265.tmp
C:\pos266.tmp
C:\pos267.tmp
C:\pos268.tmp
C:\pos269.tmp
C:\pos26A.tmp
C:\pos26B.tmp
C:\pos26C.tmp
C:\pos26D.tmp
C:\pos26E.tmp
C:\pos26F.tmp
C:\pos27.tmp
C:\pos270.tmp
C:\pos271.tmp
C:\pos272.tmp
C:\pos273.tmp
C:\pos274.tmp
C:\pos275.tmp
C:\pos276.tmp
C:\pos277.tmp
C:\pos278.tmp
C:\pos279.tmp
C:\pos27A.tmp
C:\pos27B.tmp
C:\pos27C.tmp
C:\pos27D.tmp
C:\pos27E.tmp
C:\pos27F.tmp
C:\pos28.tmp
C:\pos280.tmp
C:\pos281.tmp
C:\pos282.tmp
C:\pos283.tmp
C:\pos284.tmp
C:\pos285.tmp
C:\pos286.tmp
C:\pos287.tmp
C:\pos288.tmp
C:\pos289.tmp
C:\pos28A.tmp
C:\pos28B.tmp
C:\pos28C.tmp
C:\pos28D.tmp
C:\pos28E.tmp
C:\pos28F.tmp
C:\pos29.tmp
C:\pos290.tmp
C:\pos291.tmp
C:\pos292.tmp
C:\pos293.tmp
C:\pos294.tmp
C:\pos295.tmp
C:\pos296.tmp
C:\pos297.tmp
C:\pos298.tmp
C:\pos299.tmp
C:\pos29A.tmp
C:\pos29B.tmp
C:\pos29C.tmp
C:\pos29D.tmp
C:\pos29E.tmp
C:\pos29F.tmp
C:\pos2DC.tmp
C:\pos2DD.tmp
C:\pos2DF.tmp
C:\pos2E.tmp
C:\pos2E0.tmp
C:\pos2E1.tmp
C:\pos2E2.tmp
C:\pos2E3.tmp
C:\pos2E4.tmp
C:\pos2E7.tmp
C:\pos2E8.tmp
C:\pos2E9.tmp
C:\pos2EA.tmp
C:\pos2EB.tmp
C:\pos2EC.tmp
C:\pos2ED.tmp
C:\pos2EE.tmp
C:\pos2EF.tmp
C:\pos2F.tmp
C:\pos2F0.tmp
C:\pos2F1.tmp
C:\pos2F2.tmp
C:\pos2F3.tmp
C:\pos2F4.tmp
C:\pos2F5.tmp
C:\pos2F6.tmp
C:\pos2F7.tmp
C:\pos2F8.tmp
C:\pos2F9.tmp
C:\pos2FA.tmp
C:\pos2FB.tmp
C:\pos2FC.tmp
C:\pos2FE.tmp
C:\pos2FF.tmp
C:\pos3.tmp
C:\pos30.tmp
C:\pos300.tmp
C:\pos301.tmp
C:\pos302.tmp
C:\pos303.tmp
C:\pos304.tmp
C:\pos305.tmp
C:\pos306.tmp
C:\pos307.tmp
C:\pos308.tmp
C:\pos30A.tmp
C:\pos30B.tmp
C:\pos30D.tmp
C:\pos30E.tmp
C:\pos30F.tmp
C:\pos31.tmp
C:\pos310.tmp
C:\pos311.tmp
C:\pos312.tmp
C:\pos313.tmp
C:\pos314.tmp
C:\pos315.tmp
C:\pos316.tmp
C:\pos317.tmp
C:\pos318.tmp
C:\pos319.tmp
C:\pos31A.tmp
C:\pos31B.tmp
C:\pos31C.tmp
C:\pos31D.tmp
C:\pos31E.tmp
C:\pos32.tmp
C:\pos320.tmp
C:\pos321.tmp
C:\pos322.tmp
C:\pos323.tmp
C:\pos324.tmp
C:\pos325.tmp
C:\pos326.tmp
C:\pos327.tmp
C:\pos328.tmp
C:\pos329.tmp
C:\pos32C.tmp
C:\pos32D.tmp
C:\pos32E.tmp
C:\pos32F.tmp
C:\pos33.tmp
C:\pos330.tmp
C:\pos331.tmp
C:\pos332.tmp
C:\pos333.tmp
C:\pos334.tmp
C:\pos335.tmp
C:\pos336.tmp
C:\pos337.tmp
C:\pos338.tmp
C:\pos339.tmp
C:\pos33A.tmp
C:\pos33B.tmp
C:\pos33C.tmp
C:\pos33D.tmp
C:\pos33F.tmp
C:\pos34.tmp
C:\pos340.tmp
C:\pos341.tmp
C:\pos342.tmp
C:\pos343.tmp
C:\pos344.tmp
C:\pos346.tmp
C:\pos348.tmp
C:\pos349.tmp
C:\pos34A.tmp
C:\pos34B.tmp
C:\pos34C.tmp
C:\pos34D.tmp
C:\pos34E.tmp
C:\pos34F.tmp
C:\pos35.tmp
C:\pos350.tmp
C:\pos351.tmp
C:\pos352.tmp
C:\pos353.tmp
C:\pos354.tmp
C:\pos355.tmp
C:\pos356.tmp
C:\pos358.tmp
C:\pos359.tmp
C:\pos35A.tmp
C:\pos35B.tmp
C:\pos35C.tmp
C:\pos35D.tmp
C:\pos35E.tmp
C:\pos35F.tmp
C:\pos36.tmp
C:\pos360.tmp
C:\pos361.tmp
C:\pos362.tmp
C:\pos365.tmp
C:\pos366.tmp
C:\pos367.tmp
C:\pos368.tmp
C:\pos369.tmp
C:\pos36A.tmp
C:\pos36B.tmp
C:\pos36C.tmp
C:\pos36D.tmp
C:\pos36E.tmp
C:\pos36F.tmp
C:\pos37.tmp
C:\pos370.tmp
C:\pos371.tmp
C:\pos372.tmp
C:\pos373.tmp
C:\pos374.tmp
C:\pos375.tmp
C:\pos376.tmp
C:\pos377.tmp
C:\pos378.tmp
C:\pos379.tmp
C:\pos37A.tmp
C:\pos37B.tmp
C:\pos37C.tmp
C:\pos37D.tmp
C:\pos37E.tmp
C:\pos37F.tmp
C:\pos38.tmp
C:\pos381.tmp
C:\pos382.tmp
C:\pos383.tmp
C:\pos384.tmp
C:\pos385.tmp
C:\pos386.tmp
C:\pos387.tmp
C:\pos388.tmp
C:\pos389.tmp
C:\pos38A.tmp
C:\pos38B.tmp
C:\pos38D.tmp
C:\pos38F.tmp
C:\pos39.tmp
C:\pos390.tmp
C:\pos391.tmp
C:\pos392.tmp
C:\pos393.tmp
C:\pos394.tmp
C:\pos395.tmp
C:\pos396.tmp
C:\pos398.tmp
C:\pos399.tmp
C:\pos39A.tmp
C:\pos39B.tmp
C:\pos39C.tmp
C:\pos39D.tmp
C:\pos39E.tmp
C:\pos39F.tmp
C:\pos3A.tmp
C:\pos3A0.tmp
C:\pos3A1.tmp
C:\pos3A2.tmp
C:\pos3A3.tmp
C:\pos3A4.tmp
C:\pos3A5.tmp
C:\pos3A6.tmp
C:\pos3A7.tmp
C:\pos3A8.tmp
C:\pos3A9.tmp
C:\pos3AA.tmp
C:\pos3AB.tmp
C:\pos3AC.tmp
C:\pos3AD.tmp
C:\pos3AE.tmp
C:\pos3AF.tmp
C:\pos3B.tmp
C:\pos3B0.tmp
C:\pos3B1.tmp
C:\pos3B2.tmp
C:\pos3B4.tmp
C:\pos3B5.tmp
C:\pos3B6.tmp
C:\pos3B7.tmp
C:\pos3B8.tmp
C:\pos3B9.tmp
C:\pos3BA.tmp
C:\pos3BB.tmp
C:\pos3BC.tmp
C:\pos3BD.tmp
C:\pos3BE.tmp
C:\pos3BF.tmp
C:\pos3C.tmp
C:\pos3C0.tmp
C:\pos3C1.tmp
C:\pos3C2.tmp
C:\pos3C3.tmp
C:\pos3C4.tmp
C:\pos3C5.tmp
C:\pos3C6.tmp
C:\pos3C7.tmp
C:\pos3C8.tmp
C:\pos3C9.tmp
C:\pos3CA.tmp
C:\pos3CB.tmp
C:\pos3CC.tmp
C:\pos3CD.tmp
C:\pos3CE.tmp
C:\pos3CF.tmp
C:\pos3D.tmp
C:\pos3D0.tmp
C:\pos3D1.tmp
C:\pos3D2.tmp
C:\pos3D3.tmp
C:\pos3D4.tmp
C:\pos3D5.tmp
C:\pos3D6.tmp
C:\pos3D7.tmp
C:\pos3D8.tmp
C:\pos3D9.tmp
C:\pos3DA.tmp
C:\pos3DB.tmp
C:\pos3DC.tmp
C:\pos3DD.tmp
C:\pos3DE.tmp
C:\pos3DF.tmp
C:\pos3E.tmp
C:\pos3E0.tmp
C:\pos3E1.tmp
C:\pos3E2.tmp
C:\pos3E3.tmp
C:\pos3E4.tmp
C:\pos3E5.tmp
C:\pos3E6.tmp
C:\pos3E7.tmp
C:\pos3E8.tmp
C:\pos3E9.tmp
C:\pos3EA.tmp
C:\pos3EB.tmp
C:\pos3EC.tmp
C:\pos3ED.tmp
C:\pos3EE.tmp
C:\pos3EF.tmp
C:\pos3F.tmp
C:\pos3F0.tmp
C:\pos3F1.tmp
C:\pos3F2.tmp
C:\pos3F3.tmp
C:\pos3F4.tmp
C:\pos3F5.tmp
C:\pos3F6.tmp
C:\pos3F7.tmp
C:\pos3F8.tmp
C:\pos3F9.tmp
C:\pos3FA.tmp
C:\pos3FB.tmp
C:\pos3FC.tmp
C:\pos3FD.tmp
C:\pos3FE.tmp
C:\pos3FF.tmp
C:\pos4.tmp
C:\pos40.tmp
C:\pos400.tmp
C:\pos401.tmp
C:\pos402.tmp
C:\pos403.tmp
C:\pos404.tmp
C:\pos405.tmp
C:\pos406.tmp
C:\pos407.tmp
C:\pos408.tmp
C:\pos409.tmp
C:\pos40A.tmp
C:\pos40B.tmp
C:\pos40C.tmp
C:\pos40D.tmp
C:\pos40E.tmp
C:\pos40F.tmp
C:\pos41.tmp
C:\pos410.tmp
C:\pos411.tmp
C:\pos412.tmp
C:\pos413.tmp
C:\pos42.tmp
C:\pos43.tmp
C:\pos44.tmp
C:\pos46.tmp
C:\pos47.tmp
C:\pos48.tmp
C:\pos49.tmp
C:\pos4A.tmp
C:\pos4B.tmp
C:\pos4C.tmp
C:\pos4D.tmp
C:\pos4E.tmp
C:\pos4F.tmp
C:\pos5.tmp
C:\pos50.tmp
C:\pos51.tmp
C:\pos54.tmp
C:\pos55.tmp
C:\pos56.tmp
C:\pos57.tmp
C:\pos58.tmp
C:\pos59.tmp
C:\pos5A.tmp
C:\pos5B.tmp
C:\pos5C.tmp
C:\pos5D.tmp
C:\pos5F.tmp
C:\pos6.tmp
C:\pos60.tmp
C:\pos61.tmp
C:\pos62.tmp
C:\pos65.tmp
C:\pos66.tmp
C:\pos67.tmp
C:\pos68.tmp
C:\pos69.tmp
C:\pos6A.tmp
C:\pos6B.tmp
C:\pos6C.tmp
C:\pos6D.tmp
C:\pos6E.tmp
C:\pos6F.tmp
C:\pos7.tmp
C:\pos70.tmp
C:\pos71.tmp
C:\pos72.tmp
C:\pos73.tmp
C:\pos74.tmp
C:\pos75.tmp
C:\pos77.tmp
C:\pos78.tmp
C:\pos79.tmp
C:\pos7A.tmp
C:\pos7B.tmp
C:\pos7C.tmp
C:\pos7D.tmp
C:\pos7E.tmp
C:\pos7F.tmp
C:\pos8.tmp
C:\pos80.tmp
C:\pos81.tmp
C:\pos82.tmp
C:\pos83.tmp
C:\pos86.tmp
C:\pos87.tmp
C:\pos88.tmp
C:\pos89.tmp
C:\pos8A.tmp
C:\pos8B.tmp
C:\pos8C.tmp
C:\pos8D.tmp
C:\pos8E.tmp
C:\pos8F.tmp
C:\pos9.tmp
C:\pos90.tmp
C:\pos91.tmp
C:\pos92.tmp
C:\pos93.tmp
C:\pos94.tmp
C:\pos95.tmp
C:\pos97.tmp
C:\pos98.tmp
C:\pos99.tmp
C:\pos9A.tmp
C:\pos9B.tmp
C:\pos9C.tmp
C:\pos9D.tmp
C:\pos9E.tmp
C:\pos9F.tmp
C:\posA.tmp
C:\posA0.tmp
C:\posA1.tmp
C:\posA2.tmp
C:\posA4.tmp
C:\posA6.tmp
C:\posA7.tmp
C:\posA8.tmp
C:\posA9.tmp
C:\posAA.tmp
C:\posAB.tmp
C:\posAC.tmp
C:\posAD.tmp
C:\posAE.tmp
C:\posAF.tmp
C:\posB.tmp
C:\posB0.tmp
C:\posB1.tmp
C:\posB2.tmp
C:\posB3.tmp
C:\posB4.tmp
C:\posB5.tmp
C:\posB6.tmp
C:\posB7.tmp
C:\posB8.tmp
C:\posB9.tmp
C:\posBA.tmp
C:\posBB.tmp
C:\posBC.tmp
C:\posBD.tmp
C:\posBE.tmp
C:\posBF.tmp
C:\posC.tmp
C:\posC0.tmp
C:\posC1.tmp
C:\posC2.tmp
C:\posC3.tmp
C:\posC4.tmp
C:\posC5.tmp
C:\posC6.tmp
C:\posC7.tmp
C:\posC8.tmp
C:\posC9.tmp
C:\posCA.tmp
C:\posCB.tmp
C:\posCC.tmp
C:\posCD.tmp
C:\posCE.tmp
C:\posCF.tmp
C:\posD.tmp
C:\posD0.tmp
C:\posD1.tmp
C:\posD2.tmp
C:\posD3.tmp
C:\posD4.tmp
C:\posD5.tmp
C:\posD6.tmp
C:\posD7.tmp
C:\posD8.tmp
C:\posD9.tmp
C:\posDA.tmp
C:\posDB.tmp
C:\posDC.tmp
C:\posDD.tmp
C:\posDE.tmp
C:\posDF.tmp
C:\posE.tmp
C:\posE0.tmp
C:\posE1.tmp
C:\posE2.tmp
C:\posE3.tmp
C:\posE4.tmp
C:\posE5.tmp
C:\posE6.tmp
C:\posE7.tmp
C:\posE8.tmp
C:\posE9.tmp
C:\posEA.tmp
C:\posEB.tmp
C:\posEC.tmp
C:\posED.tmp
C:\posEE.tmp
C:\posEF.tmp
C:\posF.tmp
C:\posF0.tmp
C:\posF1.tmp
C:\posF2.tmp
C:\posF3.tmp
C:\posF4.tmp
C:\posF5.tmp
C:\posF6.tmp
C:\posF7.tmp
C:\posF8.tmp
C:\posF9.tmp
C:\posFA.tmp
C:\posFB.tmp
C:\posFC.tmp
C:\posFD.tmp
C:\posFE.tmp
C:\posFF.tmp
C:\Program Files\lsass.exe
C:\WINDOWS\system32\qomliff.dll
C:\WINDOWS\system32\ttutv.ini
C:\WINDOWS\system32\ttutv.ini2
C:\WINDOWS\system32\vtutt.dll
C:\WINDOWS\system32\vtutt.exe
D:\Autorun.inf

bertdigity · Jan 27, 2008

.
((((((((((((((((((((((((( Files Created from 2007-12-27 to 2008-01-27 )))))))))))))))))))))))))))))))
.

2008-01-26 20:58 . 2000-08-31 08:00 58,368 --a------ C:\WINDOWS\Nircmd.exe
2008-01-24 22:32 . 2008-01-24 23:08 362,496 --a------ C:\WINDOWS\system32\ctfmon.exe
2008-01-24 22:32 . 2004-08-09 23:00 22,528 --a------ C:\WINDOWS\system32\dllcache\ctfmon.exe
2008-01-19 11:45 . 2008-01-19 11:45 <DIR> d-------- C:\Program Files\Trend Micro
2008-01-17 20:45 . 2008-01-24 23:10 22,528 --a------ C:\WINDOWS\system32\ctfmon .exe
2008-01-17 19:14 . 2007-10-10 15:55 459,264 --------- C:\WINDOWS\system32\dllcache\msfeeds.dll
2008-01-17 19:14 . 2007-10-10 15:55 267,776 --------- C:\WINDOWS\system32\dllcache\iertutil.dll
2008-01-17 19:14 . 2007-10-10 15:55 52,224 --------- C:\WINDOWS\system32\dllcache\msfeedsbs.dll
2008-01-17 19:13 . 2007-10-10 15:55 6,065,664 --------- C:\WINDOWS\system32\dllcache\ieframe.dll
2008-01-17 19:13 . 2007-06-30 19:31 2,455,488 --------- C:\WINDOWS\system32\dllcache\ieapfltr.dat
2008-01-17 19:13 . 2007-06-30 19:36 991,232 --------- C:\WINDOWS\system32\dllcache\ieframe.dll.mui
2008-01-17 19:13 . 2007-10-10 15:55 383,488 --------- C:\WINDOWS\system32\dllcache\ieapfltr.dll
2008-01-17 19:13 . 2007-10-10 15:55 63,488 --------- C:\WINDOWS\system32\dllcache\icardie.dll
2008-01-17 19:13 . 2007-10-10 02:59 13,824 --------- C:\WINDOWS\system32\dllcache\ieudinit.exe
2008-01-17 19:12 . 2007-08-13 18:54 33,792 --a------ C:\WINDOWS\system32\dllcache\custsat.dll
2008-01-17 19:09 . 2008-01-17 19:31 <DIR> d-------- C:\d32ebb61653fe08595f1194d
2008-01-17 16:48 . 2008-01-17 16:48 <DIR> d-------- C:\VundoFix Backups
2008-01-15 21:07 . 2008-01-15 21:07 <DIR> d-------- C:\WINDOWS\DA0BF7AB88EB46758FA1531EAD938821.TMP
2008-01-15 20:18 . 2008-01-15 20:18 <DIR> d-------- C:\Program Files\TechSmith
2008-01-15 20:16 . 2008-01-15 20:16 0 --a------ C:\1273858819
2008-01-15 20:13 . 2008-01-15 20:13 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-27 05:06 --------- d-----w C:\Program Files\QuickTime
2008-01-27 05:04 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2008-01-26 18:49 --------- d-----w C:\Program Files\DivX
2007-12-12 03:30 --------- d-----w C:\Program Files\Java
.

Code:

<pre>
----a-w         3,179,520 2008-01-27 06:19:47  C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx .exe
----a-w         2,823,680 2008-01-27 06:20:26  C:\Program Files\Common Files\Symantec Shared\ccApp .exe
----a-w         3,587,584 2008-01-19 20:32:50  C:\Program Files\Google\Google Desktop Search\GoogleDesktop .exe
----a-w         1,133,568 2008-01-18 03:07:54  C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier .exe
----a-w         2,470,400 2008-01-27 06:21:37  C:\Program Files\HP\HP Software Update\HPWuSchd2 .exe
----a-w         2,897,920 2008-01-27 06:20:31  C:\Program Files\HP\QuickPlay\QPService .exe
----a-w         2,315,264 2008-01-27 06:21:15  C:\Program Files\HPQ\Default Settings\cpqset .exe
----a-w         2,309,632 2008-01-19 20:32:32  C:\Program Files\HPQ\HP Wireless Assistant\HP Wireless Assistant .exe
----a-w         2,855,424 2008-01-25 07:10:47  C:\Program Files\HPQ\Quick Launch Buttons\EabServr .exe
----a-w         2,901,504 2008-01-27 06:20:31  C:\Program Files\Java\jre1.6.0_03\bin\jusched .exe
----a-w         3,269,120 2008-01-18 05:35:39  C:\Program Files\Messenger\msmsgs .exe
----a-w         3,074,560 2008-01-27 06:21:35  C:\Program Files\QuickTime\qttask .exe
----a-w         3,514,368 2008-01-27 06:20:31  C:\Program Files\Synaptics\SynTP\SynTPEnh .exe
----a-w         2,735,616 2008-01-27 06:20:43  C:\WINDOWS\CREATOR\Remind_XP .exe
----a-w         2,484,736 2008-01-27 06:19:38  C:\WINDOWS\ehome\ehtray .exe
----a-w         3,290,112 2008-01-27 06:20:51  C:\WINDOWS\SMINST\RecGuard .exe
----a-w            22,528 2008-01-27 06:20:53  C:\WINDOWS\system32\ctfmon .exe
</pre>

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{2E9D4C81-9F27-4c14-B804-7B0F6BC88A4F}]
C:\Program Files\Outerinfo\Outerinfo.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{FBD17051-1E72-4F66-A7D8-B4A3BBAFD899}]
2008-01-26 22:19 334848 --a------ C:\WINDOWS\system32\vtutt.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [ ]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [ ]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-01-24 23:08 369664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2008-01-26 22:20 2830336]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2008-01-26 22:21 3517952]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2008-01-26 22:21 3247104]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2008-01-26 22:22 3859968]
"ccApp"="c:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2008-01-26 22:22 3162112]
"QPService"="C:\Program Files\HP\QuickPlay\QPService.exe" [2008-01-26 22:22 3236352]
"eabconfg.cpl"="C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe" [2008-01-26 22:22 3539456]
"Cpqset"="C:\Program Files\HPQ\Default Settings\cpqset.exe" [2008-01-26 22:23 2653696]
"RecGuard"="C:\Windows\SMINST\RecGuard.exe" [2008-01-26 22:23 3635712]
"Reminder"="C:\Windows\CREATOR\Remind_XP.exe" [2008-01-26 22:23 3074048]
"hpWirelessAssistant"="C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe" [ ]
"HP Software Update"="C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe" [2008-01-26 22:24 2816000]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2008-01-26 22:24 3412992]
"Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [ ]
"Winupdate Engine"="C:\WINDOWS\system32\wupeng.exe" [ ]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_CURRENT_USER\software\microsoft\windows nt\currentversion\windows]
"load"=C:\WINDOWS\system32\vtutt.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 C:\WINDOWS\system32\vtutt

R3 HSFHWATI;HSFHWATI;C:\WINDOWS\system32\DRIVERS\HSFHWATI.sys [2005-08-22 01:06]

*Newly Created Service* - COMHOST
.
Contents of the 'Scheduled Tasks' folder
"2007-11-02 17:14:49 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2008-01-26 04:00:00 C:\WINDOWS\Tasks\Norton AntiVirus - Run Full System Scan - Connie De Leon.job"
- c:\PROGRA~1\NORTON~1\NORTON~1\Navw32.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-26 22:18:53
Windows 5.1.2600 Service Pack 2 NTFS

detected NTDLL code modification:
ZwOpenFile

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

C:\WINDOWS\system32\ttutv.ini 391 bytes
C:\WINDOWS\system32\ttutv.ini2 391 bytes
C:\WINDOWS\system32\vtutt.exe 338432 bytes executable

scan completed successfully
hidden files: 3

**************************************************************************
.
Completion time: 2008-01-26 22:30:43 - machine was rebooted
ComboFix-quarantined-files.txt 2008-01-27 06:30:30
.
2008-01-19 19:11:21 --- E O F ---

Shaba · Jan 27, 2008

Hi

Some of the startup programs are infected and that's why you may need to re-install some of them later.

Open notepad and copy/paste the text in the quotebox below into it:

Code:

Rootkit:
C:\WINDOWS\system32\ttutv.ini 
C:\WINDOWS\system32\ttutv.ini2 
C:\WINDOWS\system32\vtutt.exe

RenV:
----a-w         3,179,520 2008-01-27 06:19:47  C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx .exe
----a-w         2,823,680 2008-01-27 06:20:26  C:\Program Files\Common Files\Symantec Shared\ccApp .exe
----a-w         3,587,584 2008-01-19 20:32:50  C:\Program Files\Google\Google Desktop Search\GoogleDesktop .exe
----a-w         1,133,568 2008-01-18 03:07:54  C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier .exe
----a-w         2,470,400 2008-01-27 06:21:37  C:\Program Files\HP\HP Software Update\HPWuSchd2 .exe
----a-w         2,897,920 2008-01-27 06:20:31  C:\Program Files\HP\QuickPlay\QPService .exe
----a-w         2,315,264 2008-01-27 06:21:15  C:\Program Files\HPQ\Default Settings\cpqset .exe
----a-w         2,309,632 2008-01-19 20:32:32  C:\Program Files\HPQ\HP Wireless Assistant\HP Wireless Assistant .exe
----a-w         2,855,424 2008-01-25 07:10:47  C:\Program Files\HPQ\Quick Launch Buttons\EabServr .exe
----a-w         2,901,504 2008-01-27 06:20:31  C:\Program Files\Java\jre1.6.0_03\bin\jusched .exe
----a-w         3,269,120 2008-01-18 05:35:39  C:\Program Files\Messenger\msmsgs .exe
----a-w         3,074,560 2008-01-27 06:21:35  C:\Program Files\QuickTime\qttask .exe
----a-w         3,514,368 2008-01-27 06:20:31  C:\Program Files\Synaptics\SynTP\SynTPEnh .exe
----a-w         2,735,616 2008-01-27 06:20:43  C:\WINDOWS\CREATOR\Remind_XP .exe
----a-w         2,484,736 2008-01-27 06:19:38  C:\WINDOWS\ehome\ehtray .exe
----a-w         3,290,112 2008-01-27 06:20:51  C:\WINDOWS\SMINST\RecGuard .exe
----a-w            22,528 2008-01-27 06:20:53  C:\WINDOWS\system32\ctfmon .exe

Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{2E9D4C81-9F27-4c14-B804-7B0F6BC88A4F}]

[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{FBD17051-1E72-4F66-A7D8-B4A3BBAFD899}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Winupdate Engine"=-

[HKEY_CURRENT_USER\software\microsoft\windows nt\currentversion\windows]
"load"=-

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"Authentication Packages"=hex(7):6d,73,76,31,5f,30,00,00

Save this as "CFScript"

Then drag the CFScript into ComboFix.exe as you see in the screenshot below.

This will start ComboFix again. After reboot, (in case it asks to reboot), post the contents of Combofix.txt in your next reply together with a new HijackThis log.

Combofix should never take more that 20 minutes including the reboot if malware is detected.
If it does, open Task Manager then Processes tab (press ctrl, alt and del at the same time) and end any processes of findstr, find, sed or swreg, then combofix should continue.
If that happened we want to know, and also what process you had to end.

bertdigity · Jan 27, 2008

ComboFix 08-01-23.1C - Connie De Leon 2008-01-27 11:29:12.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.117 [GMT -8:00]
Running from: C:\Documents and Settings\Connie De Leon\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\Connie De Leon\Desktop\CFScript.txt
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\system32\ttutv.ini
C:\WINDOWS\system32\ttutv.ini2
C:\WINDOWS\system32\vtutt.dll
C:\WINDOWS\system32\vtutt.exe

.
((((((((((((((((((((((((( Files Created from 2007-12-27 to 2008-01-27 )))))))))))))))))))))))))))))))
.

2008-01-26 20:58 . 2000-08-31 08:00 58,368 --a------ C:\WINDOWS\Nircmd.exe
2008-01-24 22:32 . 2008-01-24 23:08 369,664 --a------ C:\WINDOWS\system32\ctfmon.exe
2008-01-24 22:32 . 2004-08-09 23:00 22,528 --a------ C:\WINDOWS\system32\dllcache\ctfmon.exe
2008-01-19 11:45 . 2008-01-19 11:45 <DIR> d-------- C:\Program Files\Trend Micro
2008-01-17 20:45 . 2008-01-26 22:20 22,528 --a------ C:\WINDOWS\system32\ctfmon .exe
2008-01-17 19:14 . 2007-10-10 15:55 459,264 --------- C:\WINDOWS\system32\dllcache\msfeeds.dll
2008-01-17 19:14 . 2007-10-10 15:55 267,776 --------- C:\WINDOWS\system32\dllcache\iertutil.dll
2008-01-17 19:14 . 2007-10-10 15:55 52,224 --------- C:\WINDOWS\system32\dllcache\msfeedsbs.dll
2008-01-17 19:13 . 2007-10-10 15:55 6,065,664 --------- C:\WINDOWS\system32\dllcache\ieframe.dll
2008-01-17 19:13 . 2007-06-30 19:31 2,455,488 --------- C:\WINDOWS\system32\dllcache\ieapfltr.dat
2008-01-17 19:13 . 2007-06-30 19:36 991,232 --------- C:\WINDOWS\system32\dllcache\ieframe.dll.mui
2008-01-17 19:13 . 2007-10-10 15:55 383,488 --------- C:\WINDOWS\system32\dllcache\ieapfltr.dll
2008-01-17 19:13 . 2007-10-10 15:55 63,488 --------- C:\WINDOWS\system32\dllcache\icardie.dll
2008-01-17 19:13 . 2007-10-10 02:59 13,824 --------- C:\WINDOWS\system32\dllcache\ieudinit.exe
2008-01-17 19:12 . 2007-08-13 18:54 33,792 --a------ C:\WINDOWS\system32\dllcache\custsat.dll
2008-01-17 19:09 . 2008-01-17 19:31 <DIR> d-------- C:\d32ebb61653fe08595f1194d
2008-01-17 16:48 . 2008-01-17 16:48 <DIR> d-------- C:\VundoFix Backups
2008-01-15 21:07 . 2008-01-15 21:07 <DIR> d-------- C:\WINDOWS\DA0BF7AB88EB46758FA1531EAD938821.TMP
2008-01-15 20:18 . 2008-01-15 20:18 <DIR> d-------- C:\Program Files\TechSmith
2008-01-15 20:16 . 2008-01-15 20:16 0 --a------ C:\1273858819
2008-01-15 20:13 . 2008-01-15 20:13 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-27 19:32 --------- d-----w C:\Program Files\QuickTime
2008-01-27 19:31 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2008-01-26 18:49 --------- d-----w C:\Program Files\DivX
2007-12-12 03:30 --------- d-----w C:\Program Files\Java
.

Code:

<pre>
----a-w         3,179,520 2008-01-27 19:44:55  C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx .exe
----a-w         2,823,680 2008-01-27 19:45:28  C:\Program Files\Common Files\Symantec Shared\ccApp .exe
----a-w         3,587,584 2008-01-19 20:32:50  C:\Program Files\Google\Google Desktop Search\GoogleDesktop .exe
----a-w         1,133,568 2008-01-18 03:07:54  C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier .exe
----a-w         2,816,000 2008-01-27 19:46:10  C:\Program Files\HP\HP Software Update\HPWuSchd2 .exe
----a-w         2,897,920 2008-01-27 19:46:09  C:\Program Files\HP\QuickPlay\QPService .exe
----a-w         2,315,264 2008-01-27 19:46:04  C:\Program Files\HPQ\Default Settings\cpqset .exe
----a-w         2,309,632 2008-01-19 20:32:32  C:\Program Files\HPQ\HP Wireless Assistant\HP Wireless Assistant .exe
----a-w         3,201,024 2008-01-27 19:45:30  C:\Program Files\HPQ\Quick Launch Buttons\EabServr .exe
----a-w         3,247,104 2008-01-27 19:44:55  C:\Program Files\Java\jre1.6.0_03\bin\jusched .exe
----a-w         3,269,120 2008-01-18 05:35:39  C:\Program Files\Messenger\msmsgs .exe
----a-w         3,074,560 2008-01-27 19:46:33  C:\Program Files\QuickTime\qttask .exe
----a-w         3,859,968 2008-01-27 19:46:19  C:\Program Files\Synaptics\SynTP\SynTPEnh .exe
----a-w         2,735,616 2008-01-27 19:46:10  C:\WINDOWS\CREATOR\Remind_XP .exe
----a-w         2,830,336 2008-01-27 19:44:35  C:\WINDOWS\ehome\ehtray .exe
----a-w         3,635,712 2008-01-27 19:46:21  C:\WINDOWS\SMINST\RecGuard .exe
----a-w            22,528 2008-01-27 06:20:53  C:\WINDOWS\system32\ctfmon .exe
</pre>

((((((((((((((((((((((((((((( snapshot@2008-01-26_22.29.10.84 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-01-27 05:06:29 3,074,048 ----a-w C:\WINDOWS\CREATOR\Remind_XP.exe
+ 2008-01-27 19:32:28 3,074,048 ----a-w C:\WINDOWS\CREATOR\Remind_XP.exe
- 2008-01-27 05:04:19 2,830,336 ----a-w C:\WINDOWS\ehome\ehtray.exe
+ 2008-01-27 19:30:14 3,175,936 ----a-w C:\WINDOWS\ehome\ehtray.exe
- 2008-01-27 04:59:35 229,376 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000001\NTUSER.DAT
+ 2008-01-27 19:28:35 229,376 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000001\NTUSER.DAT
- 2008-01-27 04:59:35 8,192 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000002\UsrClass.dat
+ 2008-01-27 19:28:35 8,192 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000002\UsrClass.dat
- 2008-01-27 04:59:36 233,472 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000003\NTUSER.DAT
+ 2008-01-27 19:28:35 233,472 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000003\NTUSER.DAT
- 2008-01-27 04:59:36 8,192 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000004\UsrClass.dat
+ 2008-01-27 19:28:35 8,192 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000004\UsrClass.dat
- 2008-01-27 04:59:37 4,354,048 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000005\ntuser.dat
+ 2008-01-27 19:28:35 4,358,144 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000005\ntuser.dat
- 2008-01-27 04:59:37 163,840 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000006\UsrClass.dat
+ 2008-01-27 19:28:35 163,840 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000006\UsrClass.dat
- 2008-01-27 05:06:12 3,628,544 ----a-w C:\WINDOWS\SMINST\RecGuard.exe
+ 2008-01-27 19:32:20 3,981,312 ----a-w C:\WINDOWS\SMINST\RecGuard.exe
- 2008-01-27 06:17:17 16,384 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
+ 2008-01-27 19:41:56 16,384 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
- 2008-01-27 06:17:17 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2008-01-27 19:41:56 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
- 2008-01-27 06:17:17 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2008-01-27 19:41:56 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
- 2004-08-10 15:00:00 23,552 ----a-w C:\WINDOWS\system32\sort.exe
+ 2004-08-10 15:00:00 30,720 ----a-w C:\WINDOWS\system32\sort.exe
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{599FEB52-49F4-4A4A-BEE1-98356CF3CB57}]
2008-01-27 11:44 334848 --a------ C:\WINDOWS\system32\vtutt.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [ ]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [ ]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-01-27 11:45 369664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2008-01-27 11:45 3175936]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2008-01-27 11:46 3517952]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2008-01-27 11:46 3592704]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2008-01-27 11:47 4205568]
"ccApp"="c:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2008-01-27 11:47 3169280]
"QPService"="C:\Program Files\HP\QuickPlay\QPService.exe" [2008-01-27 11:47 3236352]
"eabconfg.cpl"="C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe" [2008-01-27 11:47 3539456]
"Cpqset"="C:\Program Files\HPQ\Default Settings\cpqset.exe" [2008-01-27 11:48 2653696]
"RecGuard"="C:\Windows\SMINST\RecGuard.exe" [2008-01-27 11:48 3981312]
"Reminder"="C:\Windows\CREATOR\Remind_XP.exe" [2008-01-27 11:48 3081216]
"hpWirelessAssistant"="C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe" [ ]
"HP Software Update"="C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe" [2008-01-27 11:48 3161600]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2008-01-27 11:49 3420160]
"Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [ ]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_CURRENT_USER\software\microsoft\windows nt\currentversion\windows]
"load"=C:\WINDOWS\system32\vtutt.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 C:\WINDOWS\system32\vtutt

R3 HSFHWATI;HSFHWATI;C:\WINDOWS\system32\DRIVERS\HSFHWATI.sys [2005-08-22 01:06]

*Newly Created Service* - COMHOST
.
Contents of the 'Scheduled Tasks' folder
"2007-11-02 17:14:49 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2008-01-26 04:00:00 C:\WINDOWS\Tasks\Norton AntiVirus - Run Full System Scan - Connie De Leon.job"
- c:\PROGRA~1\NORTON~1\NORTON~1\Navw32.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-27 11:42:57
Windows 5.1.2600 Service Pack 2 NTFS

detected NTDLL code modification:
ZwOpenFile

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

C:\WINDOWS\system32\ttutv.ini 391 bytes
C:\WINDOWS\system32\ttutv.ini2 391 bytes
C:\WINDOWS\system32\vtutt.dll 334848 bytes executable
C:\WINDOWS\system32\vtutt.exe 338432 bytes executable

scan completed successfully
hidden files: 4

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

PROCESS: C:\WINDOWS\Explorer.EXE [6.00.2900.3156]
-> C:\WINDOWS\system32\vtutt.dll
.
Completion time: 2008-01-27 11:55:39 - machine was rebooted
ComboFix-quarantined-files.txt 2008-01-27 19:55:24
ComboFix2.txt 2008-01-27 06:30:45
.
2008-01-19 19:11:21 --- E O F ---

Help please. Here is my log.

New member

New member

New member

Security Expert: Emeritus

New member

Member of Team Spybot

Security Expert: Emeritus

New member

Security Expert: Emeritus

New member

Security Expert: Emeritus

New member

New member

New member

New member

New member

New member

New member

Security Expert: Emeritus

New member