I would not buy it. Please download ComboFix to the desktop from this link: ComboFix Double-click combofix.exe Follow the prompts. (Don't click on the window while the program is running, it may cause your system to hang.) Please post the log it produces.

0

I opened an email last sunday and there was a virus attached to it infact there was two but i mananged to heal one and delete it but the other i cant get rid of. Trojan Horse IRC\Backdoor.Flood it says its in C:\System Volume\_restore and then theres a load of numbers after that, i was wondering if i did a system restore to before i opened the email would it get rid of it PLEASE HELP ME

0

alig, please start your own thread then someone will try to help you. it's hard to find you in someone elses post.

0

thanks again, here is the log result ComboFix 08-01-09.2 - IBK 2008-01-18 18:44:35.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.107 [GMT 0:00] Running from: C:\Documents and Settings\IBK\Local Settings\Temporary Internet Files\Content.IE5\Q4PRYSFH\ComboFix[1].exe * Created a new restore point . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\All Users\Application Data\storageprotector C:\Documents and Settings\All Users\Application Data\storageprotector\Data\ac C:\Documents and Settings\All Users\Application Data\storageprotector\Data\em C:\Documents and Settings\All Users\Application Data\storageprotector\Data\oid C:\Documents and Settings\All Users\Application Data\storageprotector\Data\user C:\Documents and Settings\IBK\Application Data\storageprotector C:\Documents and Settings\IBK\Application Data\storageprotector\Logs\update.log C:\pos1.tmp C:\pos10.tmp C:\pos100.tmp C:\pos1000.tmp C:\pos1001.tmp C:\pos1002.tmp C:\pos1003.tmp C:\pos1004.tmp C:\pos1005.tmp C:\pos1006.tmp C:\pos1007.tmp C:\pos1008.tmp C:\pos1009.tmp C:\pos100A.tmp C:\pos100B.tmp C:\pos100C.tmp C:\pos100D.tmp C:\pos100E.tmp C:\pos100F.tmp C:\pos101.tmp C:\pos1010.tmp C:\pos1011.tmp C:\pos1012.tmp C:\pos1013.tmp C:\pos1014.tmp C:\pos1015.tmp C:\pos1016.tmp C:\pos1017.tmp C:\pos1018.tmp C:\pos1019.tmp C:\pos101A.tmp C:\pos101B.tmp C:\pos101C.tmp C:\pos101D.tmp C:\pos101E.tmp C:\pos101F.tmp C:\pos102.tmp C:\pos1020.tmp C:\pos1021.tmp C:\pos1022.tmp C:\pos1023.tmp C:\pos1024.tmp C:\pos1025.tmp C:\pos1026.tmp C:\pos1027.tmp C:\pos1028.tmp C:\pos1029.tmp C:\pos102A.tmp C:\pos102B.tmp C:\pos102C.tmp C:\pos102D.tmp C:\pos102E.tmp C:\pos102F.tmp C:\pos103.tmp C:\pos1030.tmp C:\pos1031.tmp C:\pos1032.tmp C:\pos1033.tmp C:\pos1034.tmp C:\pos1035.tmp C:\pos1036.tmp C:\pos1037.tmp C:\pos1038.tmp C:\pos1039.tmp C:\pos103A.tmp C:\pos103B.tmp C:\pos103C.tmp C:\pos103D.tmp C:\pos103E.tmp C:\pos103F.tmp C:\pos104.tmp C:\pos1040.tmp C:\pos1041.tmp C:\pos1042.tmp C:\pos1043.tmp C:\pos1044.tmp C:\pos1045.tmp C:\pos1046.tmp C:\pos1047.tmp C:\pos1048.tmp C:\pos1049.tmp C:\pos104A.tmp C:\pos104B.tmp C:\pos104C.tmp C:\pos104D.tmp C:\pos104E.tmp C:\pos104F.tmp C:\pos105.tmp C:\pos1050.tmp C:\pos1051.tmp C:\pos1052.tmp C:\pos1053.tmp C:\pos1054.tmp C:\pos1055.tmp C:\pos1056.tmp C:\pos1057.tmp C:\pos1058.tmp C:\pos1059.tmp C:\pos105A.tmp C:\pos105B.tmp C:\pos105C.tmp C:\pos105D.tmp C:\pos105E.tmp C:\pos105F.tmp C:\pos106.tmp C:\pos1060.tmp C:\pos1061.tmp C:\pos1062.tmp C:\pos1063.tmp C:\pos1064.tmp C:\pos1065.tmp C:\pos1066.tmp C:\pos1067.tmp C:\pos1068.tmp C:\pos1069.tmp C:\pos106A.tmp C:\pos106B.tmp C:\pos106C.tmp C:\pos106D.tmp C:\pos106E.tmp C:\pos106F.tmp C:\pos107.tmp C:\pos1070.tmp C:\pos1071.tmp C:\pos1072.tmp C:\pos1073.tmp C:\pos1074.tmp C:\pos1075.tmp C:\pos1076.tmp C:\pos1077.tmp C:\pos1078.tmp C:\pos1079.tmp C:\pos107A.tmp C:\pos107B.tmp C:\pos107C.tmp C:\pos107D.tmp C:\pos107E.tmp C:\pos107F.tmp C:\pos108.tmp C:\pos1080.tmp C:\pos1081.tmp C:\pos1082.tmp C:\pos1083.tmp C:\pos1084.tmp C:\pos1085.tmp C:\pos1086.tmp C:\pos1087.tmp C:\pos1088.tmp C:\pos1089.tmp C:\pos108A.tmp C:\pos108B.tmp C:\pos108C.tmp C:\pos108D.tmp C:\pos108E.tmp C:\pos108F.tmp C:\pos109.tmp C:\pos1090.tmp C:\pos1091.tmp C:\pos1092.tmp C:\pos1093.tmp C:\pos1094.tmp C:\pos1095.tmp C:\pos1096.tmp C:\pos1097.tmp C:\pos1098.tmp C:\pos1099.tmp C:\pos109A.tmp C:\pos109B.tmp C:\pos109C.tmp C:\pos109D.tmp C:\pos109E.tmp C:\pos109F.tmp C:\pos10A.tmp C:\pos10A0.tmp C:\pos10A1.tmp C:\pos10A2.tmp C:\pos10A3.tmp C:\pos10A4.tmp C:\pos10A5.tmp C:\pos10A6.tmp C:\pos10A7.tmp C:\pos10A8.tmp C:\pos10A9.tmp C:\pos10AA.tmp C:\pos10AB.tmp C:\pos10AC.tmp C:\pos10AD.tmp C:\pos10AE.tmp C:\pos10AF.tmp C:\pos10B.tmp C:\pos10B0.tmp C:\pos10B1.tmp C:\pos10B2.tmp C:\pos10B3.tmp C:\pos10B4.tmp C:\pos10B5.tmp C:\pos10B6.tmp C:\pos10B7.tmp C:\pos10B8.tmp C:\pos10B9.tmp C:\pos10BA.tmp C:\pos10BB.tmp C:\pos10BC.tmp C:\pos10BD.tmp C:\pos10BE.tmp C:\pos10BF.tmp C:\pos10C.tmp C:\pos10C0.tmp C:\pos10C1.tmp C:\pos10C2.tmp C:\pos10C3.tmp C:\pos10C4.tmp C:\pos10C5.tmp C:\pos10C6.tmp C:\pos10C7.tmp C:\pos10C8.tmp C:\pos10C9.tmp C:\pos10CA.tmp C:\pos10CB.tmp C:\pos10CC.tmp C:\pos10CD.tmp C:\pos10CE.tmp C:\pos10CF.tmp C:\pos10D.tmp C:\pos10D0.tmp C:\pos10D1.tmp C:\pos10D2.tmp C:\pos10D3.tmp C:\pos10D4.tmp C:\pos10D5.tmp C:\pos10D6.tmp C:\pos10D7.tmp C:\pos10D8.tmp C:\pos10D9.tmp C:\pos10DA.tmp C:\pos10DB.tmp C:\pos10DC.tmp C:\pos10DD.tmp C:\pos10DE.tmp C:\pos10DF.tmp C:\pos10E.tmp C:\pos10E0.tmp C:\pos10E1.tmp C:\pos10E2.tmp C:\pos10E3.tmp C:\pos10E4.tmp C:\pos10E5.tmp C:\pos10E6.tmp C:\pos10E7.tmp C:\pos10E8.tmp C:\pos10E9.tmp C:\pos10EA.tmp C:\pos10EB.tmp C:\pos10EC.tmp C:\pos10ED.tmp C:\pos10EE.tmp C:\pos10EF.tmp C:\pos10F.tmp C:\pos10F0.tmp C:\pos10F1.tmp C:\pos10F2.tmp C:\pos10F3.tmp C:\pos10F4.tmp C:\pos10F5.tmp C:\pos10F6.tmp C:\pos10F7.tmp C:\pos10F8.tmp C:\pos10F9.tmp C:\pos10FA.tmp C:\pos10FB.tmp C:\pos10FC.tmp C:\pos10FD.tmp C:\pos10FE.tmp C:\pos10FF.tmp C:\pos11.tmp C:\pos110.tmp C:\pos1100.tmp C:\pos1101.tmp C:\pos1102.tmp C:\pos1103.tmp C:\pos1104.tmp C:\pos1105.tmp C:\pos1106.tmp C:\pos1107.tmp C:\pos1108.tmp C:\pos1109.tmp C:\pos110A.tmp C:\pos110B.tmp C:\pos110C.tmp C:\pos110D.tmp C:\pos110E.tmp C:\pos110F.tmp C:\pos111.tmp C:\pos1110.tmp C:\pos1111.tmp C:\pos1112.tmp C:\pos1113.tmp C:\pos1114.tmp C:\pos1115.tmp C:\pos1116.tmp C:\pos1117.tmp C:\pos1118.tmp C:\pos1119.tmp C:\pos111A.tmp C:\pos111B.tmp C:\pos111C.tmp C:\pos111D.tmp C:\pos111E.tmp C:\pos111F.tmp C:\pos112.tmp C:\pos1120.tmp C:\pos1121.tmp C:\pos1122.tmp C:\pos1123.tmp C:\pos1124.tmp C:\pos1125.tmp C:\pos1126.tmp C:\pos1127.tmp C:\pos1128.tmp C:\pos1129.tmp C:\pos112A.tmp C:\pos112B.tmp C:\pos112C.tmp C:\pos112D.tmp C:\pos112E.tmp C:\pos112F.tmp C:\pos113.tmp C:\pos1130.tmp C:\pos1131.tmp C:\pos1132.tmp C:\pos1133.tmp C:\pos1134.tmp C:\pos1135.tmp C:\pos1136.tmp C:\pos1137.tmp C:\pos1138.tmp C:\pos1139.tmp C:\pos113A.tmp C:\pos113B.tmp C:\pos113C.tmp C:\pos113D.tmp C:\pos113E.tmp C:\pos113F.tmp C:\pos114.tmp C:\pos1140.tmp C:\pos1141.tmp C:\pos1142.tmp C:\pos1143.tmp C:\pos1144.tmp C:\pos1145.tmp C:\pos1146.tmp C:\pos1147.tmp C:\pos1148.tmp C:\pos1149.tmp C:\pos114A.tmp C:\pos114B.tmp C:\pos114C.tmp C:\pos114D.tmp C:\pos114E.tmp C:\pos114F.tmp C:\pos115.tmp C:\pos1150.tmp C:\pos1151.tmp C:\pos1152.tmp C:\pos1153.tmp C:\pos1154.tmp C:\pos1155.tmp C:\pos1156.tmp C:\pos1157.tmp C:\pos1158.tmp C:\pos1159.tmp C:\pos115A.tmp C:\pos115B.tmp C:\pos115C.tmp C:\pos115D.tmp C:\pos115E.tmp C:\pos115F.tmp C:\pos116.tmp C:\pos1160.tmp C:\pos1161.tmp C:\pos1162.tmp C:\pos1163.tmp C:\pos1164.tmp C:\pos1165.tmp C:\pos1166.tmp C:\pos1167.tmp C:\pos1168.tmp C:\pos1169.tmp C:\pos116A.tmp C:\pos116B.tmp C:\pos116C.tmp C:\pos116D.tmp C:\pos116E.tmp C:\pos116F.tmp C:\pos117.tmp C:\pos1170.tmp C:\pos1171.tmp C:\pos1172.tmp C:\pos1173.tmp C:\pos1174.tmp C:\pos1175.tmp C:\pos1176.tmp C:\pos1177.tmp C:\pos1178.tmp C:\pos1179.tmp C:\pos117A.tmp C:\pos117B.tmp C:\pos117C.tmp C:\pos117D.tmp C:\pos117E.tmp C:\pos117F.tmp C:\pos118.tmp C:\pos1180.tmp C:\pos1181.tmp C:\pos1182.tmp C:\pos1183.tmp C:\pos1184.tmp C:\pos1185.tmp C:\pos1186.tmp C:\pos1187.tmp C:\pos1188.tmp C:\pos1189.tmp C:\pos118A.tmp C:\pos118B.tmp C:\pos118C.tmp C:\pos118D.tmp C:\pos118E.tmp C:\pos118F.tmp C:\pos119.tmp C:\pos1190.tmp C:\pos1191.tmp C:\pos1192.tmp C:\pos1193.tmp C:\pos1194.tmp C:\pos1195.tmp C:\pos1196.tmp C:\pos1197.tmp C:\pos1198.tmp C:\pos1199.tmp C:\pos119A.tmp C:\pos119B.tmp C:\pos119C.tmp C:\pos119D.tmp C:\pos119E.tmp C:\pos119F.tmp C:\pos11A.tmp C:\pos11A0.tmp C:\pos11A1.tmp C:\pos11A2.tmp C:\pos11A3.tmp C:\pos11A4.tmp C:\pos11A5.tmp C:\pos11A6.tmp C:\pos11A7.tmp C:\pos11A8.tmp C:\pos11A9.tmp C:\pos11AA.tmp C:\pos11AB.tmp C:\pos11AC.tmp C:\pos11AD.tmp C:\pos11AE.tmp C:\pos11AF.tmp C:\pos11B.tmp C:\pos11B0.tmp C:\pos11B1.tmp C:\pos11B2.tmp C:\pos11B3.tmp C:\pos11B4.tmp C:\pos11B5.tmp C:\pos11B6.tmp C:\pos11B7.tmp C:\pos11B8.tmp C:\pos11B9.tmp C:\pos11BA.tmp C:\pos11BB.tmp C:\pos11BC.tmp C:\pos11BD.tmp C:\pos11BE.tmp C:\pos11BF.tmp C:\pos11C.tmp C:\pos11C0.tmp C:\pos11C1.tmp C:\pos11C2.tmp C:\pos11C3.tmp C:\pos11C4.tmp C:\pos11C5.tmp C:\pos11C6.tmp C:\pos11C7.tmp C:\pos11C8.tmp C:\pos11C9.tmp C:\pos11CA.tmp C:\pos11CB.tmp C:\pos11CC.tmp C:\pos11CD.tmp C:\pos11CE.tmp C:\pos11CF.tmp C:\pos11D.tmp C:\pos11D0.tmp C:\pos11D1.tmp C:\pos11D2.tmp C:\pos11D3.tmp C:\pos11D4.tmp C:\pos11D5.tmp C:\pos11D6.tmp C:\pos11D7.tmp C:\pos11D8.tmp C:\pos11D9.tmp C:\pos11DA.tmp C:\pos11DB.tmp C:\pos11DC.tmp C:\pos11DD.tmp C:\pos11DE.tmp C:\pos11DF.tmp C:\pos11E.tmp C:\pos11E0.tmp C:\pos11E1.tmp C:\pos11E2.tmp C:\pos11E3.tmp C:\pos11E4.tmp C:\pos11E5.tmp C:\pos11E6.tmp C:\pos11E7.tmp C:\pos11E8.tmp C:\pos11E9.tmp C:\pos11EA.tmp C:\pos11EB.tmp C:\pos11EC.tmp C:\pos11ED.tmp C:\pos11EE.tmp C:\pos11EF.tmp C:\pos11F.tmp C:\pos11F0.tmp C:\pos11F1.tmp C:\pos11F2.tmp C:\pos11F3.tmp C:\pos11F4.tmp C:\pos11F5.tmp C:\pos11F6.tmp C:\pos11F7.tmp C:\pos11F8.tmp C:\pos11F9.tmp C:\pos11FA.tmp C:\pos11FB.tmp C:\pos11FC.tmp C:\pos11FD.tmp C:\pos11FE.tmp C:\pos11FF.tmp C:\pos12.tmp C:\pos120.tmp C:\pos1200.tmp C:\pos1201.tmp C:\pos1202.tmp C:\pos1203.tmp C:\pos1204.tmp C:\pos1205.tmp C:\pos1206.tmp C:\pos1207.tmp C:\pos1208.tmp C:\pos1209.tmp C:\pos120A.tmp C:\pos120B.tmp C:\pos120C.tmp C:\pos120D.tmp C:\pos120E.tmp C:\pos120F.tmp C:\pos121.tmp C:\pos1210.tmp C:\pos1211.tmp C:\pos1212.tmp C:\pos1213.tmp C:\pos1214.tmp C:\pos1215.tmp C:\pos1216.tmp C:\pos1217.tmp C:\pos1218.tmp C:\pos1219.tmp C:\pos121A.tmp C:\pos121B.tmp C:\pos121C.tmp C:\pos121D.tmp C:\pos121E.tmp C:\pos121F.tmp C:\pos122.tmp C:\pos1220.tmp C:\pos1221.tmp C:\pos1222.tmp C:\pos1223.tmp C:\pos1224.tmp C:\pos1225.tmp C:\pos1226.tmp C:\pos1227.tmp C:\pos1228.tmp C:\pos1229.tmp C:\pos122A.tmp C:\pos122B.tmp C:\pos122C.tmp C:\pos122D.tmp C:\pos122E.tmp C:\pos122F.tmp C:\pos123.tmp C:\pos1230.tmp C:\pos1231.tmp C:\pos1232.tmp C:\pos1233.tmp C:\pos1234.tmp C:\pos1235.tmp C:\pos1236.tmp C:\pos1237.tmp C:\pos1238.tmp C:\pos1239.tmp C:\pos123A.tmp C:\pos123B.tmp C:\pos123C.tmp C:\pos123D.tmp C:\pos123E.tmp C:\pos123F.tmp C:\pos124.tmp C:\pos1240.tmp C:\pos1241.tmp C:\pos1242.tmp C:\pos1243.tmp C:\pos1244.tmp C:\pos1245.tmp C:\pos1246.tmp C:\pos1247.tmp C:\pos1248.tmp C:\pos1249.tmp C:\pos124A.tmp C:\pos124B.tmp C:\pos124C.tmp C:\pos124D.tmp C:\pos124E.tmp C:\pos124F.tmp C:\pos125.tmp C:\pos1250.tmp C:\pos1251.tmp C:\pos1252.tmp C:\pos1253.tmp C:\pos1254.tmp C:\pos1255.tmp C:\pos1256.tmp C:\pos1257.tmp C:\pos1258.tmp C:\pos1259.tmp C:\pos125A.tmp C:\pos125B.tmp C:\pos125C.tmp C:\pos125D.tmp C:\pos125E.tmp C:\pos125F.tmp C:\pos126.tmp C:\pos1260.tmp C:\pos1261.tmp C:\pos1262.tmp C:\pos1263.tmp C:\pos1264.tmp C:\pos1265.tmp C:\pos1266.tmp C:\pos1267.tmp C:\pos1268.tmp C:\pos1269.tmp C:\pos126A.tmp C:\pos126B.tmp C:\pos126C.tmp C:\pos126D.tmp C:\pos126E.tmp C:\pos126F.tmp C:\pos127.tmp C:\pos1270.tmp C:\pos1271.tmp C:\pos1272.tmp C:\pos1273.tmp C:\pos1274.tmp C:\pos1275.tmp C:\pos1276.tmp C:\pos1277.tmp C:\pos1278.tmp C:\pos1279.tmp C:\pos127A.tmp C:\pos127B.tmp C:\pos127C.tmp C:\pos127D.tmp C:\pos127E.tmp C:\pos127F.tmp C:\pos128.tmp C:\pos1280.tmp C:\pos1281.tmp C:\pos1282.tmp C:\pos1283.tmp C:\pos1284.tmp C:\pos1285.tmp C:\pos1286.tmp C:\pos1287.tmp C:\pos1288.tmp C:\pos1289.tmp C:\pos128A.tmp C:\pos128B.tmp C:\pos128C.tmp C:\pos128D.tmp C:\pos128E.tmp C:\pos128F.tmp C:\pos129.tmp C:\pos1290.tmp C:\pos1291.tmp C:\pos1292.tmp C:\pos1293.tmp C:\pos1294.tmp C:\pos1295.tmp C:\pos1296.tmp C:\pos1297.tmp C:\pos1298.tmp C:\pos1299.tmp C:\pos129A.tmp C:\pos129B.tmp C:\pos129C.tmp C:\pos129D.tmp C:\pos129E.tmp C:\pos129F.tmp C:\pos12A.tmp C:\pos12A0.tmp C:\pos12A1.tmp C:\pos12A2.tmp C:\pos12A3.tmp C:\pos12A4.tmp C:\pos12A5.tmp C:\pos12A6.tmp C:\pos12A7.tmp C:\pos12A8.tmp C:\pos12A9.tmp C:\pos12AA.tmp C:\pos12AB.tmp C:\pos12AC.tmp C:\pos12AD.tmp C:\pos12AE.tmp C:\pos12AF.tmp C:\pos12B.tmp C:\pos12B0.tmp C:\pos12B1.tmp C:\pos12B2.tmp C:\pos12B3.tmp C:\pos12B4.tmp C:\pos12B5.tmp C:\pos12B6.tmp C:\pos12B7.tmp C:\pos12B8.tmp C:\pos12B9.tmp C:\pos12BA.tmp C:\pos12BB.tmp C:\pos12BC.tmp C:\pos12BD.tmp C:\pos12BE.tmp C:\pos12BF.tmp C:\pos12C.tmp C:\pos12C0.tmp C:\pos12C1.tmp C:\pos12C2.tmp C:\pos12C3.tmp C:\pos12C4.tmp C:\pos12C5.tmp C:\pos12C6.tmp C:\pos12C7.tmp C:\pos12C8.tmp C:\pos12C9.tmp C:\pos12CA.tmp C:\pos12CB.tmp C:\pos12CC.tmp C:\pos12CD.tmp C:\pos12CE.tmp C:\pos12CF.tmp C:\pos12D.tmp C:\pos12D0.tmp C:\pos12D1.tmp C:\pos12D2.tmp C:\pos12D3.tmp C:\pos12D4.tmp C:\pos12D5.tmp C:\pos12D6.tmp C:\pos12D7.tmp C:\pos12D8.tmp C:\pos12D9.tmp C:\pos12DA.tmp C:\pos12DB.tmp C:\pos12DC.tmp C:\pos12DD.tmp C:\pos12DE.tmp C:\pos12DF.tmp C:\pos12E.tmp C:\pos12E0.tmp C:\pos12E1.tmp C:\pos12E2.tmp C:\pos12E3.tmp C:\pos12E4.tmp C:\pos12E5.tmp C:\pos12E6.tmp C:\pos12E7.tmp C:\pos12E8.tmp C:\pos12E9.tmp C:\pos12EA.tmp C:\pos12EB.tmp C:\pos12EC.tmp C:\pos12ED.tmp C:\pos12EE.tmp C:\pos12EF.tmp C:\pos12F.tmp C:\pos12F0.tmp C:\pos12F1.tmp C:\pos12F2.tmp C:\pos12F3.tmp C:\pos12F4.tmp C:\pos12F5.tmp C:\pos12F6.tmp C:\pos12F7.tmp C:\pos12F8.tmp C:\pos12F9.tmp C:\pos12FA.tmp C:\pos12FB.tmp C:\pos12FC.tmp C:\pos12FD.tmp C:\pos12FE.tmp C:\pos12FF.tmp C:\pos13.tmp C:\pos130.tmp C:\pos1300.tmp C:\pos1301.tmp C:\pos1302.tmp C:\pos1303.tmp C:\pos1304.tmp C:\pos1305.tmp C:\pos1306.tmp C:\pos1307.tmp C:\pos1308.tmp C:\pos1309.tmp C:\pos130A.tmp C:\pos130B.tmp C:\pos130C.tmp C:\pos130D.tmp C:\pos130E.tmp C:\pos130F.tmp C:\pos131.tmp C:\pos1310.tmp C:\pos1311.tmp C:\pos1312.tmp C:\pos1313.tmp C:\pos1314.tmp C:\pos1315.tmp C:\pos1316.tmp C:\pos1317.tmp C:\pos1318.tmp C:\pos1319.tmp C:\pos131A.tmp C:\pos131B.tmp C:\pos131C.tmp C:\pos131D.tmp C:\pos131E.tmp C:\pos131F.tmp C:\pos132.tmp C:\pos1320.tmp C:\pos1321.tmp C:\pos1322.tmp C:\pos1323.tmp C:\pos1324.tmp C:\pos1325.tmp C:\pos1326.tmp C:\pos1327.tmp C:\pos1328.tmp C:\pos1329.tmp C:\pos132A.tmp C:\pos132B.tmp C:\pos132C.tmp C:\pos132D.tmp C:\pos132E.tmp C:\pos132F.tmp C:\pos133.tmp C:\pos1330.tmp C:\pos1331.tmp C:\pos1332.tmp C:\pos1333.tmp C:\pos1334.tmp C:\pos1335.tmp C:\pos1336.tmp C:\pos1337.tmp C:\pos1338.tmp C:\pos1339.tmp C:\pos133A.tmp C:\pos133B.tmp C:\pos133C.tmp C:\pos133D.tmp C:\pos133E.tmp C:\pos133F.tmp C:\pos134.tmp C:\pos1340.tmp C:\pos1341.tmp C:\pos1342.tmp C:\pos1343.tmp C:\pos1344.tmp C:\pos1345.tmp C:\pos1346.tmp C:\pos1347.tmp C:\pos1348.tmp C:\pos1349.tmp C:\pos134A.tmp C:\pos134B.tmp C:\pos134C.tmp C:\pos134D.tmp C:\pos134E.tmp C:\pos134F.tmp C:\pos135.tmp C:\pos1350.tmp C:\pos1351.tmp C:\pos1352.tmp C:\pos1353.tmp C:\pos1354.tmp C:\pos1355.tmp C:\pos1356.tmp C:\pos1357.tmp C:\pos1358.tmp C:\pos1359.tmp C:\pos135A.tmp C:\pos135B.tmp C:\pos135C.tmp C:\pos135D.tmp C:\pos135E.tmp C:\pos135F.tmp C:\pos136.tmp C:\pos1360.tmp C:\pos1361.tmp C:\pos1362.tmp C:\pos1363.tmp C:\pos1364.tmp C:\pos1365.tmp C:\pos1366.tmp C:\pos1367.tmp C:\pos1368.tmp C:\pos1369.tmp C:\pos136A.tmp C:\pos136B.tmp C:\pos136C.tmp C:\pos136D.tmp C:\pos136E.tmp C:\pos136F.tmp C:\pos137.tmp C:\pos1370.tmp C:\pos1371.tmp C:\pos1372.tmp C:\pos1373.tmp C:\pos1374.tmp C:\pos1375.tmp C:\pos1376.tmp C:\pos1377.tmp C:\pos1378.tmp C:\pos1379.tmp C:\pos137A.tmp C:\pos137B.tmp C:\pos137C.tmp C:\pos137D.tmp C:\pos137E.tmp C:\pos137F.tmp C:\pos138.tmp C:\pos1380.tmp C:\pos1381.tmp C:\pos1382.tmp C:\pos1383.tmp C:\pos1384.tmp C:\pos1385.tmp C:\pos1386.tmp C:\pos1387.tmp C:\pos1388.tmp C:\pos139.tmp C:\pos13A.tmp C:\pos13B.tmp C:\pos13C.tmp C:\pos13D.tmp C:\pos13E.tmp C:\pos13F.tmp C:\pos14.tmp C:\pos140.tmp C:\pos141.tmp C:\pos142.tmp C:\pos143.tmp C:\pos144.tmp C:\pos145.tmp C:\pos146.tmp C:\pos147.tmp C:\pos148.tmp C:\pos149.tmp C:\pos14A.tmp C:\pos14B.tmp C:\pos14C.tmp C:\pos14D.tmp C:\pos14E.tmp C:\pos14F.tmp C:\pos15.tmp C:\pos150.tmp C:\pos151.tmp C:\pos152.tmp C:\pos153.tmp C:\pos154.tmp C:\pos155.tmp C:\pos156.tmp C:\pos157.tmp C:\pos158.tmp C:\pos159.tmp C:\pos15A.tmp C:\pos15B.tmp C:\pos15C.tmp C:\pos15D.tmp C:\pos15E.tmp C:\pos15F.tmp C:\pos16.tmp C:\pos160.tmp C:\pos161.tmp C:\pos162.tmp C:\pos163.tmp C:\pos164.tmp C:\pos165.tmp C:\pos166.tmp C:\pos167.tmp C:\pos168.tmp C:\pos169.tmp C:\pos16A.tmp C:\pos16B.tmp C:\pos16C.tmp C:\pos16D.tmp C:\pos16E.tmp C:\pos16F.tmp C:\pos17.tmp C:\pos170.tmp C:\pos171.tmp C:\pos172.tmp C:\pos173.tmp C:\pos174.tmp C:\pos175.tmp C:\pos176.tmp C:\pos177.tmp C:\pos178.tmp C:\pos179.tmp C:\pos17A.tmp C:\pos17B.tmp C:\pos17C.tmp C:\pos17D.tmp C:\pos17E.tmp C:\pos17F.tmp C:\pos18.tmp C:\pos180.tmp C:\pos181.tmp C:\pos182.tmp C:\pos183.tmp C:\pos184.tmp C:\pos185.tmp C:\pos186.tmp C:\pos187.tmp C:\pos188.tmp C:\pos189.tmp C:\pos18A.tmp C:\pos18B.tmp C:\pos18C.tmp C:\pos18D.tmp C:\pos18E.tmp C:\pos18F.tmp C:\pos19.tmp C:\pos190.tmp C:\pos191.tmp C:\pos192.tmp C:\pos193.tmp C:\pos194.tmp C:\pos195.tmp C:\pos196.tmp C:\pos197.tmp C:\pos198.tmp C:\pos199.tmp C:\pos19A.tmp C:\pos19B.tmp C:\pos19C.tmp C:\pos19D.tmp C:\pos19E.tmp C:\pos19F.tmp C:\pos1A.tmp C:\pos1A0.tmp C:\pos1A1.tmp C:\pos1A2.tmp C:\pos1A3.tmp C:\pos1A4.tmp C:\pos1A5.tmp C:\pos1A6.tmp C:\pos1A7.tmp C:\pos1A8.tmp C:\pos1A9.tmp C:\pos1AA.tmp C:\pos1AB.tmp C:\pos1AC.tmp C:\pos1AD.tmp C:\pos1AE.tmp C:\pos1AF.tmp C:\pos1B.tmp C:\pos1B0.tmp C:\pos1B1.tmp C:\pos1B2.tmp C:\pos1B3.tmp C:\pos1B4.tmp C:\pos1B5.tmp C:\pos1B6.tmp C:\pos1B7.tmp C:\pos1B8.tmp C:\pos1B9.tmp C:\pos1BA.tmp C:\pos1BB.tmp C:\pos1BC.tmp C:\pos1BD.tmp C:\pos1BE.tmp C:\pos1BF.tmp C:\pos1C.tmp C:\pos1C0.tmp C:\pos1C1.tmp C:\pos1C2.tmp C:\pos1C3.tmp C:\pos1C4.tmp C:\pos1C5.tmp C:\pos1C6.tmp C:\pos1C7.tmp C:\pos1C8.tmp C:\pos1C9.tmp C:\pos1CA.tmp C:\pos1CB.tmp C:\pos1CC.tmp C:\pos1CD.tmp C:\pos1CE.tmp C:\pos1CF.tmp C:\pos1D.tmp C:\pos1D0.tmp C:\pos1D1.tmp C:\pos1D2.tmp C:\pos1D3.tmp C:\pos1D4.tmp C:\pos1D5.tmp C:\pos1D6.tmp C:\pos1D7.tmp C:\pos1D8.tmp C:\pos1D9.tmp C:\pos1DA.tmp C:\pos1DB.tmp C:\pos1DC.tmp C:\pos1DD.tmp C:\pos1DE.tmp C:\pos1DF.tmp C:\pos1E.tmp C:\pos1E0.tmp C:\pos1E1.tmp C:\pos1E2.tmp C:\pos1E3.tmp C:\pos1E4.tmp C:\pos1E5.tmp C:\pos1E6.tmp C:\pos1E7.tmp C:\pos1E8.tmp C:\pos1E9.tmp C:\pos1EA.tmp C:\pos1EB.tmp C:\pos1EC.tmp C:\pos1ED.tmp C:\pos1EE.tmp C:\pos1EF.tmp C:\pos1F.tmp C:\pos1F0.tmp C:\pos1F1.tmp C:\pos1F2.tmp C:\pos1F3.tmp C:\pos1F4.tmp C:\pos1F5.tmp C:\pos1F6.tmp C:\pos1F7.tmp C:\pos1F8.tmp C:\pos1F9.tmp C:\pos1FA.tmp C:\pos1FB.tmp C:\pos1FC.tmp C:\pos1FD.tmp C:\pos1FE.tmp C:\pos1FF.tmp C:\pos2.tmp C:\pos20.tmp C:\pos200.tmp C:\pos201.tmp C:\pos202.tmp C:\pos203.tmp C:\pos204.tmp C:\pos205.tmp C:\pos206.tmp C:\pos207.tmp C:\pos208.tmp C:\pos209.tmp C:\pos20A.tmp C:\pos20B.tmp C:\pos20C.tmp C:\pos20D.tmp C:\pos20E.tmp C:\pos20F.tmp C:\pos21.tmp C:\pos210.tmp C:\pos211.tmp C:\pos212.tmp C:\pos213.tmp C:\pos214.tmp C:\pos215.tmp C:\pos216.tmp C:\pos217.tmp C:\pos218.tmp C:\pos219.tmp C:\pos21A.tmp C:\pos21B.tmp C:\pos21C.tmp C:\pos21D.tmp C:\pos21E.tmp C:\pos21F.tmp C:\pos22.tmp C:\pos220.tmp C:\pos221.tmp C:\pos222.tmp C:\pos223.tmp C:\pos224.tmp C:\pos225.tmp C:\pos226.tmp C:\pos227.tmp C:\pos228.tmp C:\pos229.tmp C:\pos22A.tmp C:\pos22B.tmp C:\pos22C.tmp C:\pos22D.tmp C:\pos22E.tmp C:\pos22F.tmp C:\pos23.tmp C:\pos230.tmp C:\pos231.tmp C:\pos232.tmp C:\pos233.tmp C:\pos234.tmp C:\pos235.tmp C:\pos236.tmp C:\pos237.tmp C:\pos238.tmp C:\pos239.tmp C:\pos23A.tmp C:\pos23B.tmp C:\pos23C.tmp C:\pos23D.tmp C:\pos23E.tmp C:\pos23F.tmp C:\pos24.tmp C:\pos240.tmp C:\pos241.tmp C:\pos242.tmp C:\pos243.tmp C:\pos244.tmp C:\pos245.tmp C:\pos246.tmp C:\pos247.tmp C:\pos248.tmp C:\pos249.tmp C:\pos24A.tmp C:\pos24B.tmp C:\pos24C.tmp C:\pos24D.tmp C:\pos24E.tmp C:\pos24F.tmp C:\pos25.tmp C:\pos250.tmp C:\pos251.tmp C:\pos252.tmp C:\pos253.tmp C:\pos254.tmp C:\pos255.tmp C:\pos256.tmp C:\pos257.tmp C:\pos258.tmp C:\pos259.tmp C:\pos25A.tmp C:\pos25B.tmp C:\pos25C.tmp C:\pos25D.tmp C:\pos25E.tmp C:\pos25F.tmp C:\pos26.tmp C:\pos260.tmp C:\pos261.tmp C:\pos262.tmp C:\pos263.tmp C:\pos264.tmp C:\pos265.tmp C:\pos266.tmp C:\pos267.tmp C:\pos268.tmp C:\pos269.tmp C:\pos26A.tmp C:\pos26B.tmp C:\pos26C.tmp C:\pos26D.tmp C:\pos26E.tmp C:\pos26F.tmp C:\pos27.tmp C:\pos270.tmp C:\pos271.tmp C:\pos272.tmp C:\pos273.tmp C:\pos274.tmp C:\pos275.tmp C:\pos276.tmp C:\pos277.tmp C:\pos278.tmp C:\pos279.tmp C:\pos27A.tmp C:\pos27B.tmp C:\pos27C.tmp C:\pos27D.tmp C:\pos27E.tmp C:\pos27F.tmp C:\pos28.tmp C:\pos280.tmp C:\pos281.tmp C:\pos282.tmp C:\pos283.tmp C:\pos284.tmp C:\pos285.tmp C:\pos286.tmp C:\pos287.tmp C:\pos288.tmp C:\pos289.tmp C:\pos28A.tmp C:\pos28B.tmp C:\pos28C.tmp C:\pos28D.tmp C:\pos28E.tmp C:\pos28F.tmp C:\pos29.tmp C:\pos290.tmp C:\pos291.tmp C:\pos292.tmp C:\pos293.tmp C:\pos294.tmp C:\pos295.tmp C:\pos296.tmp C:\pos297.tmp C:\pos298.tmp C:\pos299.tmp C:\pos29A.tmp C:\pos29B.tmp C:\pos29C.tmp C:\pos29D.tmp C:\pos29E.tmp C:\pos29F.tmp C:\pos2A.tmp C:\pos2A0.tmp C:\pos2A1.tmp C:\pos2A2.tmp C:\pos2A3.tmp C:\pos2A4.tmp C:\pos2A5.tmp C:\pos2A6.tmp C:\pos2A7.tmp C:\pos2A8.tmp C:\pos2A9.tmp C:\pos2AA.tmp C:\pos2AB.tmp C:\pos2AC.tmp C:\pos2AD.tmp C:\pos2AE.tmp C:\pos2AF.tmp C:\pos2B.tmp C:\pos2B0.tmp C:\pos2B1.tmp C:\pos2B2.tmp C:\pos2B3.tmp C:\pos2B4.tmp C:\pos2B5.tmp C:\pos2B6.tmp C:\pos2B7.tmp C:\pos2B8.tmp C:\pos2B9.tmp C:\pos2BA.tmp C:\pos2BB.tmp C:\pos2BC.tmp C:\pos2BD.tmp C:\pos2BE.tmp C:\pos2BF.tmp C:\pos2C.tmp C:\pos2C0.tmp C:\pos2C1.tmp C:\pos2C2.tmp C:\pos2C3.tmp C:\pos2C4.tmp C:\pos2C5.tmp C:\pos2C6.tmp C:\pos2C7.tmp C:\pos2C8.tmp C:\pos2C9.tmp C:\pos2CA.tmp C:\pos2CB.tmp C:\pos2CC.tmp C:\pos2CD.tmp C:\pos2CE.tmp C:\pos2CF.tmp C:\pos2D.tmp C:\pos2D0.tmp C:\pos2D1.tmp C:\pos2D2.tmp C:\pos2D3.tmp C:\pos2D4.tmp C:\pos2D5.tmp C:\pos2D6.tmp C:\pos2D7.tmp C:\pos2D8.tmp C:\pos2D9.tmp C:\pos2DA.tmp C:\pos2DB.tmp C:\pos2DC.tmp C:\pos2DD.tmp C:\pos2DE.tmp C:\pos2DF.tmp C:\pos2E.tmp C:\pos2E0.tmp C:\pos2E1.tmp C:\pos2E2.tmp C:\pos2E3.tmp C:\pos2E4.tmp C:\pos2E5.tmp C:\pos2E6.tmp C:\pos2E7.tmp C:\pos2E8.tmp C:\pos2E9.tmp C:\pos2EA.tmp C:\pos2EB.tmp C:\pos2EC.tmp C:\pos2ED.tmp C:\pos2EE.tmp C:\pos2EF.tmp C:\pos2F.tmp C:\pos2F0.tmp C:\pos2F1.tmp C:\pos2F2.tmp C:\pos2F3.tmp C:\pos2F4.tmp C:\pos2F5.tmp C:\pos2F6.tmp C:\pos2F7.tmp C:\pos2F8.tmp C:\pos2F9.tmp C:\pos2FA.tmp C:\pos2FB.tmp C:\pos2FC.tmp C:\pos2FD.tmp C:\pos2FE.tmp C:\pos2FF.tmp C:\pos3.tmp C:\pos30.tmp C:\pos300.tmp C:\pos301.tmp C:\pos302.tmp C:\pos303.tmp C:\pos304.tmp C:\pos305.tmp C:\pos306.tmp C:\pos307.tmp C:\pos308.tmp C:\pos309.tmp C:\pos30A.tmp C:\pos30B.tmp C:\pos30C.tmp C:\pos30D.tmp C:\pos30E.tmp C:\pos30F.tmp C:\pos31.tmp C:\pos310.tmp C:\pos311.tmp C:\pos312.tmp C:\pos313.tmp C:\pos314.tmp C:\pos315.tmp C:\pos316.tmp C:\pos317.tmp C:\pos318.tmp C:\pos319.tmp C:\pos31A.tmp C:\pos31B.tmp C:\pos31C.tmp C:\pos31D.tmp C:\pos31E.tmp C:\pos31F.tmp C:\pos32.tmp C:\pos320.tmp C:\pos321.tmp C:\pos322.tmp C:\pos323.tmp C:\pos324.tmp C:\pos325.tmp C:\pos326.tmp C:\pos327.tmp C:\pos328.tmp C:\pos329.tmp C:\pos32A.tmp C:\pos32B.tmp C:\pos32C.tmp C:\pos32D.tmp C:\pos32E.tmp C:\pos32F.tmp C:\pos33.tmp C:\pos330.tmp C:\pos331.tmp C:\pos332.tmp C:\pos333.tmp C:\pos334.tmp C:\pos335.tmp C:\pos336.tmp C:\pos337.tmp C:\pos338.tmp C:\pos339.tmp C:\pos33A.tmp C:\pos33B.tmp C:\pos33C.tmp C:\pos33D.tmp C:\pos33E.tmp C:\pos33F.tmp C:\pos34.tmp C:\pos340.tmp C:\pos341.tmp C:\pos342.tmp C:\pos343.tmp C:\pos344.tmp C:\pos345.tmp C:\pos346.tmp C:\pos347.tmp C:\pos348.tmp C:\pos349.tmp C:\pos34A.tmp C:\pos34B.tmp C:\pos34C.tmp C:\pos34D.tmp C:\pos34E.tmp C:\pos34F.tmp C:\pos35.tmp C:\pos350.tmp C:\pos351.tmp C:\pos352.tmp C:\pos353.tmp C:\pos354.tmp C:\pos355.tmp C:\pos356.tmp C:\pos357.tmp C:\pos358.tmp C:\pos359.tmp C:\pos35A.tmp C:\pos35B.tmp C:\pos35C.tmp C:\pos35D.tmp C:\pos35E.tmp C:\pos35F.tmp C:\pos36.tmp C:\pos360.tmp C:\pos361.tmp C:\pos362.tmp C:\pos363.tmp C:\pos364.tmp C:\pos365.tmp C:\pos366.tmp C:\pos367.tmp C:\pos368.tmp C:\pos369.tmp C:\pos36A.tmp C:\pos36B.tmp C:\pos36C.tmp C:\pos36D.tmp C:\pos36E.tmp C:\pos36F.tmp C:\pos37.tmp C:\pos370.tmp C:\pos371.tmp C:\pos372.tmp C:\pos373.tmp C:\pos374.tmp C:\pos375.tmp C:\pos376.tmp C:\pos377.tmp C:\pos378.tmp C:\pos379.tmp C:\pos37A.tmp C:\pos37B.tmp C:\pos37C.tmp C:\pos37D.tmp C:\pos37E.tmp C:\pos37F.tmp C:\pos38.tmp C:\pos380.tmp C:\pos381.tmp C:\pos382.tmp C:\pos383.tmp C:\pos384.tmp C:\pos385.tmp C:\pos386.tmp C:\pos387.tmp C:\pos388.tmp C:\pos389.tmp C:\pos38A.tmp C:\pos38B.tmp C:\pos38C.tmp C:\pos38D.tmp C:\pos38E.tmp C:\pos38F.tmp C:\pos39.tmp C:\pos390.tmp C:\pos391.tmp C:\pos392.tmp C:\pos393.tmp C:\pos394.tmp C:\pos395.tmp C:\pos396.tmp C:\pos397.tmp C:\pos398.tmp C:\pos399.tmp C:\pos39A.tmp C:\pos39B.tmp C:\pos39C.tmp C:\pos39D.tmp C:\pos39E.tmp C:\pos39F.tmp C:\pos3A.tmp C:\pos3A0.tmp C:\pos3A1.tmp C:\pos3A2.tmp C:\pos3A3.tmp C:\pos3A4.tmp C:\pos3A5.tmp C:\pos3A6.tmp C:\pos3A7.tmp C:\pos3A8.tmp C:\pos3A9.tmp C:\pos3AA.tmp C:\pos3AB.tmp C:\pos3AC.tmp C:\pos3AD.tmp C:\pos3AE.tmp C:\pos3AF.tmp C:\pos3B.tmp C:\pos3B0.tmp C:\pos3B1.tmp C:\pos3B2.tmp C:\pos3B3.tmp C:\pos3B4.tmp C:\pos3B5.tmp C:\pos3B6.tmp C:\pos3B7.tmp C:\pos3B8.tmp C:\pos3B9.tmp C:\pos3BA.tmp C:\pos3BB.tmp C:\pos3BC.tmp C:\pos3BD.tmp C:\pos3BE.tmp C:\pos3BF.tmp C:\pos3C.tmp C:\pos3C0.tmp C:\pos3C1.tmp C:\pos3C2.tmp C:\pos3C3.tmp C:\pos3C4.tmp C:\pos3C5.tmp C:\pos3C6.tmp C:\pos3C7.tmp C:\pos3C8.tmp C:\pos3C9.tmp C:\pos3CA.tmp C:\pos3CB.tmp C:\pos3CC.tmp C:\pos3CD.tmp C:\pos3CE.tmp C:\pos3CF.tmp C:\pos3D.tmp C:\pos3D0.tmp C:\pos3D1.tmp C:\pos3D2.tmp C:\pos3D3.tmp C:\pos3D4.tmp C:\pos3D5.tmp C:\pos3D6.tmp C:\pos3D7.tmp C:\pos3D8.tmp C:\pos3D9.tmp C:\pos3DA.tmp C:\pos3DB.tmp C:\pos3DC.tmp C:\pos3DD.tmp C:\pos3DE.tmp C:\pos3DF.tmp C:\pos3E.tmp C:\pos3E0.tmp C:\pos3E1.tmp C:\pos3E2.tmp C:\pos3E3.tmp C:\pos3E4.tmp C:\pos3E5.tmp C:\pos3E6.tmp C:\pos3E7.tmp C:\pos3E8.tmp C:\pos3E9.tmp C:\pos3EA.tmp C:\pos3EB.tmp C:\pos3EC.tmp C:\pos3ED.tmp C:\pos3EE.tmp C:\pos3EF.tmp C:\pos3F.tmp C:\pos3F0.tmp C:\pos3F1.tmp C:\pos3F2.tmp C:\pos3F3.tmp C:\pos3F4.tmp C:\pos3F5.tmp C:\pos3F6.tmp C:\pos3F7.tmp C:\pos3F8.tmp C:\pos3F9.tmp C:\pos3FA.tmp C:\pos3FB.tmp C:\pos3FC.tmp C:\pos3FD.tmp C:\pos3FE.tmp C:\pos3FF.tmp C:\pos4.tmp C:\pos40.tmp C:\pos400.tmp C:\pos401.tmp C:\pos402.tmp C:\pos403.tmp C:\pos404.tmp C:\pos405.tmp C:\pos406.tmp C:\pos407.tmp C:\pos408.tmp C:\pos409.tmp C:\pos40A.tmp C:\pos40B.tmp C:\pos40C.tmp C:\pos40D.tmp C:\pos40E.tmp C:\pos40F.tmp C:\pos41.tmp C:\pos410.tmp C:\pos411.tmp C:\pos412.tmp C:\pos413.tmp C:\pos414.tmp C:\pos415.tmp C:\pos416.tmp C:\pos417.tmp C:\pos418.tmp C:\pos419.tmp C:\pos41A.tmp C:\pos41B.tmp C:\pos41C.tmp C:\pos41D.tmp C:\pos41E.tmp C:\pos41F.tmp C:\pos42.tmp C:\pos420.tmp C:\pos421.tmp C:\pos422.tmp C:\pos423.tmp C:\pos424.tmp C:\pos425.tmp C:\pos426.tmp C:\pos427.tmp C:\pos428.tmp C:\pos429.tmp C:\pos42A.tmp C:\pos42B.tmp C:\pos42C.tmp C:\pos42D.tmp C:\pos42E.tmp C:\pos42F.tmp C:\pos43.tmp C:\pos430.tmp C:\pos431.tmp C:\pos432.tmp C:\pos433.tmp C:\pos434.tmp C:\pos435.tmp C:\pos436.tmp C:\pos437.tmp C:\pos438.tmp C:\pos439.tmp C:\pos43A.tmp C:\pos43B.tmp C:\pos43C.tmp C:\pos43D.tmp C:\pos43E.tmp C:\pos43F.tmp C:\pos44.tmp C:\pos440.tmp C:\pos441.tmp C:\pos442.tmp C:\pos443.tmp C:\pos444.tmp C:\pos445.tmp C:\pos446.tmp C:\pos447.tmp C:\pos448.tmp C:\pos449.tmp C:\pos44A.tmp C:\pos44B.tmp C:\pos44C.tmp C:\pos44D.tmp C:\pos44E.tmp C:\pos44F.tmp C:\pos45.tmp C:\pos450.tmp C:\pos451.tmp C:\pos452.tmp C:\pos453.tmp C:\pos454.tmp C:\pos455.tmp C:\pos456.tmp C:\pos457.tmp C:\pos458.tmp C:\pos459.tmp C:\pos45A.tmp C:\pos45B.tmp C:\pos45C.tmp C:\pos45D.tmp C:\pos45E.tmp C:\pos45F.tmp C:\pos46.tmp C:\pos460.tmp C:\pos461.tmp C:\pos462.tmp C:\pos463.tmp C:\pos464.tmp C:\pos465.tmp C:\pos466.tmp C:\pos467.tmp C:\pos468.tmp C:\pos469.tmp C:\pos46A.tmp C:\pos46B.tmp C:\pos46C.tmp C:\pos46D.tmp C:\pos46E.tmp C:\pos46F.tmp C:\pos47.tmp C:\pos470.tmp C:\pos471.tmp C:\pos472.tmp C:\pos473.tmp C:\pos474.tmp C:\pos475.tmp C:\pos476.tmp C:\pos477.tmp C:\pos478.tmp C:\pos479.tmp C:\pos47A.tmp C:\pos47B.tmp C:\pos47C.tmp C:\pos47D.tmp C:\pos47E.tmp C:\pos47F.tmp C:\pos48.tmp C:\pos480.tmp C:\pos481.tmp C:\pos482.tmp C:\pos483.tmp C:\pos484.tmp C:\pos485.tmp C:\pos486.tmp C:\pos487.tmp C:\pos488.tmp C:\pos489.tmp C:\pos48A.tmp C:\pos48B.tmp C:\pos48C.tmp C:\pos48D.tmp C:\pos48E.tmp C:\pos48F.tmp C:\pos49.tmp C:\pos490.tmp C:\pos491.tmp C:\pos492.tmp C:\pos493.tmp C:\pos494.tmp C:\pos495.tmp C:\pos496.tmp C:\pos497.tmp C:\pos498.tmp C:\pos499.tmp C:\pos49A.tmp C:\pos49B.tmp C:\pos49C.tmp C:\pos49D.tmp C:\pos49E.tmp C:\pos49F.tmp C:\pos4A.tmp C:\pos4A0.tmp C:\pos4A1.tmp C:\pos4A2.tmp C:\pos4A3.tmp C:\pos4A4.tmp C:\pos4A5.tmp C:\pos4A6.tmp C:\pos4A7.tmp C:\pos4A8.tmp C:\pos4A9.tmp C:\pos4AA.tmp C:\pos4AB.tmp C:\pos4AC.tmp C:\pos4AD.tmp C:\pos4AE.tmp C:\pos4AF.tmp C:\pos4B.tmp C:\pos4B0.tmp C:\pos4B1.tmp C:\pos4B2.tmp C:\pos4B3.tmp C:\pos4B4.tmp C:\pos4B5.tmp C:\pos4B6.tmp C:\pos4B7.tmp C:\pos4B8.tmp C:\pos4B9.tmp C:\pos4BA.tmp C:\pos4BB.tmp C:\pos4BC.tmp C:\pos4BD.tmp C:\pos4BE.tmp C:\pos4BF.tmp C:\pos4C.tmp C:\pos4C0.tmp C:\pos4C1.tmp C:\pos4C2.tmp C:\pos4C3.tmp C:\pos4C4.tmp C:\pos4C5.tmp C:\pos4C6.tmp C:\pos4C7.tmp C:\pos4C8.tmp C:\pos4C9.tmp C:\pos4CA.tmp C:\pos4CB.tmp C:\pos4CC.tmp C:\pos4CD.tmp C:\pos4CE.tmp C:\pos4CF.tmp C:\pos4D.tmp C:\pos4D0.tmp C:\pos4D1.tmp C:\pos4D2.tmp C:\pos4D3.tmp C:\pos4D4.tmp C:\pos4D5.tmp C:\pos4D6.tmp C:\pos4D7.tmp C:\pos4D8.tmp C:\pos4D9.tmp C:\pos4DA.tmp C:\pos4DB.tmp C:\pos4DC.tmp C:\pos4DD.tmp C:\pos4DE.tmp C:\pos4DF.tmp C:\pos4E.tmp C:\pos4E0.tmp C:\pos4E1.tmp C:\pos4E2.tmp C:\pos4E3.tmp C:\pos4E4.tmp C:\pos4E5.tmp C:\pos4E6.tmp C:\pos4E7.tmp C:\pos4E8.tmp C:\pos4E9.tmp C:\pos4EA.tmp C:\pos4EB.tmp C:\pos4EC.tmp C:\pos4ED.tmp C:\pos4EE.tmp C:\pos4EF.tmp C:\pos4F.tmp C:\pos4F0.tmp C:\pos4F1.tmp C:\pos4F2.tmp C:\pos4F3.tmp C:\pos4F4.tmp C:\pos4F5.tmp C:\pos4F6.tmp C:\pos4F7.tmp C:\pos4F8.tmp C:\pos4F9.tmp C:\pos4FA.tmp C:\pos4FB.tmp C:\pos4FC.tmp C:\pos4FD.tmp C:\pos4FE.tmp C:\pos4FF.tmp C:\pos5.tmp C:\pos50.tmp C:\pos500.tmp C:\pos501.tmp C:\pos502.tmp C:\pos503.tmp C:\pos504.tmp C:\pos505.tmp C:\pos506.tmp C:\pos507.tmp C:\pos508.tmp C:\pos509.tmp C:\pos50A.tmp C:\pos50B.tmp C:\pos50C.tmp C:\pos50D.tmp C:\pos50E.tmp C:\pos50F.tmp C:\pos51.tmp C:\pos510.tmp C:\pos511.tmp C:\pos512.tmp C:\pos513.tmp C:\pos514.tmp C:\pos515.tmp C:\pos516.tmp C:\pos517.tmp C:\pos518.tmp C:\pos519.tmp C:\pos51A.tmp C:\pos51B.tmp C:\pos51C.tmp C:\pos51D.tmp C:\pos51E.tmp C:\pos51F.tmp C:\pos52.tmp C:\pos520.tmp C:\pos521.tmp C:\pos522.tmp C:\pos523.tmp C:\pos524.tmp C:\pos525.tmp C:\pos526.tmp C:\pos527.tmp C:\pos528.tmp C:\pos529.tmp C:\pos52A.tmp C:\pos52B.tmp C:\pos52C.tmp C:\pos52D.tmp C:\pos52E.tmp C:\pos52F.tmp C:\pos53.tmp C:\pos530.tmp C:\pos531.tmp C:\pos532.tmp C:\pos533.tmp C:\pos534.tmp C:\pos535.tmp C:\pos536.tmp C:\pos537.tmp C:\pos538.tmp C:\pos539.tmp C:\pos53A.tmp C:\pos53B.tmp C:\pos53C.tmp C:\pos53D.tmp C:\pos53E.tmp C:\pos53F.tmp C:\pos54.tmp C:\pos540.tmp C:\pos541.tmp C:\pos542.tmp C:\pos543.tmp C:\pos544.tmp C:\pos545.tmp C:\pos546.tmp C:\pos547.tmp C:\pos548.tmp C:\pos549.tmp C:\pos54A.tmp C:\pos54B.tmp C:\pos54C.tmp C:\pos54D.tmp C:\pos54E.tmp C:\pos54F.tmp C:\pos55.tmp C:\pos550.tmp C:\pos551.tmp C:\pos552.tmp C:\pos553.tmp C:\pos554.tmp C:\pos555.tmp C:\pos556.tmp C:\pos557.tmp C:\pos558.tmp C:\pos559.tmp C:\pos55A.tmp C:\pos55B.tmp C:\pos55C.tmp C:\pos55D.tmp C:\pos55E.tmp C:\pos55F.tmp C:\pos56.tmp C:\pos560.tmp C:\pos561.tmp C:\pos562.tmp C:\pos563.tmp C:\pos564.tmp C:\pos565.tmp C:\pos566.tmp C:\pos567.tmp C:\pos568.tmp C:\pos569.tmp C:\pos56A.tmp C:\pos56B.tmp C:\pos56C.tmp C:\pos56D.tmp C:\pos56E.tmp C:\pos56F.tmp C:\pos57.tmp C:\pos570.tmp C:\pos571.tmp C:\pos572.tmp C:\pos573.tmp C:\pos574.tmp C:\pos575.tmp C:\pos576.tmp C:\pos577.tmp C:\pos578.tmp C:\pos579.tmp C:\pos57A.tmp C:\pos57B.tmp C:\pos57C.tmp C:\pos57D.tmp C:\pos57E.tmp C:\pos57F.tmp C:\pos58.tmp C:\pos580.tmp C:\pos581.tmp C:\pos582.tmp C:\pos583.tmp C:\pos584.tmp C:\pos585.tmp C:\pos586.tmp C:\pos587.tmp C:\pos588.tmp C:\pos589.tmp C:\pos58A.tmp C:\pos58B.tmp C:\pos58C.tmp C:\pos58D.tmp C:\pos58E.tmp C:\pos58F.tmp C:\pos59.tmp C:\pos590.tmp C:\pos591.tmp C:\pos592.tmp C:\pos593.tmp C:\pos594.tmp C:\pos595.tmp C:\pos596.tmp C:\pos597.tmp C:\pos598.tmp C:\pos599.tmp C:\pos59A.tmp C:\pos59B.tmp C:\pos59C.tmp C:\pos59D.tmp C:\pos59E.tmp C:\pos59F.tmp C:\pos5A.tmp C:\pos5A0.tmp C:\pos5A1.tmp C:\pos5A2.tmp C:\pos5A3.tmp C:\pos5A4.tmp C:\pos5A5.tmp C:\pos5A6.tmp C:\pos5A7.tmp C:\pos5A8.tmp C:\pos5A9.tmp C:\pos5AA.tmp C:\pos5AB.tmp C:\pos5AC.tmp C:\pos5AD.tmp C:\pos5AE.tmp C:\pos5AF.tmp C:\pos5B.tmp C:\pos5B0.tmp C:\pos5B1.tmp C:\pos5B2.tmp C:\pos5B3.tmp C:\pos5B4.tmp C:\pos5B5.tmp C:\pos5B6.tmp C:\pos5B7.tmp C:\pos5B8.tmp C:\pos5B9.tmp C:\pos5BA.tmp C:\pos5BB.tmp C:\pos5BC.tmp C:\pos5BD.tmp C:\pos5BE.tmp C:\pos5BF.tmp C:\pos5C.tmp C:\pos5C0.tmp C:\pos5C1.tmp C:\pos5C2.tmp C:\pos5C3.tmp C:\pos5C4.tmp C:\pos5C5.tmp C:\pos5C6.tmp C:\pos5C7.tmp C:\pos5C8.tmp C:\pos5C9.tmp C:\pos5CA.tmp C:\pos5CB.tmp C:\pos5CC.tmp C:\pos5CD.tmp C:\pos5CE.tmp C:\pos5CF.tmp C:\pos5D.tmp C:\pos5D0.tmp C:\pos5D1.tmp C:\pos5D2.tmp C:\pos5D3.tmp C:\pos5D4.tmp C:\pos5D5.tmp C:\pos5D6.tmp C:\pos5D7.tmp C:\pos5D8.tmp C:\pos5D9.tmp C:\pos5DA.tmp C:\pos5DB.tmp C:\pos5DC.tmp C:\pos5DD.tmp C:\pos5DE.tmp C:\pos5DF.tmp C:\pos5E.tmp C:\pos5E0.tmp C:\pos5E1.tmp C:\pos5E2.tmp C:\pos5E3.tmp C:\pos5E4.tmp C:\pos5E5.tmp C:\pos5E6.tmp C:\pos5E7.tmp C:\pos5E8.tmp C:\pos5E9.tmp C:\pos5EA.tmp C:\pos5EB.tmp C:\pos5EC.tmp C:\pos5ED.tmp C:\pos5EE.tmp C:\pos5EF.tmp C:\pos5F.tmp C:\pos5F0.tmp C:\pos5F1.tmp C:\pos5F2.tmp C:\pos5F3.tmp C:\pos5F4.tmp C:\pos5F5.tmp C:\pos5F6.tmp C:\pos5F7.tmp C:\pos5F8.tmp C:\pos5F9.tmp C:\pos5FA.tmp C:\pos5FB.tmp C:\pos5FC.tmp C:\pos5FD.tmp C:\pos5FE.tmp C:\pos5FF.tmp C:\pos6.tmp C:\pos60.tmp C:\pos600.tmp C:\pos601.tmp C:\pos602.tmp C:\pos603.tmp C:\pos604.tmp C:\pos605.tmp C:\pos606.tmp C:\pos607.tmp C:\pos608.tmp C:\pos609.tmp C:\pos60A.tmp C:\pos60B.tmp C:\pos60C.tmp C:\pos60D.tmp C:\pos60E.tmp C:\pos60F.tmp C:\pos61.tmp C:\pos610.tmp C:\pos611.tmp C:\pos612.tmp C:\pos613.tmp C:\pos614.tmp C:\pos615.tmp C:\pos616.tmp C:\pos617.tmp C:\pos618.tmp C:\pos619.tmp C:\pos61A.tmp C:\pos61B.tmp C:\pos61C.tmp C:\pos61D.tmp C:\pos61E.tmp C:\pos61F.tmp C:\pos62.tmp C:\pos620.tmp C:\pos621.tmp C:\pos622.tmp C:\pos623.tmp C:\pos624.tmp C:\pos625.tmp C:\pos626.tmp C:\pos627.tmp C:\pos628.tmp C:\pos629.tmp C:\pos62A.tmp C:\pos62B.tmp C:\pos62C.tmp C:\pos62D.tmp C:\pos62E.tmp C:\pos62F.tmp C:\pos63.tmp C:\pos630.tmp C:\pos631.tmp C:\pos632.tmp C:\pos633.tmp C:\pos634.tmp C:\pos635.tmp C:\pos636.tmp C:\pos637.tmp C:\pos638.tmp C:\pos639.tmp C:\pos63A.tmp C:\pos63B.tmp C:\pos63C.tmp C:\pos63D.tmp C:\pos63E.tmp C:\pos63F.tmp C:\pos64.tmp C:\pos640.tmp C:\pos641.tmp C:\pos642.tmp C:\pos643.tmp C:\pos644.tmp C:\pos645.tmp C:\pos646.tmp C:\pos647.tmp C:\pos648.tmp C:\pos649.tmp C:\pos64A.tmp C:\pos64B.tmp C:\pos64C.tmp C:\pos64D.tmp C:\pos64E.tmp C:\pos64F.tmp C:\pos65.tmp C:\pos650.tmp C:\pos651.tmp C:\pos652.tmp C:\pos653.tmp C:\pos654.tmp C:\pos655.tmp C:\pos656.tmp C:\pos657.tmp C:\pos658.tmp C:\pos659.tmp C:\pos65A.tmp C:\pos65B.tmp C:\pos65C.tmp C:\pos65D.tmp C:\pos65E.tmp C:\pos65F.tmp C:\pos66.tmp C:\pos660.tmp C:\pos661.tmp C:\pos662.tmp C:\pos663.tmp C:\pos664.tmp C:\pos665.tmp C:\pos666.tmp C:\pos667.tmp C:\pos668.tmp C:\pos669.tmp C:\pos66A.tmp C:\pos66B.tmp C:\pos66C.tmp C:\pos66D.tmp C:\pos66E.tmp C:\pos66F.tmp C:\pos67.tmp C:\pos670.tmp C:\pos671.tmp C:\pos672.tmp C:\pos673.tmp C:\pos674.tmp C:\pos675.tmp C:\pos676.tmp C:\pos677.tmp C:\pos678.tmp C:\pos679.tmp C:\pos67A.tmp C:\pos67B.tmp C:\pos67C.tmp C:\pos67D.tmp C:\pos67E.tmp C:\pos67F.tmp C:\pos68.tmp C:\pos680.tmp C:\pos681.tmp C:\pos682.tmp C:\pos683.tmp C:\pos684.tmp C:\pos685.tmp C:\pos686.tmp C:\pos687.tmp C:\pos688.tmp C:\pos689.tmp C:\pos68A.tmp C:\pos68B.tmp C:\pos68C.tmp C:\pos68D.tmp C:\pos68E.tmp C:\pos68F.tmp C:\pos69.tmp C:\pos690.tmp C:\pos691.tmp C:\pos692.tmp C:\pos693.tmp C:\pos694.tmp C:\pos695.tmp C:\pos696.tmp C:\pos697.tmp C:\pos698.tmp C:\pos699.tmp C:\pos69A.tmp C:\pos69B.tmp C:\pos69C.tmp C:\pos69D.tmp C:\pos69E.tmp C:\pos69F.tmp C:\pos6A.tmp C:\pos6A0.tmp C:\pos6A1.tmp C:\pos6A2.tmp C:\pos6A3.tmp C:\pos6A4.tmp C:\pos6A5.tmp C:\pos6A6.tmp C:\pos6A7.tmp C:\pos6A8.tmp C:\pos6A9.tmp C:\pos6AA.tmp C:\pos6AB.tmp C:\pos6AC.tmp C:\pos6AD.tmp C:\pos6AE.tmp C:\pos6AF.tmp C:\pos6B.tmp C:\pos6B0.tmp C:\pos6B1.tmp C:\pos6B2.tmp C:\pos6B3.tmp C:\pos6B4.tmp C:\pos6B5.tmp C:\pos6B6.tmp C:\pos6B7.tmp C:\pos6B8.tmp C:\pos6B9.tmp C:\pos6BA.tmp C:\pos6BB.tmp C:\pos6BC.tmp C:\pos6BD.tmp C:\pos6BE.tmp C:\pos6BF.tmp C:\pos6C.tmp C:\pos6C0.tmp C:\pos6C1.tmp C:\pos6C2.tmp C:\pos6C3.tmp C:\pos6C4.tmp C:\pos6C5.tmp C:\pos6C6.tmp C:\pos6C7.tmp C:\pos6C8.tmp C:\pos6C9.tmp C:\pos6CA.tmp C:\pos6CB.tmp C:\pos6CC.tmp C:\pos6CD.tmp C:\pos6CE.tmp C:\pos6CF.tmp C:\pos6D.tmp C:\pos6D0.tmp C:\pos6D1.tmp C:\pos6D2.tmp C:\pos6D3.tmp C:\pos6D4.tmp C:\pos6D5.tmp C:\pos6D6.tmp C:\pos6D7.tmp C:\pos6D8.tmp C:\pos6D9.tmp C:\pos6DA.tmp C:\pos6DB.tmp C:\pos6DC.tmp C:\pos6DD.tmp C:\pos6DE.tmp C:\pos6DF.tmp C:\pos6E.tmp C:\pos6E0.tmp C:\pos6E1.tmp C:\pos6E2.tmp C:\pos6E3.tmp C:\pos6E4.tmp C:\pos6E5.tmp C:\pos6E6.tmp C:\pos6E7.tmp C:\pos6E8.tmp C:\pos6E9.tmp C:\pos6EA.tmp C:\pos6EB.tmp C:\pos6EC.tmp C:\pos6ED.tmp C:\pos6EE.tmp C:\pos6EF.tmp C:\pos6F.tmp C:\pos6F0.tmp C:\pos6F1.tmp C:\pos6F2.tmp C:\pos6F3.tmp C:\pos6F4.tmp C:\pos6F5.tmp C:\pos6F6.tmp C:\pos6F7.tmp C:\pos6F8.tmp C:\pos6F9.tmp C:\pos6FA.tmp C:\pos6FB.tmp C:\pos6FC.tmp C:\pos6FD.tmp C:\pos6FE.tmp C:\pos6FF.tmp C:\pos7.tmp C:\pos70.tmp C:\pos700.tmp C:\pos701.tmp C:\pos702.tmp C:\pos703.tmp C:\pos704.tmp C:\pos705.tmp C:\pos706.tmp C:\pos707.tmp C:\pos708.tmp C:\pos709.tmp C:\pos70A.tmp C:\pos70B.tmp C:\pos70C.tmp C:\pos70D.tmp C:\pos70E.tmp C:\pos70F.tmp C:\pos71.tmp C:\pos710.tmp C:\pos711.tmp C:\pos712.tmp C:\pos713.tmp C:\pos714.tmp C:\pos715.tmp C:\pos716.tmp C:\pos717.tmp C:\pos718.tmp C:\pos719.tmp C:\pos71A.tmp C:\pos71B.tmp C:\pos71C.tmp C:\pos71D.tmp C:\pos71E.tmp C:\pos71F.tmp C:\pos72.tmp C:\pos720.tmp C:\pos721.tmp C:\pos722.tmp C:\pos723.tmp C:\pos724.tmp C:\pos725.tmp C:\pos726.tmp C:\pos727.tmp C:\pos728.tmp C:\pos729.tmp C:\pos72A.tmp C:\pos72B.tmp C:\pos72C.tmp C:\pos72D.tmp C:\pos72E.tmp C:\pos72F.tmp C:\pos73.tmp C:\pos730.tmp C:\pos731.tmp C:\pos732.tmp C:\pos733.tmp C:\pos734.tmp C:\pos735.tmp C:\pos736.tmp C:\pos737.tmp C:\pos738.tmp C:\pos739.tmp C:\pos73A.tmp C:\pos73B.tmp C:\pos73C.tmp C:\pos73D.tmp C:\pos73E.tmp C:\pos73F.tmp C:\pos74.tmp C:\pos740.tmp C:\pos741.tmp C:\pos742.tmp C:\pos743.tmp C:\pos744.tmp C:\pos745.tmp C:\pos746.tmp C:\pos747.tmp C:\pos748.tmp C:\pos749.tmp C:\pos74A.tmp C:\pos74B.tmp C:\pos74C.tmp C:\pos74D.tmp C:\pos74E.tmp C:\pos74F.tmp C:\pos75.tmp C:\pos750.tmp C:\pos751.tmp C:\pos752.tmp C:\pos753.tmp C:\pos754.tmp C:\pos755.tmp C:\pos756.tmp C:\pos757.tmp C:\pos758.tmp C:\pos759.tmp C:\pos75A.tmp C:\pos75B.tmp C:\pos75C.tmp C:\pos75D.tmp C:\pos75E.tmp C:\pos75F.tmp C:\pos76.tmp C:\pos760.tmp C:\pos761.tmp C:\pos762.tmp C:\pos763.tmp C:\pos764.tmp C:\pos765.tmp C:\pos766.tmp C:\pos767.tmp C:\pos768.tmp C:\pos769.tmp C:\pos76A.tmp C:\pos76B.tmp C:\pos76C.tmp C:\pos76D.tmp C:\pos76E.tmp C:\pos76F.tmp C:\pos77.tmp C:\pos770.tmp C:\pos771.tmp C:\pos772.tmp C:\pos773.tmp C:\pos774.tmp C:\pos775.tmp C:\pos776.tmp C:\pos777.tmp C:\pos778.tmp C:\pos779.tmp C:\pos77A.tmp C:\pos77B.tmp C:\pos77C.tmp C:\pos77D.tmp C:\pos77E.tmp C:\pos77F.tmp C:\pos78.tmp C:\pos780.tmp C:\pos781.tmp C:\pos782.tmp C:\pos783.tmp C:\pos784.tmp C:\pos785.tmp C:\pos786.tmp C:\pos787.tmp C:\pos788.tmp C:\pos789.tmp C:\pos78A.tmp C:\pos78B.tmp C:\pos78C.tmp C:\pos78D.tmp C:\pos78E.tmp C:\pos78F.tmp C:\pos79.tmp C:\pos790.tmp C:\pos791.tmp C:\pos792.tmp C:\pos793.tmp C:\pos794.tmp C:\pos795.tmp C:\pos796.tmp C:\pos797.tmp C:\pos798.tmp C:\pos799.tmp C:\pos79A.tmp C:\pos79B.tmp C:\pos79C.tmp C:\pos79D.tmp C:\pos79E.tmp C:\pos79F.tmp C:\pos7A.tmp C:\pos7A0.tmp C:\pos7A1.tmp C:\pos7A2.tmp C:\pos7A3.tmp C:\pos7A4.tmp C:\pos7A5.tmp C:\pos7A6.tmp C:\pos7A7.tmp C:\pos7A8.tmp C:\pos7A9.tmp C:\pos7AA.tmp C:\pos7AB.tmp C:\pos7AC.tmp C:\pos7AD.tmp C:\pos7AE.tmp C:\pos7AF.tmp C:\pos7B.tmp C:\pos7B0.tmp C:\pos7B1.tmp C:\pos7B2.tmp C:\pos7B3.tmp C:\pos7B4.tmp C:\pos7B5.tmp C:\pos7B6.tmp C:\pos7B7.tmp C:\pos7B8.tmp C:\pos7B9.tmp C:\pos7BA.tmp C:\pos7BB.tmp C:\pos7BC.tmp C:\pos7BD.tmp C:\pos7BE.tmp C:\pos7BF.tmp C:\pos7C.tmp C:\pos7C0.tmp C:\pos7C1.tmp C:\pos7C2.tmp C:\pos7C3.tmp C:\pos7C4.tmp C:\pos7C5.tmp C:\pos7C6.tmp C:\pos7C7.tmp C:\pos7C8.tmp C:\pos7C9.tmp C:\pos7CA.tmp C:\pos7CB.tmp C:\pos7CC.tmp C:\pos7CD.tmp C:\pos7CE.tmp C:\pos7CF.tmp C:\pos7D.tmp C:\pos7D0.tmp C:\pos7D1.tmp C:\pos7D2.tmp C:\pos7D3.tmp C:\pos7D4.tmp C:\pos7D5.tmp C:\pos7D6.tmp C:\pos7D7.tmp C:\pos7D8.tmp C:\pos7D9.tmp C:\pos7DA.tmp C:\pos7DB.tmp C:\pos7DC.tmp C:\pos7DD.tmp C:\pos7DE.tmp C:\pos7DF.tmp C:\pos7E.tmp C:\pos7E0.tmp C:\pos7E1.tmp C:\pos7E2.tmp C:\pos7E3.tmp C:\pos7E4.tmp C:\pos7E5.tmp C:\pos7E6.tmp C:\pos7E7.tmp C:\pos7E8.tmp C:\pos7E9.tmp C:\pos7EA.tmp C:\pos7EB.tmp C:\pos7EC.tmp C:\pos7ED.tmp C:\pos7EE.tmp C:\pos7EF.tmp C:\pos7F.tmp C:\pos7F0.tmp C:\pos7F1.tmp C:\pos7F2.tmp C:\pos7F3.tmp C:\pos7F4.tmp C:\pos7F5.tmp C:\pos7F6.tmp C:\pos7F7.tmp C:\pos7F8.tmp C:\pos7F9.tmp C:\pos7FA.tmp C:\pos7FB.tmp C:\pos7FC.tmp C:\pos7FD.tmp C:\pos7FE.tmp C:\pos7FF.tmp C:\pos8.tmp C:\pos80.tmp C:\pos800.tmp C:\pos801.tmp C:\pos802.tmp C:\pos803.tmp C:\pos804.tmp C:\pos805.tmp C:\pos806.tmp C:\pos807.tmp C:\pos808.tmp C:\pos809.tmp C:\pos80A.tmp C:\pos80B.tmp C:\pos80C.tmp C:\pos80D.tmp C:\pos80E.tmp C:\pos80F.tmp C:\pos81.tmp C:\pos810.tmp C:\pos811.tmp C:\pos812.tmp C:\pos813.tmp C:\pos814.tmp C:\pos815.tmp C:\pos816.tmp C:\pos817.tmp C:\pos818.tmp C:\pos819.tmp C:\pos81A.tmp C:\pos81B.tmp C:\pos81C.tmp C:\pos81D.tmp C:\pos81E.tmp C:\pos81F.tmp C:\pos82.tmp C:\pos820.tmp C:\pos821.tmp C:\pos822.tmp C:\pos823.tmp C:\pos824.tmp C:\pos825.tmp C:\pos826.tmp C:\pos827.tmp C:\pos828.tmp C:\pos829.tmp C:\pos82A.tmp C:\pos82B.tmp C:\pos82C.tmp C:\pos82D.tmp C:\pos82E.tmp C:\pos82F.tmp C:\pos83.tmp C:\pos830.tmp C:\pos831.tmp C:\pos832.tmp C:\pos833.tmp C:\pos834.tmp C:\pos835.tmp C:\pos836.tmp C:\pos837.tmp C:\pos838.tmp C:\pos839.tmp C:\pos83A.tmp C:\pos83B.tmp C:\pos83C.tmp C:\pos83D.tmp C:\pos83E.tmp C:\pos83F.tmp C:\pos84.tmp C:\pos840.tmp C:\pos841.tmp C:\pos842.tmp C:\pos843.tmp C:\pos844.tmp C:\pos845.tmp C:\pos846.tmp C:\pos847.tmp C:\pos848.tmp C:\pos849.tmp C:\pos84A.tmp C:\pos84B.tmp C:\pos84C.tmp C:\pos84D.tmp C:\pos84E.tmp C:\pos84F.tmp C:\pos85.tmp C:\pos850.tmp C:\pos851.tmp C:\pos852.tmp C:\pos853.tmp C:\pos854.tmp C:\pos855.tmp C:\pos856.tmp C:\pos857.tmp C:\pos858.tmp C:\pos859.tmp C:\pos85A.tmp C:\pos85B.tmp C:\pos85C.tmp C:\pos85D.tmp C:\pos85E.tmp C:\pos85F.tmp C:\pos86.tmp C:\pos860.tmp C:\pos861.tmp C:\pos862.tmp C:\pos863.tmp C:\pos864.tmp C:\pos865.tmp C:\pos866.tmp C:\pos867.tmp C:\pos868.tmp C:\pos869.tmp C:\pos86A.tmp C:\pos86B.tmp C:\pos86C.tmp C:\pos86D.tmp C:\pos86E.tmp C:\pos86F.tmp C:\pos87.tmp C:\pos870.tmp C:\pos871.tmp C:\pos872.tmp C:\pos873.tmp C:\pos874.tmp C:\pos875.tmp C:\pos876.tmp C:\pos877.tmp C:\pos878.tmp C:\pos879.tmp C:\pos87A.tmp C:\pos87B.tmp C:\pos87C.tmp C:\pos87D.tmp C:\pos87E.tmp C:\pos87F.tmp C:\pos88.tmp C:\pos880.tmp C:\pos881.tmp C:\pos882.tmp C:\pos883.tmp C:\pos884.tmp C:\pos885.tmp C:\pos886.tmp C:\pos887.tmp C:\pos888.tmp C:\pos889.tmp C:\pos88A.tmp C:\pos88B.tmp C:\pos88C.tmp C:\pos88D.tmp C:\pos88E.tmp C:\pos88F.tmp C:\pos89.tmp C:\pos890.tmp C:\pos891.tmp C:\pos892.tmp C:\pos893.tmp C:\pos894.tmp C:\pos895.tmp C:\pos896.tmp C:\pos897.tmp C:\pos898.tmp C:\pos899.tmp C:\pos89A.tmp C:\pos89B.tmp C:\pos89C.tmp C:\pos89D.tmp C:\pos89E.tmp C:\pos89F.tmp C:\pos8A.tmp C:\pos8A0.tmp C:\pos8A1.tmp C:\pos8A2.tmp C:\pos8A3.tmp C:\pos8A4.tmp C:\pos8A5.tmp C:\pos8A6.tmp C:\pos8A7.tmp C:\pos8A8.tmp C:\pos8A9.tmp C:\pos8AA.tmp C:\pos8AB.tmp C:\pos8AC.tmp C:\pos8AD.tmp C:\pos8AE.tmp C:\pos8AF.tmp C:\pos8B.tmp C:\pos8B0.tmp C:\pos8B1.tmp C:\pos8B2.tmp C:\pos8B3.tmp C:\pos8B4.tmp C:\pos8B5.tmp C:\pos8B6.tmp C:\pos8B7.tmp C:\pos8B8.tmp C:\pos8B9.tmp C:\pos8BA.tmp C:\pos8BB.tmp C:\pos8BC.tmp C:\pos8BD.tmp C:\pos8BE.tmp C:\pos8BF.tmp C:\pos8C.tmp C:\pos8C0.tmp C:\pos8C1.tmp C:\pos8C2.tmp C:\pos8C3.tmp C:\pos8C4.tmp C:\pos8C5.tmp C:\pos8C6.tmp C:\pos8C7.tmp C:\pos8C8.tmp C:\pos8C9.tmp C:\pos8CA.tmp C:\pos8CB.tmp C:\pos8CC.tmp C:\pos8CD.tmp C:\pos8CE.tmp C:\pos8CF.tmp C:\pos8D.tmp C:\pos8D0.tmp C:\pos8D1.tmp C:\pos8D2.tmp C:\pos8D3.tmp C:\pos8D4.tmp C:\pos8D5.tmp C:\pos8D6.tmp C:\pos8D7.tmp C:\pos8D8.tmp C:\pos8D9.tmp C:\pos8DA.tmp C:\pos8DB.tmp C:\pos8DC.tmp C:\pos8DD.tmp C:\pos8DE.tmp C:\pos8DF.tmp C:\pos8E.tmp C:\pos8E0.tmp C:\pos8E1.tmp C:\pos8E2.tmp C:\pos8E3.tmp C:\pos8E4.tmp C:\pos8E5.tmp C:\pos8E6.tmp C:\pos8E7.tmp C:\pos8E8.tmp C:\pos8E9.tmp C:\pos8EA.tmp C:\pos8EB.tmp C:\pos8EC.tmp C:\pos8ED.tmp C:\pos8EE.tmp C:\pos8EF.tmp C:\pos8F.tmp C:\pos8F0.tmp C:\pos8F1.tmp C:\pos8F2.tmp C:\pos8F3.tmp C:\pos8F4.tmp C:\pos8F5.tmp C:\pos8F6.tmp C:\pos8F7.tmp C:\pos8F8.tmp C:\pos8F9.tmp C:\pos8FA.tmp C:\pos8FB.tmp C:\pos8FC.tmp C:\pos8FD.tmp C:\pos8FE.tmp C:\pos8FF.tmp C:\pos9.tmp C:\pos90.tmp C:\pos900.tmp C:\pos901.tmp C:\pos902.tmp C:\pos903.tmp C:\pos904.tmp C:\pos905.tmp C:\pos906.tmp C:\pos907.tmp C:\pos908.tmp C:\pos909.tmp C:\pos90A.tmp C:\pos90B.tmp C:\pos90C.tmp C:\pos90D.tmp C:\pos90E.tmp C:\pos90F.tmp C:\pos91.tmp C:\pos910.tmp C:\pos911.tmp C:\pos912.tmp C:\pos913.tmp C:\pos914.tmp C:\pos915.tmp C:\pos916.tmp C:\pos917.tmp C:\pos918.tmp C:\pos919.tmp C:\pos91A.tmp C:\pos91B.tmp C:\pos91C.tmp C:\pos91D.tmp C:\pos91E.tmp C:\pos91F.tmp C:\pos92.tmp C:\pos920.tmp C:\pos921.tmp C:\pos922.tmp C:\pos923.tmp C:\pos924.tmp C:\pos925.tmp C:\pos926.tmp C:\pos927.tmp C:\pos928.tmp C:\pos929.tmp C:\pos92A.tmp C:\pos92B.tmp C:\pos92C.tmp C:\pos92D.tmp C:\pos92E.tmp C:\pos92F.tmp C:\pos93.tmp C:\pos930.tmp C:\pos931.tmp C:\pos932.tmp C:\pos933.tmp C:\pos934.tmp C:\pos935.tmp C:\pos936.tmp C:\pos937.tmp C:\pos938.tmp C:\pos939.tmp C:\pos93A.tmp C:\pos93B.tmp C:\pos93C.tmp C:\pos93D.tmp C:\pos93E.tmp C:\pos93F.tmp C:\pos94.tmp C:\pos940.tmp C:\pos941.tmp C:\pos942.tmp C:\pos943.tmp C:\pos944.tmp C:\pos945.tmp C:\pos946.tmp C:\pos947.tmp C:\pos948.tmp C:\pos949.tmp C:\pos94A.tmp C:\pos94B.tmp C:\pos94C.tmp C:\pos94D.tmp C:\pos94E.tmp C:\pos94F.tmp C:\pos95.tmp C:\pos950.tmp C:\pos951.tmp C:\pos952.tmp C:\pos953.tmp C:\pos954.tmp C:\pos955.tmp C:\pos956.tmp C:\pos957.tmp C:\pos958.tmp C:\pos959.tmp C:\pos95A.tmp C:\pos95B.tmp C:\pos95C.tmp C:\pos95D.tmp C:\pos95E.tmp C:\pos95F.tmp C:\pos96.tmp C:\pos960.tmp C:\pos961.tmp C:\pos962.tmp C:\pos963.tmp C:\pos964.tmp C:\pos965.tmp C:\pos966.tmp C:\pos967.tmp C:\pos968.tmp C:\pos969.tmp C:\pos96A.tmp C:\pos96B.tmp C:\pos96C.tmp C:\pos96D.tmp C:\pos96E.tmp C:\pos96F.tmp C:\pos97.tmp C:\pos970.tmp C:\pos971.tmp C:\pos972.tmp C:\pos973.tmp C:\pos974.tmp C:\pos975.tmp C:\pos976.tmp C:\pos977.tmp C:\pos978.tmp C:\pos979.tmp C:\pos97A.tmp C:\pos97B.tmp C:\pos97C.tmp C:\pos97D.tmp C:\pos97E.tmp C:\pos97F.tmp C:\pos98.tmp C:\pos980.tmp C:\pos981.tmp C:\pos982.tmp C:\pos983.tmp C:\pos984.tmp C:\pos985.tmp C:\pos986.tmp C:\pos987.tmp C:\pos988.tmp C:\pos989.tmp C:\pos98A.tmp C:\pos98B.tmp C:\pos98C.tmp C:\pos98D.tmp C:\pos98E.tmp C:\pos98F.tmp C:\pos99.tmp C:\pos990.tmp C:\pos991.tmp C:\pos992.tmp C:\pos993.tmp C:\pos994.tmp C:\pos995.tmp C:\pos996.tmp C:\pos997.tmp C:\pos998.tmp C:\pos999.tmp C:\pos99A.tmp C:\pos99B.tmp C:\pos99C.tmp C:\pos99D.tmp C:\pos99E.tmp C:\pos99F.tmp C:\pos9A.tmp C:\pos9A0.tmp C:\pos9A1.tmp C:\pos9A2.tmp C:\pos9A3.tmp C:\pos9A4.tmp C:\pos9A5.tmp C:\pos9A6.tmp C:\pos9A7.tmp C:\pos9A8.tmp C:\pos9A9.tmp C:\pos9AA.tmp C:\pos9AB.tmp C:\pos9AC.tmp C:\pos9AD.tmp C:\pos9AE.tmp C:\pos9AF.tmp C:\pos9B.tmp C:\pos9B0.tmp C:\pos9B1.tmp C:\pos9B2.tmp C:\pos9B3.tmp C:\pos9B4.tmp C:\pos9B5.tmp C:\pos9B6.tmp C:\pos9B7.tmp C:\pos9B8.tmp C:\pos9B9.tmp C:\pos9BA.tmp C:\pos9BB.tmp C:\pos9BC.tmp C:\pos9BD.tmp C:\pos9BE.tmp C:\pos9BF.tmp C:\pos9C.tmp C:\pos9C0.tmp C:\pos9C1.tmp C:\pos9C2.tmp C:\pos9C3.tmp C:\pos9C4.tmp C:\pos9C5.tmp C:\pos9C6.tmp C:\pos9C7.tmp C:\pos9C8.tmp C:\pos9C9.tmp C:\pos9CA.tmp C:\pos9CB.tmp C:\pos9CC.tmp C:\pos9CD.tmp C:\pos9CE.tmp C:\pos9CF.tmp C:\pos9D.tmp C:\pos9D0.tmp C:\pos9D1.tmp C:\pos9D2.tmp C:\pos9D3.tmp C:\pos9D4.tmp C:\pos9D5.tmp C:\pos9D6.tmp C:\pos9D7.tmp C:\pos9D8.tmp C:\pos9D9.tmp C:\pos9DA.tmp C:\pos9DB.tmp C:\pos9DC.tmp C:\pos9DD.tmp C:\pos9DE.tmp C:\pos9DF.tmp C:\pos9E.tmp C:\pos9E0.tmp C:\pos9E1.tmp C:\pos9E2.tmp C:\pos9E3.tmp C:\pos9E4.tmp C:\pos9E5.tmp C:\pos9E6.tmp C:\pos9E7.tmp C:\pos9E8.tmp C:\pos9E9.tmp C:\pos9EA.tmp C:\pos9EB.tmp C:\pos9EC.tmp C:\pos9ED.tmp C:\pos9EE.tmp C:\pos9EF.tmp C:\pos9F.tmp C:\pos9F0.tmp C:\pos9F1.tmp C:\pos9F2.tmp C:\pos9F3.tmp C:\pos9F4.tmp C:\pos9F5.tmp C:\pos9F6.tmp C:\pos9F7.tmp C:\pos9F8.tmp C:\pos9F9.tmp C:\pos9FA.tmp C:\pos9FB.tmp C:\pos9FC.tmp C:\pos9FD.tmp C:\pos9FE.tmp C:\pos9FF.tmp C:\posA.tmp C:\posA0.tmp C:\posA00.tmp C:\posA01.tmp C:\posA02.tmp C:\posA03.tmp C:\posA04.tmp C:\posA05.tmp C:\posA06.tmp C:\posA07.tmp C:\posA08.tmp C:\posA09.tmp C:\posA0A.tmp C:\posA0B.tmp C:\posA0C.tmp C:\posA0D.tmp C:\posA0E.tmp C:\posA0F.tmp C:\posA1.tmp C:\posA10.tmp C:\posA11.tmp C:\posA12.tmp C:\posA13.tmp C:\posA14.tmp C:\posA15.tmp C:\posA16.tmp C:\posA17.tmp C:\posA18.tmp C:\posA19.tmp C:\posA1A.tmp C:\posA1B.tmp C:\posA1C.tmp C:\posA1D.tmp C:\posA1E.tmp C:\posA1F.tmp C:\posA2.tmp C:\posA20.tmp C:\posA21.tmp C:\posA22.tmp C:\posA23.tmp C:\posA24.tmp C:\posA25.tmp C:\posA26.tmp C:\posA27.tmp C:\posA28.tmp C:\posA29.tmp C:\posA2A.tmp C:\posA2B.tmp C:\posA2C.tmp C:\posA2D.tmp C:\posA2E.tmp C:\posA2F.tmp C:\posA3.tmp C:\posA30.tmp C:\posA31.tmp C:\posA32.tmp C:\posA33.tmp C:\posA34.tmp C:\posA35.tmp C:\posA36.tmp C:\posA37.tmp C:\posA38.tmp C:\posA39.tmp C:\posA3A.tmp C:\posA3B.tmp C:\posA3C.tmp C:\posA3D.tmp C:\posA3E.tmp C:\posA3F.tmp C:\posA4.tmp C:\posA40.tmp C:\posA41.tmp C:\posA42.tmp C:\posA43.tmp C:\posA44.tmp C:\posA45.tmp C:\posA46.tmp C:\posA47.tmp C:\posA48.tmp C:\posA49.tmp C:\posA4A.tmp C:\posA4B.tmp C:\posA4C.tmp C:\posA4D.tmp C:\posA4E.tmp C:\posA4F.tmp C:\posA5.tmp C:\posA50.tmp C:\posA51.tmp C:\posA52.tmp C:\posA53.tmp C:\posA54.tmp C:\posA55.tmp C:\posA56.tmp C:\posA57.tmp C:\posA58.tmp C:\posA59.tmp C:\posA5A.tmp C:\posA5B.tmp C:\posA5C.tmp C:\posA5D.tmp C:\posA5E.tmp C:\posA5F.tmp C:\posA6.tmp C:\posA60.tmp C:\posA61.tmp C:\posA62.tmp C:\posA63.tmp C:\posA64.tmp C:\posA65.tmp C:\posA66.tmp C:\posA67.tmp C:\posA68.tmp C:\posA69.tmp C:\posA6A.tmp C:\posA6B.tmp C:\posA6C.tmp C:\posA6D.tmp C:\posA6E.tmp C:\posA6F.tmp C:\posA7.tmp C:\posA70.tmp C:\posA71.tmp C:\posA72.tmp C:\posA73.tmp C:\posA74.tmp C:\posA75.tmp C:\posA76.tmp C:\posA77.tmp C:\posA78.tmp C:\posA79.tmp C:\posA7A.tmp C:\posA7B.tmp C:\posA7C.tmp C:\posA7D.tmp C:\posA7E.tmp C:\posA7F.tmp C:\posA8.tmp C:\posA80.tmp C:\posA81.tmp C:\posA82.tmp C:\posA83.tmp C:\posA84.tmp C:\posA85.tmp C:\posA86.tmp C:\posA87.tmp C:\posA88.tmp C:\posA89.tmp C:\posA8A.tmp C:\posA8B.tmp C:\posA8C.tmp C:\posA8D.tmp C:\posA8E.tmp C:\posA8F.tmp C:\posA9.tmp C:\posA90.tmp C:\posA91.tmp C:\posA92.tmp C:\posA93.tmp C:\posA94.tmp C:\posA95.tmp C:\posA96.tmp C:\posA97.tmp C:\posA98.tmp C:\posA99.tmp C:\posA9A.tmp C:\posA9B.tmp C:\posA9C.tmp C:\posA9D.tmp C:\posA9E.tmp C:\posA9F.tmp C:\posAA.tmp C:\posAA0.tmp C:\posAA1.tmp C:\posAA2.tmp C:\posAA3.tmp C:\posAA4.tmp C:\posAA5.tmp C:\posAA6.tmp C:\posAA7.tmp C:\posAA8.tmp C:\posAA9.tmp C:\posAAA.tmp C:\posAAB.tmp C:\posAAC.tmp C:\posAAD.tmp C:\posAAE.tmp C:\posAAF.tmp C:\posAB.tmp C:\posAB0.tmp C:\posAB1.tmp C:\posAB2.tmp C:\posAB3.tmp C:\posAB4.tmp C:\posAB5.tmp C:\posAB6.tmp C:\posAB7.tmp C:\posAB8.tmp C:\posAB9.tmp C:\posABA.tmp C:\posABB.tmp C:\posABC.tmp C:\posABD.tmp C:\posABE.tmp C:\posABF.tmp C:\posAC.tmp C:\posAC0.tmp C:\posAC1.tmp C:\posAC2.tmp C:\posAC3.tmp C:\posAC4.tmp C:\posAC5.tmp C:\posAC6.tmp C:\posAC7.tmp C:\posAC8.tmp C:\posAC9.tmp C:\posACA.tmp C:\posACB.tmp C:\posACC.tmp C:\posACD.tmp C:\posACE.tmp C:\posACF.tmp C:\posAD.tmp C:\posAD0.tmp C:\posAD1.tmp C:\posAD2.tmp C:\posAD3.tmp C:\posAD4.tmp C:\posAD5.tmp C:\posAD6.tmp C:\posAD7.tmp C:\posAD8.tmp C:\posAD9.tmp C:\posADA.tmp C:\posADB.tmp C:\posADC.tmp C:\posADD.tmp C:\posADE.tmp C:\posADF.tmp C:\posAE.tmp C:\posAE0.tmp C:\posAE1.tmp C:\posAE2.tmp C:\posAE3.tmp C:\posAE4.tmp C:\posAE5.tmp C:\posAE6.tmp C:\posAE7.tmp C:\posAE8.tmp C:\posAE9.tmp C:\posAEA.tmp C:\posAEB.tmp C:\posAEC.tmp C:\posAED.tmp C:\posAEE.tmp C:\posAEF.tmp C:\posAF.tmp C:\posAF0.tmp C:\posAF1.tmp C:\posAF2.tmp C:\posAF3.tmp C:\posAF4.tmp C:\posAF5.tmp C:\posAF6.tmp C:\posAF7.tmp C:\posAF8.tmp C:\posAF9.tmp C:\posAFA.tmp C:\posAFB.tmp C:\posAFC.tmp C:\posAFD.tmp C:\posAFE.tmp C:\posAFF.tmp C:\posB.tmp C:\posB0.tmp C:\posB00.tmp C:\posB01.tmp C:\posB02.tmp C:\posB03.tmp C:\posB04.tmp C:\posB05.tmp C:\posB06.tmp C:\posB07.tmp C:\posB08.tmp C:\posB09.tmp C:\posB0A.tmp C:\posB0B.tmp C:\posB0C.tmp C:\posB0D.tmp C:\posB0E.tmp C:\posB0F.tmp C:\posB1.tmp C:\posB10.tmp C:\posB11.tmp C:\posB12.tmp C:\posB13.tmp C:\posB14.tmp C:\posB15.tmp C:\posB16.tmp C:\posB17.tmp C:\posB18.tmp C:\posB19.tmp C:\posB1A.tmp C:\posB1B.tmp C:\posB1C.tmp C:\posB1D.tmp C:\posB1E.tmp C:\posB1F.tmp C:\posB2.tmp C:\posB20.tmp C:\posB21.tmp C:\posB22.tmp C:\posB23.tmp C:\posB24.tmp C:\posB25.tmp C:\posB26.tmp C:\posB27.tmp C:\posB28.tmp C:\posB29.tmp C:\posB2A.tmp C:\posB2B.tmp C:\posB2C.tmp C:\posB2D.tmp C:\posB2E.tmp C:\posB2F.tmp C:\posB3.tmp C:\posB30.tmp C:\posB31.tmp C:\posB32.tmp C:\posB33.tmp C:\posB34.tmp C:\posB35.tmp C:\posB36.tmp C:\posB37.tmp C:\posB38.tmp C:\posB39.tmp C:\posB3A.tmp C:\posB3B.tmp C:\posB3C.tmp C:\posB3D.tmp C:\posB3E.tmp C:\posB3F.tmp C:\posB4.tmp C:\posB40.tmp C:\posB41.tmp C:\posB42.tmp C:\posB43.tmp C:\posB44.tmp C:\posB45.tmp C:\posB46.tmp C:\posB47.tmp C:\posB48.tmp C:\posB49.tmp C:\posB4A.tmp C:\posB4B.tmp C:\posB4C.tmp C:\posB4D.tmp C:\posB4E.tmp C:\posB4F.tmp C:\posB5.tmp C:\posB50.tmp C:\posB51.tmp C:\posB52.tmp C:\posB53.tmp C:\posB54.tmp C:\posB55.tmp C:\posB56.tmp C:\posB57.tmp C:\posB58.tmp C:\posB59.tmp C:\posB5A.tmp C:\posB5B.tmp C:\posB5C.tmp C:\posB5D.tmp C:\posB5E.tmp C:\posB5F.tmp C:\posB6.tmp C:\posB60.tmp C:\posB61.tmp C:\posB62.tmp C:\posB63.tmp C:\posB64.tmp C:\posB65.tmp C:\posB66.tmp C:\posB67.tmp C:\posB68.tmp C:\posB69.tmp C:\posB6A.tmp C:\posB6B.tmp C:\posB6C.tmp C:\posB6D.tmp C:\posB6E.

0

Please download Atribune's VundoFix.exe from the followinf site to your desktop: Vundofix.exe Double-click VundoFix.exe to run it. Click the Scan for Vundo button. Once it's done scanning, click the Remove Vundo button. You will receive a prompt asking if you want to remove the files, click "yes". Once you click yes, your desktop will go blank as it starts removing Vundo. When completed, it will prompt that it will reboot your computer, click "ok". Please post a new Combofix log.

0

Vundo found no errors but here is the log anyway. i have now installed IE7 now. how can i get rid of the fax trying ti instal? ComboFix 08-01-09.2 - IBK 2008-01-18 23:11:59.2 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.115 [GMT 0:00] Running from: C:\Documents and Settings\IBK\Local Settings\Temporary Internet Files\Content.IE5\BUNMZ3E0\ComboFix[1].exe . ((((((((((((((((((((((((( Files Created from 2007-12-18 to 2008-01-18 ))))))))))))))))))))))))))))))) . 2008-01-18 20:28 . 2008-01-18 20:47 <DIR> d-------- C:\Program Files\Microsoft Windows OneCare Live 2008-01-18 18:42 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe 2008-01-17 18:56 . 2007-12-14 01:59 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl 2008-01-16 23:45 . 2008-01-16 23:45 24,576 --a------ C:\WINDOWS\system32\VundoFixSVC.exe 2008-01-16 23:28 . 2008-01-16 23:28 <DIR> d-------- C:\Documents and Settings\IBK\Application Data\McAfee 2008-01-16 23:18 . 2008-01-18 22:45 <DIR> d-------- C:\VundoFix Backups 2008-01-16 20:49 . 2008-01-16 20:49 1,934 --a------ C:\WINDOWS\system32\tmp.reg 2008-01-16 20:25 . 2005-08-25 18:19 115,920 --a------ C:\WINDOWS\system32\MSINET.OCX 2008-01-16 08:30 . 2008-01-16 08:30 <DIR> d-------- C:\Documents and Settings\IBK\Application Data\True Sword 2008-01-16 08:29 . 2008-01-16 09:55 <DIR> d-------- C:\Program Files\True Sword 4 2008-01-16 08:28 . 2008-01-16 23:39 <DIR> d-------- C:\Program Files\RegCure 2008-01-16 07:43 . 2008-01-16 07:43 <DIR> d-------- C:\Program Files\ACW 2008-01-15 23:17 . 2008-01-15 23:17 <DIR> d-------- C:\WINDOWS\system32\bits 2008-01-15 23:15 . 2007-03-29 12:56 409,600 -----c--- C:\WINDOWS\system32\dllcache\qmgr.dll 2008-01-15 23:15 . 2007-03-29 12:56 18,944 -----c--- C:\WINDOWS\system32\dllcache\qmgrprxy.dll 2008-01-15 23:15 . 2007-03-29 12:56 8,192 -----c--- C:\WINDOWS\system32\dllcache\bitsprx2.dll 2008-01-15 23:15 . 2007-03-29 12:56 7,168 -----c--- C:\WINDOWS\system32\dllcache\bitsprx4.dll 2008-01-15 23:15 . 2007-03-29 12:56 7,168 -----c--- C:\WINDOWS\system32\dllcache\bitsprx3.dll 2008-01-15 23:15 . 2007-03-29 12:56 7,168 --------- C:\WINDOWS\system32\bitsprx4.dll 2008-01-15 22:19 . 2008-01-18 22:41 8,386 --a------ C:\WINDOWS\system32\Config.MPF 2008-01-15 22:14 . 2006-03-03 11:07 143,360 --a------ C:\WINDOWS\system32\dunzip32.dll 2008-01-15 22:11 . 2006-12-22 16:02 37,480 --a------ C:\WINDOWS\system32\drivers\mfesmfk.sys 2008-01-15 22:11 . 2006-12-22 16:02 34,184 --a------ C:\WINDOWS\system32\drivers\mfebopk.sys 2008-01-15 22:11 . 2006-12-22 16:02 32,008 --a------ C:\WINDOWS\system32\drivers\mferkdk.sys 2008-01-15 22:10 . 2006-12-22 16:02 170,408 --a------ C:\WINDOWS\system32\drivers\mfehidk.sys 2008-01-15 22:10 . 2007-03-02 14:16 109,608 --a------ C:\WINDOWS\system32\drivers\Mpfp.sys 2008-01-15 22:10 . 2006-12-22 16:02 71,496 --a------ C:\WINDOWS\system32\drivers\mfeavfk.sys 2008-01-15 22:08 . 2008-01-15 22:09 <DIR> d-------- C:\Program Files\McAfee.com 2008-01-15 22:07 . 2008-01-16 23:47 <DIR> d-------- C:\Program Files\McAfee 2008-01-15 22:07 . 2008-01-15 22:13 <DIR> d-------- C:\Program Files\Common Files\McAfee 2008-01-15 22:06 . 2008-01-16 23:28 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\McAfee 2008-01-15 22:05 . 2008-01-15 22:05 <DIR> dr------- C:\Documents and Settings\All Users\Application Data\SalesMon 2008-01-15 18:41 . 2008-01-15 21:18 <DIR> d-------- C:\Program Files\Windows Live Safety Center 2008-01-15 10:00 . 2008-01-15 10:00 15,360 --a------ C:\WINDOWS\system32\ctfmon .exe 2008-01-15 07:57 . 2008-01-15 07:57 <DIR> d-------- C:\WINDOWS\McAfee.com 2008-01-15 00:12 . 2008-01-15 01:21 <DIR> d-------- C:\Program Files\Windows Live 2008-01-15 00:12 . 2008-01-17 20:09 <DIR> d--hsc--- C:\Program Files\Common Files\WindowsLiveInstaller 2008-01-15 00:12 . 2008-01-17 20:01 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller 2008-01-14 19:37 . 2008-01-14 20:19 <DIR> d-------- C:\Program Files\IE Doctor 2008-01-14 18:49 . 2008-01-14 18:50 <DIR> d--h----- C:\WINDOWS\msdownld.tmp 2008-01-14 17:26 . 2008-01-14 17:26 <DIR> d-------- C:\WINDOWS\RegBooster 2008-01-14 17:26 . 2008-01-14 19:38 <DIR> d-------- C:\Program Files\RegBooster . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-01-18 23:14 --------- d-----w C:\Documents and Settings\All Users\Application Data\Kontiki 2008-01-18 22:36 --------- d-----w C:\Program Files\Google 2008-01-18 21:09 --------- d-----w C:\Program Files\Microsoft ActiveSync 2008-01-17 18:55 --------- d-----w C:\Program Files\Java 2008-01-16 09:47 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP 2008-01-16 09:45 --------- d-----w C:\Program Files\iTunes 2008-01-16 07:13 --------- d-----w C:\Program Files\Windows Defender 2008-01-15 22:28 --------- d-----w C:\Program Files\MSN Messenger 2008-01-15 21:24 --------- d-----w C:\Documents and Settings\IBK\Application Data\Skype 2008-01-15 18:23 --------- d-----w C:\Program Files\QuickTime 2008-01-15 18:23 --------- d-----w C:\Program Files\Kontiki 2008-01-14 22:26 --------- d-----w C:\Program Files\Common Files\Symantec Shared 2008-01-14 22:17 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec 2008-01-12 09:51 --------- d-----w C:\Documents and Settings\IBK\Application Data\BitTorrent 2007-12-05 20:03 --------- d-----w C:\Program Files\Wondershare 2007-12-03 21:16 --------- d-----w C:\Program Files\BitTorrent 2007-11-30 08:56 --------- d-----w C:\Program Files\Windows Live Toolbar 2007-11-21 23:41 --------- d-----w C:\Program Files\Skype 2007-11-21 23:41 --------- d-----w C:\Program Files\Common Files\Skype 2007-11-21 23:41 --------- d-----w C:\Documents and Settings\All Users\Application Data\Skype 2007-11-07 09:26 721,920 ----a-w C:\WINDOWS\system32\lsasrv.dll 2007-10-29 22:43 1,287,680 ----a-w C:\WINDOWS\system32\quartz.dll 2007-10-27 17:40 222,720 ----a-w C:\WINDOWS\system32\wmasf.dll 2007-04-17 11:59 42,024 ----a-w C:\Documents and Settings\IBK\Application Data\GDIPFONTCACHEV1.DAT . [code] ----a-w 39,792 2008-01-15 18:26:08 C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl .exe ----a-w 45,056 2008-01-15 18:23:50 C:\Program Files\ATI Technologies\ATI.ACE\cli .exe ----a-w 68,856 2008-01-15 18:26:52 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier .exe ----a-w 49,152 2008-01-15 18:25:08 C:\Program Files\HP\HP Software Update\HPWuSchd .exe ----a-w 241,664 2008-01-15 18:25:17 C:\Program Files\HP\hpcoretech\hpcmpmgr .exe ----a-w 602,182 2008-01-15 18:25:07 C:\Program Files\Intel\Wireless\Bin\ifrmewrk .exe ----a-w 667,718 2008-01-15 18:25:07 C:\Program Files\Intel\Wireless\Bin\ZCfgSvc .exe ----a-w 290,816 2008-01-15 18:26:45 C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig .exe ----a-w 267,048 2008-01-15 18:26:06 C:\Program Files\iTunes\iTunesHelper .exe ----a-w 1,032,640 2008-01-15 18:25:57 C:\Program Files\Kontiki\KHost .exe ----a-w 5,674,352 2008-01-15 18:26:46 C:\Program Files\MSN Messenger\MsnMsgr .exe ----a-w 286,720 2008-01-15 18:26:00 C:\Program Files\QuickTime\qttask .exe ----a-w 22,880,040 2008-01-15 18:28:35 C:\Program Files\Skype\Phone\Skype .exe ----a-w 487,424 2008-01-15 18:25:47 C:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher .exe ----a-w 761,945 2008-01-15 18:23:53 C:\Program Files\Synaptics\SynTP\SynTPEnh .exe ----a-w 65,536 2008-01-15 18:26:26 C:\Program Files\Toshiba\TOSCDSPD\toscdspd .exe ----a-w 352,256 2008-01-15 18:24:00 C:\Program Files\Toshiba\TOSHIBA Applet\thotkey .exe ----a-w 118,784 2008-01-15 18:24:39 C:\Program Files\Toshiba\TOSHIBA Zooming Utility\SmoothView .exe ----a-w 73,728 2008-01-15 18:24:29 C:\Program Files\Toshiba\Tvs\TvsTray .exe ----a-w 866,584 2008-01-15 18:25:51 C:\Program Files\Windows Defender\MSASCui .exe ----a-w 15,360 2008-01-15 10:00:51 C:\WINDOWS\system32\ctfmon .exe ----a-w 122,940 2008-01-15 18:24:58 C:\WINDOWS\system32\DLA\DLACTRLW .exe [/code] ((((((((((((((((((((((((((((( snapshot@2008-01-18_19.19.03.79 ))))))))))))))))))))))))))))))))))))))))) . - 2007-06-13 12:07:11 461,416 -c--a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Owc11\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Owc11.dll + 2008-01-18 21:09:38 464,272 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Owc11\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Owc11.dll - 2006-04-06 09:30:56 64,088 -c--a-w C:\WINDOWS\assembly\GAC\Microsoft.Vbe.Interop\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll + 2008-01-18 21:07:24 66,936 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Vbe.Interop\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll - 2006-04-06 09:30:55 223,800 -c--a-w C:\WINDOWS\assembly\GAC\office\11.0.0.0__71e9bce111e9429c\OFFICE.DLL + 2008-01-18 21:07:19 226,656 ----a-w C:\WINDOWS\assembly\GAC\office\11.0.0.0__71e9bce111e9429c\OFFICE.DLL + 2004-08-04 12:00:00 61,440 -c--a-w C:\WINDOWS\ie7\admparse.dll + 2004-08-04 12:00:00 99,840 -c--a-w C:\WINDOWS\ie7\advpack.dll + 2004-08-04 12:00:00 35,328 -c--a-w C:\WINDOWS\ie7\corpol.dll + 2006-06-03 11:40:49 33,792 -c--a-w C:\WINDOWS\ie7\custsat.dll + 2007-10-11 05:57:30 357,888 -c--a-w C:\WINDOWS\ie7\dxtmsft.dll + 2007-10-11 05:57:30 205,824 -c--a-w C:\WINDOWS\ie7\dxtrans.dll + 2007-10-11 05:57:30 55,808 -c--a-w C:\WINDOWS\ie7\extmgr.dll + 2004-08-04 12:00:00 38,912 -c--a-w C:\WINDOWS\ie7\hmmapi.dll + 2004-08-04 12:00:00 34,304 -c--a-w C:\WINDOWS\ie7\ie4uinit.exe + 2004-08-04 12:00:00 139,264 -c--a-w C:\WINDOWS\ie7\ieakeng.dll + 2004-08-04 12:00:00 216,576 -c--a-w C:\WINDOWS\ie7\ieaksie.dll + 2004-08-04 12:00:00 221,184 -c--a-w C:\WINDOWS\ie7\ieakui.dll + 2004-08-04 12:00:00 323,584 -c--a-w C:\WINDOWS\ie7\iedkcs32.dll + 2007-10-10 10:48:23 18,432 -c--a-w C:\WINDOWS\ie7\iedw.exe + 2004-08-04 12:00:00 81,920 -c--a-w C:\WINDOWS\ie7\ieencode.dll + 2007-10-11 05:57:31 251,904 -c--a-w C:\WINDOWS\ie7\iepeers.dll + 2004-08-04 12:00:00 48,640 -c--a-w C:\WINDOWS\ie7\iernonce.dll + 2004-08-04 12:00:00 62,976 -c--a-w C:\WINDOWS\ie7\iesetup.dll + 2004-08-04 12:00:00 93,184 -c--a-w C:\WINDOWS\ie7\iexplore.exe + 2004-08-04 12:00:00 35,840 -c--a-w C:\WINDOWS\ie7\imgutil.dll + 2007-10-11 05:57:31 96,256 -c--a-w C:\WINDOWS\ie7\inseng.dll + 2007-11-14 07:26:56 450,560 -c--a-w C:\WINDOWS\ie7\jscript.dll + 2007-10-11 05:57:31 16,384 -c--a-w C:\WINDOWS\ie7\jsproxy.dll + 2004-08-04 12:00:00 22,016 -c--a-w C:\WINDOWS\ie7\licmgr10.dll + 2004-08-04 12:00:00 29,184 -c--a-w C:\WINDOWS\ie7\mshta.exe + 2007-10-30 09:55:21 3,065,856 -c--a-w C:\WINDOWS\ie7\mshtml.dll + 2007-10-11 05:57:36 449,024 -c--a-w C:\WINDOWS\ie7\mshtmled.dll + 2004-08-04 12:00:00 56,832 -c--a-w C:\WINDOWS\ie7\mshtmler.dll + 2004-08-04 12:00:00 146,432 -c--a-w C:\WINDOWS\ie7\msls31.dll + 2007-10-11 05:57:36 146,432 -c--a-w C:\WINDOWS\ie7\msrating.dll + 2007-10-11 05:57:37 532,480 -c--a-w C:\WINDOWS\ie7\mstime.dll + 2004-08-04 12:00:00 96,256 -c--a-w C:\WINDOWS\ie7\occache.dll + 2007-10-11 05:57:37 39,424 -c--a-w C:\WINDOWS\ie7\pngfilt.dll + 2007-08-13 18:54:42 32,960 -c--a-w C:\WINDOWS\ie7\spuninst\iecustom.dll + 2007-08-13 18:52:06 66,048 -c--a-w C:\WINDOWS\ie7\spuninst\ieResetIcons.exe + 2006-09-06 17:43:16 213,216 -c--a-w C:\WINDOWS\ie7\spuninst\spuninst.exe + 2006-09-06 17:43:18 371,424 -c--a-w C:\WINDOWS\ie7\spuninst\updspapi.dll + 2004-08-04 12:00:00 37,888 -c--a-w C:\WINDOWS\ie7\url.dll + 2007-10-11 05:57:40 617,984 -c--a-w C:\WINDOWS\ie7\urlmon.dll + 2004-08-04 12:00:00 417,792 -c--a-w C:\WINDOWS\ie7\vbscript.dll + 2007-06-26 15:13:22 851,968 -c--a-w C:\WINDOWS\ie7\vgx.dll + 2004-08-04 12:00:00 276,480 -c--a-w C:\WINDOWS\ie7\webcheck.dll + 2007-10-11 05:57:41 666,112 -c--a-w C:\WINDOWS\ie7\wininet.dll + 2007-03-06 01:22:34 22,752 -c----w C:\WINDOWS\ie7updates\KB938127-IE7\spcustom.dll + 2007-03-06 01:22:36 14,048 -c----w C:\WINDOWS\ie7updates\KB938127-IE7\spmsg.dll + 2007-03-06 01:22:41 213,216 -c----w C:\WINDOWS\ie7updates\KB938127-IE7\spuninst.exe + 2007-03-06 01:22:41 213,216 -c----w C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe + 2007-03-06 01:23:51 371,424 -c----w C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\updspapi.dll + 2007-03-06 01:22:59 716,000 -c----w C:\WINDOWS\ie7updates\KB938127-IE7\update.exe + 2007-03-06 01:23:51 371,424 -c----w C:\WINDOWS\ie7updates\KB938127-IE7\updspapi.dll + 2007-08-13 18:54:10 765,952 -c----w C:\WINDOWS\ie7updates\KB938127-IE7\vgx.dll + 2007-08-13 18:39:00 123,904 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\advpack.dll + 2007-08-13 18:35:38 214,528 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\dxtrans.dll + 2007-08-13 18:54:10 131,584 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\extmgr.dll + 2007-08-13 18:36:26 61,952 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\icardie.dll + 2007-08-13 18:39:06 54,784 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ie4uinit.exe + 2007-08-13 18:39:26 152,064 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieakeng.dll + 2007-08-13 18:39:54 229,376 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieaksie.dll + 2007-08-13 17:56:54 161,792 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieakui.dll + 2007-02-12 16:10:12 2,451,312 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieapfltr.dat + 2007-07-11 12:27:48 383,488 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieapfltr.dll + 2007-08-13 18:39:50 382,976 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\iedkcs32.dll + 2007-08-13 18:54:10 6,049,280 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieframe.dll + 2007-08-13 18:39:10 43,008 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\iernonce.dll + 2007-08-13 18:34:04 266,752 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\iertutil.dll + 2007-08-13 18:39:10 13,312 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieudinit.exe + 2007-08-13 18:43:56 622,080 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\iexplore.exe + 2007-08-13 18:54:10 27,136 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\jsproxy.dll + 2007-08-13 18:54:10 458,752 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\msfeeds.dll + 2007-08-13 18:54:10 50,688 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\msfeedsbs.dll + 2007-08-13 18:54:12 3,578,368 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\mshtml.dll + 2007-08-13 18:54:10 475,648 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\mshtmled.dll + 2007-08-13 18:44:26 192,000 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\msrating.dll + 2007-08-13 18:54:10 670,720 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\mstime.dll + 2007-08-13 18:44:06 101,376 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\occache.dll + 2007-03-06 01:22:34 22,752 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\spcustom.dll + 2007-03-06 01:22:36 14,048 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\spmsg.dll + 2007-03-06 01:22:41 213,216 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\spuninst.exe + 2007-03-06 01:22:41 213,216 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe + 2007-03-06 01:23:51 371,424 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\updspapi.dll + 2007-03-06 01:22:59 716,000 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\update.exe + 2007-03-06 01:23:51 371,424 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\updspapi.dll + 2007-08-13 18:44:30 105,984 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\url.dll + 2007-08-13 18:54:10 1,162,240 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\urlmon.dll + 2007-08-13 18:54:10 231,424 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\webcheck.dll + 2007-08-13 18:54:10 818,688 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\wininet.dll + 2003-07-14 21:57:34 38,968 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\90401A1900063D11C8EF10054038389C\11.0.6360\AUTHZAX.DLL + 2003-07-14 21:53:06 94,768 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\90401A1900063D11C8EF10054038389C\11.0.6360\AW.DLL + 2003-07-14 21:51:44 87,104 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\90401A1900063D11C8EF10054038389C\11.0.6360\MSENCODE.DLL + 2003-07-14 21:52:52 17,464 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\90401A1900063D11C8EF10054038389C\11.0.6360\MSMH.DLL + 2003-07-14 21:57:16 120,888 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\90401A1900063D11C8EF10054038389C\11.0.6360\MSOAUTH.DLL + 2003-07-14 21:52:52 27,704 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\90401A1900063D11C8EF10054038389C\11.0.6360\MSODCW.DLL + 2003-07-14 21:52:56 55,360 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\90401A1900063D11C8EF10054038389C\11.0.6360\MSOHTMED.exe + 2003-07-11 01:15:48 1,292,872 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\90401A1900063D11C8EF10054038389C\11.0.6360\MSONSEXT.DLL + 2003-07-15 02:18:52 376,888 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\90401A1900063D11C8EF10054038389C\11.0.6360\MSORUN.DLL + 2003-07-14 21:52:54 28,224 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\90401A1900063D11C8EF10054038389C\11.0.6360\MSOSTYLE.DLL + 2003-07-14 20:52:52 35,896 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\90401A1900063D11C8EF10054038389C\11.0.6360\MSOSV.DLL + 2003-07-14 21:46:16 42,040 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\90401A1900063D11C8EF10054038389C\11.0.6360\MSOXEV.DLL + 2003-07-14 21:45:12 55,360 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\90401A1900063D11C8EF10054038389C\11.0.6360\MSOXMLED.exe + 2003-07-14 21:45:12 39,488 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\90401A1900063D11C8EF10054038389C\11.0.6360\MSOXMLMF.DLL + 2003-07-14 21:52:58 41,528 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\90401A1900063D11C8EF10054038389C\11.0.6360\MSSH.DLL + 2003-07-14 22:00:54 145,984 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\90401A1900063D11C8EF10054038389C\11.0.6360\MSWEBCAP.DLL + 2003-07-14 20:57:10 56,888 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\90401A1900063D11C8EF10054038389C\11.0.6360\NAME.DLL + 2003-07-14 21:56:52 13,888 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\90401A1900063D11C8EF10054038389C\11.0.6360\NPOFFICE.DLL + 2006-04-06 09:30:55 223,800 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\90401A1900063D11C8EF10054038389C\11.0.6360\OFFICE.DLL + 2003-05-08 20:54:00 77,824 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\90401A1900063D11C8EF10054038389C\11.0.6360\REFEDIT.DLL + 2003-07-14 21:57:08 40,512 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\90401A1900063D11C8EF10054038389C\11.0.6360\REFIEBAR.DLL + 2003-07-14 21:57:08 58,944 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\90401A1900063D11C8EF10054038389C\11.0.6360\SEQCHK10.DLL + 2006-04-06 09:30:56 64,088 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\90401A1900063D11C8EF10054038389C\11.0.6360\VBIDEPIA.DLL + 2003-07-14 21:53:22 46,144 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\9040B30900063D11C8EF10054038389C\11.0.5614\BLNMGRPS.DLL + 2003-07-14 21:57:14 124,480 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\9040B30900063D11C8EF10054038389C\11.0.5614\MSB1CORE.DLL + 2003-07-14 22:12:22 47,872 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\9040B30900063D11C8EF10054038389C\11.0.5614\MSB1XTOR.DLL + 2003-08-16 00:03:42 351,336 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\9040B30900063D11C8EF10054038389C\11.0.5614\MSWARP.DLL + 2007-06-13 12:07:11 461,416 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\9040B30900063D11C8EF10054038389C\11.0.5614\OWC11PIA.DLL + 2003-08-16 00:03:04 174,696 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\9040B30900063D11C8EF10054038389C\11.0.5614\PJCALEND.DLL + 2003-08-16 00:02:46 146,024 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\9040B30900063D11C8EF10054038389C\11.0.5614\PJMSGMGR.DLL + 2003-08-16 00:02:48 166,504 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\9040B30900063D11C8EF10054038389C\11.0.5614\PJMSGSDR.DLL + 2003-07-14 21:57:18 349,248 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\9040B30900063D11C8EF10054038389C\11.0.5614\SELFCERT.exe - 2007-08-14 23:53:19 135,168 -c--a-r C:\WINDOWS\Installer\{903B0409-6000-11D3-8CFE-0150048383C9}\misc.exe + 2008-01-18 21:09:57 135,168 ----a-r C:\WINDOWS\Installer\{903B0409-6000-11D3-8CFE-0150048383C9}\misc.exe - 2007-08-14 23:53:19 4,096 -c--a-r C:\WINDOWS\Installer\{903B0409-6000-11D3-8CFE-0150048383C9}\opwicon.exe + 2008-01-18 21:09:57 4,096 ----a-r C:\WINDOWS\Installer\{903B0409-6000-11D3-8CFE-0150048383C9}\opwicon.exe - 2007-08-14 23:53:19 147,456 -c--a-r C:\WINDOWS\Installer\{903B0409-6000-11D3-8CFE-0150048383C9}\pj11icon.exe + 2008-01-18 21:09:56 147,456 ----a-r C:\WINDOWS\Installer\{903B0409-6000-11D3-8CFE-0150048383C9}\pj11icon.exe - 2007-08-14 23:53:05 57,344 -c--a-r C:\WINDOWS\Installer\{91A10409-6000-11D3-8CFE-0150048383C9}\joticon.exe + 2008-01-18 21:07:30 57,344 ----a-r C:\WINDOWS\Installer\{91A10409-6000-11D3-8CFE-0150048383C9}\joticon.exe - 2007-08-14 23:53:05 135,168 -c--a-r C:\WINDOWS\Installer\{91A10409-6000-11D3-8CFE-0150048383C9}\misc.exe + 2008-01-18 21:07:30 135,168 ----a-r C:\WINDOWS\Installer\{91A10409-6000-11D3-8CFE-0150048383C9}\misc.exe - 2007-08-14 23:53:05 4,096 -c--a-r C:\WINDOWS\Installer\{91A10409-6000-11D3-8CFE-0150048383C9}\opwicon.exe + 2008-01-18 21:07:31 4,096 ----a-r C:\WINDOWS\Installer\{91A10409-6000-11D3-8CFE-0150048383C9}\opwicon.exe + 2008-01-18 21:05:56 3,622 ----a-w C:\WINDOWS\SoftwareDistribution\EventCache\{7DDC62D3-0AE6-4BD0-A070-EEB8939F4C4F}.bin - 2004-08-04 12:00:00 61,440 ----a-w C:\WINDOWS\system32\admparse.dll + 2007-08-13 18:39:20 71,680 ----a-w C:\WINDOWS\system32\admparse.dll - 2004-08-04 12:00:00 99,840 ----a-w C:\WINDOWS\system32\advpack.dll + 2007-10-10 23:55:51 124,928 ----a-w C:\WINDOWS\system32\advpack.dll - 2004-08-04 12:00:00 35,328 ----a-w C:\WINDOWS\system32\corpol.dll + 2007-08-13 18:42:54 17,408 ----a-w C:\WINDOWS\system32\corpol.dll + 2007-08-13 18:39:20 71,680 -c----w C:\WINDOWS\system32\dllcache\admparse.dll + 2007-10-10 23:55:51 124,928 -c----w C:\WINDOWS\system32\dllcache\advpack.dll + 2007-08-13 18:42:54 17,408 -c----w C:\WINDOWS\system32\dllcache\corpol.dll - 2006-06-03 11:40:49 33,792 -c--a-w C:\WINDOWS\system32\dllcache\custsat.dll + 2007-08-13 18:54:10 33,792 -c--a-w C:\WINDOWS\system32\dllcache\custsat.dll - 2007-10-11 05:57:30 357,888 -c--a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll + 2007-08-13 18:35:46 346,624 -c--a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll - 2007-10-11 05:57:30 205,824 -c--a-w C:\WINDOWS\system32\dllcache\dxtrans.dll + 2007-10-10 23:55:51 214,528 -c--a-w C:\WINDOWS\system32\dllcache\dxtrans.dll - 2007-10-11 05:57:30 55,808 -c--a-w C:\WINDOWS\system32\dllcache\extmgr.dll + 2007-10-10 23:55:51 132,608 -c--a-w C:\WINDOWS\system32\dllcache\extmgr.dll + 2007-08-13 18:18:02 60,416 -c----w C:\WINDOWS\system32\dllcache\hmmapi.dll + 2007-10-10 10:59:40 70,656 -c----w C:\WINDOWS\system32\dllcache\ie4uinit.exe + 2007-10-10 23:55:51 153,088 -c----w C:\WINDOWS\system32\dllcache\ieakeng.dll + 2007-10-10 23:55:51 230,400 -c----w C:\WINDOWS\system32\dllcache\ieaksie.dll + 2007-10-10 05:46:55 161,792 -c----w C:\WINDOWS\system32\dllcache\ieakui.dll + 2007-10-10 23:55:52 384,512 -c----w C:\WINDOWS\system32\dllcache\iedkcs32.dll - 2007-10-10 10:48:23 18,432 -c--a-w C:\WINDOWS\system32\dllcache\iedw.exe + 2007-08-13 18:44:02 69,120 -c--a-w C:\WINDOWS\system32\dllcache\iedw.exe + 2007-08-13 18:45:18 78,336 -c----w C:\WINDOWS\system32\dllcache\ieencode.dll - 2007-10-11 05:57:31 251,904 -c--a-w C:\WINDOWS\system32\dllcache\iepeers.dll + 2007-08-13 18:54:10 191,488 -c--a-w C:\WINDOWS\system32\dllcache\iepeers.dll + 2007-10-10 23:55:55 44,544 -c----w C:\WINDOWS\system32\dllcache\iernonce.dll + 2007-08-13 18:39:12 55,296 -c----w C:\WINDOWS\system32\dllcache\iesetup.dll + 2007-10-10 10:59:52 625,152 -c----w C:\WINDOWS\system32\dllcache\iexplore.exe + 2007-08-13 18:36:06 36,352 -c----w C:\WINDOWS\system32\dllcache\imgutil.dll - 2007-10-11 05:57:31 96,256 -c--a-w C:\WINDOWS\system32\dllcache\inseng.dll + 2007-08-13 18:39:02 92,672 -c--a-w C:\WINDOWS\system32\dllcache\inseng.dll - 2007-11-14 07:26:56 450,560 -c--a-w C:\WINDOWS\system32\dllcache\jscript.dll + 2007-08-13 18:38:04 491,520 -c--a-w C:\WINDOWS\system32\dllcache\jscript.dll - 2007-10-11 05:57:31 16,384 -c--a-w C:\WINDOWS\system32\dllcache\jsproxy.dll + 2007-10-10 23:55:56 27,648 -c--a-w C:\WINDOWS\system32\dllcache\jsproxy.dll + 2007-08-13 18:44:18 40,960 -c----w C:\WINDOWS\system32\dllcache\licmgr10.dll + 2007-08-13 18:32:30 45,568 -c----w C:\WINDOWS\system32\dllcache\mshta.exe - 2007-10-30 09:55:21 3,065,856 -c--a-w C:\WINDOWS\system32\dllcache\mshtml.dll + 2007-10-30 23:42:28 3,590,656 -c--a-w C:\WINDOWS\system32\dllcache\mshtml.dll - 2007-10-11 05:57:36 449,024 -c--a-w C:\WINDOWS\system32\dllcache\mshtmled.dll + 2007-10-10 23:55:58 478,208 -c--a-w C:\WINDOWS\system32\dllcache\mshtmled.dll + 2007-08-13 18:01:12 48,128 -c----w C:\WINDOWS\system32\dllcache\mshtmler.dll + 2007-08-13 18:54:10 156,160 -c----w C:\WINDOWS\system32\dllcache\msls31.dll - 2007-10-11 05:57:36 146,432 -c--a-w C:\WINDOWS\system32\dllcache\msrating.dll + 2007-10-10 23:55:58 193,024 -c--a-w C:\WINDOWS\system32\dllcache\msrating.dll - 2007-10-11 05:57:37 532,480 -c--a-w C:\WINDOWS\system32\dllcache\mstime.dll + 2007-10-10 23:55:59 671,232 -c--a-w C:\WINDOWS\system32\dllcache\mstime.dll + 2007-10-10 23:55:59 102,400 -c----w C:\WINDOWS\system32\dllcache\occache.dll - 2007-10-11 05:57:37 39,424 -c--a-w C:\WINDOWS\system32\dllcache\pngfilt.dll + 2007-08-13 18:36:12 44,544 -c--a-w C:\WINDOWS\system32\dllcache\pngfilt.dll + 2007-10-10 23:55:59 105,984 -c----w C:\WINDOWS\system32\dllcache\url.dll - 2007-10-11 05:57:40 617,984 -c--a-w C:\WINDOWS\system32\dllcache\urlmon.dll + 2007-10-10 23:56:00 1,159,680 -c--a-w C:\WINDOWS\system32\dllcache\urlmon.dll + 2007-08-13 18:54:10 413,696 -c----w C:\WINDOWS\system32\dllcache\vbscript.dll - 2007-06-26 15:13:22 851,968 -c--a-w C:\WINDOWS\system32\dllcache\vgx.dll + 2007-07-12 23:31:54 765,952 -c--a-w C:\WINDOWS\system32\dllcache\vgx.dll + 2007-10-10 23:56:00 232,960 -c----w C:\WINDOWS\system32\dllcache\webcheck.dll - 2007-10-11 05:57:41 666,112 -c--a-w C:\WINDOWS\system32\dllcache\wininet.dll + 2007-10-10 23:56:00 824,832 -c--a-w C:\WINDOWS\system32\dllcache\wininet.dll - 2007-10-11 05:57:30 357,888 ----a-w C:\WINDOWS\system32\dxtmsft.dll + 2007-08-13 18:35:46 346,624 ----a-w C:\WINDOWS\system32\dxtmsft.dll - 2007-10-11 05:57:30 205,824 ----a-w C:\WINDOWS\system32\dxtrans.dll + 2007-10-10 23:55:51 214,528 ----a-w C:\WINDOWS\system32\dxtrans.dll - 2007-10-11 05:57:30 55,808 ----a-w C:\WINDOWS\system32\extmgr.dll + 2007-10-10 23:55:51 132,608 ----a-w C:\WINDOWS\system32\extmgr.dll - 2005-03-17 13:39:58 1,146,320 ----a-w C:\WINDOWS\system32\FM20.DLL + 2007-06-06 10:53:34 1,195,888 ----a-w C:\WINDOWS\system32\FM20.DLL - 2003-08-18 14:26:32 25,872 ----a-w C:\WINDOWS\system32\FM20ENU.DLL + 2007-03-22 19:17:04 35,440 ----a-w C:\WINDOWS\system32\FM20ENU.DLL + 2007-10-10 23:55:51 63,488 ----a-w C:\WINDOWS\system32\icardie.dll - 2004-08-04 12:00:00 34,304 ----a-w C:\WINDOWS\system32\ie4uinit.exe + 2007-10-10 10:59:40 70,656 ----a-w C:\WINDOWS\system32\ie4uinit.exe - 2004-08-04 12:00:00 139,264 ----a-w C:\WINDOWS\system32\ieakeng.dll + 2007-10-10 23:55:51 153,088 ----a-w C:\WINDOWS\system32\ieakeng.dll - 2004-08-04 12:00:00 216,576 ----a-w C:\WINDOWS\system32\ieaksie.dll + 2007-10-10 23:55:51 230,400 ----a-w C:\WINDOWS\system32\ieaksie.dll - 2004-08-04 12:00:00 221,184 ----a-w C:\WINDOWS\system32\ieakui.dll + 2007-10-10 05:46:55 161,792 ----a-w C:\WINDOWS\system32\ieakui.dll + 2007-07-01 03:31:33 2,455,488 ----a-w C:\WINDOWS\system32\ieapfltr.dat + 2007-10-10 23:55:52 383,488 ----a-w C:\WINDOWS\system32\ieapfltr.dll - 2004-08-04 12:00:00 323,584 ----a-w C:\WINDOWS\system32\iedkcs32.dll + 2007-10-10 23:55:52 384,512 ----a-w C:\WINDOWS\system32\iedkcs32.dll - 2004-08-04 12:00:00 81,920 ----a-w C:\WINDOWS\system32\ieencode.dll + 2007-08-13 18:45:18 78,336 ----a-w C:\WINDOWS\system32\ieencode.dll + 2007-10-10 23:55:54 6,065,664 ----a-w C:\WINDOWS\system32\ieframe.dll - 2007-10-11 05:57:31 251,904 ----a-w C:\WINDOWS\system32\iepeers.dll + 2007-08-13 18:54:10 191,488 ----a-w C:\WINDOWS\system32\iepeers.dll - 2004-08-04 12:00:00 48,640 ----a-w C:\WINDOWS\system32\iernonce.dll + 2007-10-10 23:55:55 44,544 ----a-w C:\WINDOWS\system32\iernonce.dll + 2007-10-10 23:55:55 267,776 ----a-w C:\WINDOWS\system32\iertutil.dll - 2004-08-04 12:00:00 62,976 ----a-w C:\WINDOWS\system32\iesetup.dll + 2007-08-13 18:39:12 55,296 ----a-w C:\WINDOWS\system32\iesetup.dll + 2007-08-13 18:54:10 180,736 ------w C:\WINDOWS\system32\ieui.dll - 2004-08-04 12:00:00 35,840 ----a-w C:\WINDOWS\system32\imgutil.dll + 2007-08-13 18:36:06 36,352 ----a-w C:\WINDOWS\system32\imgutil.dll - 2007-10-11 05:57:31 96,256 ----a-w C:\WINDOWS\system32\inseng.dll + 2007-08-13 18:39:02 92,672 ----a-w C:\WINDOWS\system32\inseng.dll - 2007-11-14 07:26:56 450,560 ----a-w C:\WINDOWS\system32\jscript.dll + 2007-08-13 18:38:04 491,520 ----a-w C:\WINDOWS\system32\jscript.dll - 2007-10-11 05:57:31 16,384 ----a-w C:\WINDOWS\system32\jsproxy.dll + 2007-10-10 23:55:56 27,648 ----a-w C:\WINDOWS\system32\jsproxy.dll - 2007-04-24 10:32:06 1,485,696 ----a-w C:\WINDOWS\system32\LegitCheckControl.DLL + 2007-10-11 14:12:48 1,468,968 ----a-w C:\WINDOWS\system32\LegitCheckControl.dll - 2004-08-04 12:00:00 22,016 ----a-w C:\WINDOWS\system32\licmgr10.dll + 2007-08-13 18:44:18 40,960 ----a-w C:\WINDOWS\system32\licmgr10.dll + 2007-10-10 23:55:56 459,264 ----a-w C:\WINDOWS\system32\msfeeds.dll + 2007-10-10 23:55:56 52,224 ----a-w C:\WINDOWS\system32\msfeedsbs.dll + 2007-08-13 18:36:40 12,288 ------w C:\WINDOWS\system32\msfeedssync.exe - 2004-08-04 12:00:00 29,184 ----a-w C:\WINDOWS\system32\mshta.exe + 2007-08-13 18:32:30 45,568 ----a-w C:\WINDOWS\system32\mshta.exe - 2007-10-30 09:55:21 3,065,856 ----a-w C:\WINDOWS\system32\mshtml.dll + 2007-10-30 23:42:28 3,590,656 ----a-w C:\WINDOWS\system32\mshtml.dll - 2007-10-11 05:57:36 449,024 ----a-w C:\WINDOWS\system32\mshtmled.dll + 2007-10-10 23:55:58 478,208 ----a-w C:\WINDOWS\system32\mshtmled.dll - 2004-08-04 12:00:00 56,832 ----a-w C:\WINDOWS\system32\mshtmler.dll + 2007-08-13 18:01:12 48,128 ----a-w C:\WINDOWS\system32\mshtmler.dll - 2004-08-04 12:00:00 146,432 ----a-w C:\WINDOWS\system32\msls31.dll + 2007-08-13 18:54:10 156,160 ----a-w C:\WINDOWS\system32\msls31.dll - 2007-10-11 05:57:36 146,432 ----a-w C:\WINDOWS\system32\msrating.dll + 2007-10-10 23:55:58 193,024 ----a-w C:\WINDOWS\system32\msrating.dll - 2007-10-11 05:57:37 532,480 ----a-w C:\WINDOWS\system32\mstime.dll + 2007-10-10 23:55:59 671,232 ----a-w C:\WINDOWS\system32\mstime.dll - 2004-08-04 12:00:00 96,256 ----a-w C:\WINDOWS\system32\occache.dll + 2007-10-10 23:55:59 102,400 ----a-w C:\WINDOWS\system32\occache.dll - 2007-10-11 05:57:37 39,424 ----a-w C:\WINDOWS\system32\pngfilt.dll + 2007-08-13 18:36:12 44,544 ----a-w C:\WINDOWS\system32\pngfilt.dll - 2006-12-10 13:10:02 14,640 ------w C:\WINDOWS\system32\spmsg.dll + 2007-10-08 14:46:18 14,640 ------w C:\WINDOWS\system32\spmsg.dll - 2004-08-04 12:00:00 37,888 ----a-w C:\WINDOWS\system32\url.dll + 2007-10-10 23:55:59 105,984 ----a-w C:\WINDOWS\system32\url.dll - 2007-10-11 05:57:40 617,984 ----a-w C:\WINDOWS\system32\urlmon.dll + 2007-10-10 23:56:00 1,159,680 ----a-w C:\WINDOWS\system32\urlmon.dll - 2004-08-04 12:00:00 417,792 ----a-w C:\WINDOWS\system32\vbscript.dll + 2007-08-13 18:54:10 413,696 ----a-w C:\WINDOWS\system32\vbscript.dll - 2004-08-04 12:00:00 276,480 ----a-w C:\WINDOWS\system32\webcheck.dll + 2007-10-10 23:56:00 232,960 ----a-w C:\WINDOWS\system32\webcheck.dll + 2007-08-13 18:45:16 206,336 ------w C:\WINDOWS\system32\WinFXDocObj.exe - 2007-10-11 05:57:41 666,112 ----a-w C:\WINDOWS\system32\wininet.dll + 2007-10-10 23:56:00 824,832 ----a-w C:\WINDOWS\system32\wininet.dll + 2008-01-18 22:49:51 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_5d8.dat + 2008-01-18 22:40:04 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_64c.dat . -- Snapshot reset to current date -- . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 12:00 15360] "msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [2007-01-19 12:54 5674352] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RTHDCPL"="RTHDCPL.EXE" [2005-12-09 22:49 15691264 C:\WINDOWS\RTHDCPL.exe] "AGRSMMSG"="AGRSMMSG.exe" [2005-10-15 13:29 88203 C:\WINDOWS\agrsmmsg.exe] "TPSMain"="TPSMain.exe" [2005-08-03 13:26 266240 C:\WINDOWS\system32\TPSMain.exe] "NDSTray.exe"="NDSTray.exe" [] "TFncKy"="TFncKy.exe" [] "TDispVol"="TDispVol.exe" [2005-03-11 14:03 73728 C:\WINDOWS\system32\TDispVol.exe] "BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-04 00:56 110592 C:\WINDOWS\system32\bthprops.cpl] "MskAgentexe"="C:\Program Files\McAfee\MSK\MskAgent.exe" [2007-01-17 17:30 152144] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-11-02 18:36 267048] "MBkLogOnHook"="C:\Program Files\McAfee\MBK\LogOnHook.exe" [2007-01-08 11:22 20480] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe" [2007-12-14 03:42 144784] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.exe" [2004-08-04 12:00 15360] "DWQueuedReporting"="C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-02-26 01:01 437160] C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe [2005-12-07 13:01:32] DSLMON.lnk - C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2006-10-26 08:48:44] HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2003-09-16 04:19:24] Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.exe [2001-02-13 00:01:04] Photo Loader supervisory.lnk - C:\Program Files\CASIO\Photo Loader\Plauto.exe [2006-10-26 10:15:43] WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.exe [2007-04-11 10:10:00] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\OneCareMP] @="Service" R3 tosrfec;Bluetooth ACPI from TOSHIBA;C:\WINDOWS\system32\DRIVERS\tosrfec.sys [2005-09-09 13:47] R3 zebrceb;Sony Ericsson Cable Emulation Bus (WDM);C:\WINDOWS\system32\DRIVERS\zebrceb.sys [2006-04-21 09:21] S3 SVRPEDRV;SVRPEDRV;C:\DOCUME~1\IBK\LOCALS~1\Temp\RarSFX0\S10VWF\PEDrv.sys [] S3 zebrbus;Sony Ericsson Composite Device driver;C:\WINDOWS\system32\DRIVERS\zebrbus.sys [2006-04-21 09:21] S3 zebrmdfl;Sony Ericsson Modem Filter;C:\WINDOWS\system32\DRIVERS\zebrmdfl.sys [2006-04-21 09:22] S3 zebrmdm;Sony Ericsson Port (WDM);C:\WINDOWS\system32\DRIVERS\zebrmdm.sys [2006-04-21 09:22] S3 zebrmdmc;Sony Ericsson mRouter Port (WDM);C:\WINDOWS\system32\DRIVERS\zebrmdmc.sys [2006-04-21 09:22] S3 zebrsce;Sony Ericsson PC-Connect Port;C:\WINDOWS\system32\DRIVERS\zebrsce.sys [2006-04-21 09:22] . Contents of the 'Scheduled Tasks' folder "2008-01-16 20:14:14 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe "2008-01-18 23:00:01 C:\WINDOWS\Tasks\B14D9FF3918A1107.job" - c:\docume~1\ibk\applic~1\loudax~1\soapfirstextra.exe "2008-01-18 22:26:06 C:\WINDOWS\Tasks\Check Updates for Windows Live Toolbar.job" - C:\Program Files\Windows Live Toolbar\MSNTBUP.exe "2008-01-15 22:09:20 C:\WINDOWS\Tasks\McDefragTask.job" - c:\program files\mcafee\mqc\QcConsol.exe' "2008-01-15 22:09:18 C:\WINDOWS\Tasks\McQcTask.job" - c:\program files\mcafee\mqc\QcConsol.exe "2008-01-18 22:41:51 C:\WINDOWS\Tasks\RegCure Program Check.job" - C:\Program Files\RegCure\RegCure.exe "2008-01-16 08:28:43 C:\WINDOWS\Tasks\RegCure.job" - C:\Program Files\RegCure\RegCure.exe . ************************************************************************** catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-01-18 23:17:11 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- PROCESS: C:\WINDOWS\explorer.exe [6.00.2900.3156] -> C:\WINDOWS\system32\TDispVol.dll . Completion time: 2008-01-18 23:19:22 ComboFix-quarantined-files.txt 2008-01-18 23:19:17 ComboFix2.txt 2008-01-18 19:19:48 . 2008-01-18 22:17:07 --- E O F ---

0

Looks a lot better, looks like one more baddie (a new one) named lop. Download Deljob.exe from the following link and save it on your desktop. http://home.hetnet.nl/~stefsmeenk/deljob.exe Doubleclick Deljob.exe. A log, (logit.txt) should open afterwards. This log will be present on your desktop. Post the that log in your next post please along with one more combofix log.

0

getting there i hope. File(s) moved to C:\deljob B14D9FF3918A1107.job Files remaining after cleaning AppleSoftwareUpdate.job Check Updates for Windows Live Toolbar.job McDefragTask.job McQcTask.job RegCure Program Check.job RegCure.job App data folders Volume in drive C has no label. Volume Serial Number is B016-B584 Directory of C:\Documents and Settings\IBK\Application Data 18/01/2008 20:46 <DIR> . 18/01/2008 20:46 <DIR> .. 14/01/2008 20:05 <DIR> Adobe 21/12/2006 16:33 <DIR> AdobeUM 17/08/2007 09:15 <DIR> APPLEC~1 Apple Computer 15/04/2006 09:50 <DIR> ATI 12/01/2008 09:51 <DIR> BITTOR~1 BitTorrent 14/01/2007 16:46 <DIR> DivX 26/01/2007 12:21 <DIR> Google 28/04/2007 19:59 <DIR> Help 15/04/2006 09:50 <DIR> IDENTI~1 Identities 26/10/2006 08:31 <DIR> Intel 06/11/2006 07:33 <DIR> INTERV~1 InterVideo 27/07/2007 20:37 <DIR> LOUDAX~1 Loudaxisbind 26/10/2006 08:50 <DIR> MACROM~1 Macromedia 16/01/2008 23:28 <DIR> McAfee 16/01/2008 07:40 <DIR> MICROS~1 Microsoft 17/04/2007 21:25 <DIR> Mozilla 15/01/2008 21:24 <DIR> Skype 15/04/2006 09:50 <DIR> Sonic 10/04/2007 23:16 <DIR> SONYER~1 Sony Ericsson 12/11/2006 13:11 <DIR> Sun 10/04/2007 23:28 <DIR> Teleca 23/11/2006 22:49 <DIR> toshiba 16/01/2008 08:30 <DIR> TRUESW~1 True Sword 0 File(s) 0 bytes 25 Dir(s) 13,323,595,776 bytes free Volume in drive C has no label. Volume Serial Number is B016-B584 Directory of C:\Documents and Settings\All Users\Application Data 18/01/2008 20:46 <DIR> . 18/01/2008 20:46 <DIR> .. 21/10/2007 09:09 <DIR> Adobe 17/08/2007 09:10 <DIR> Apple 17/08/2007 09:14 <DIR> APPLEC~1 Apple Computer 28/06/2007 00:53 <DIR> Avg7 18/08/2007 10:17 <DIR> CanonBJ 12/10/2007 22:59 <DIR> Channel4 18/01/2008 22:36 <DIR> Google 26/10/2006 08:32 <DIR> Intel 19/01/2008 10:40 <DIR> Kontiki 16/01/2008 23:28 <DIR> McAfee 18/01/2008 20:46 <DIR> MICROS~1 Microsoft 01/06/2007 13:18 <DIR> NEWVCN~1 NewVcNounKeep 26/10/2006 13:54 <DIR> PANASO~1 Panasonic 15/01/2008 22:05 <DIR> SalesMon 15/04/2006 09:51 <DIR> SBSI 21/11/2007 23:41 <DIR> Skype 10/04/2007 23:16 <DIR> SONYER~1 Sony Ericsson 14/01/2008 22:17 <DIR> Symantec 10/04/2007 23:15 <DIR> Teleca 16/01/2008 09:47 <DIR> TEMP 15/04/2006 09:51 <DIR> WINDOW~1 Windows Genuine Advantage 26/10/2006 10:10 <DIR> WINDOW~2 Windows Live Toolbar 23/05/2007 23:12 <DIR> WinZip 17/01/2008 20:01 <DIR> WLINST~1 WLInstaller 14/03/2007 15:31 <DIR> Zylom 0 File(s) 0 bytes 27 Dir(s) 13,323,595,776 bytes free ComboFix 08-01-09.2 - IBK 2008-01-19 10:43:32.3 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.160 [GMT 0:00] Running from: C:\Documents and Settings\IBK\Desktop\ComboFix.exe . ((((((((((((((((((((((((( Files Created from 2007-12-19 to 2008-01-19 ))))))))))))))))))))))))))))))) . 2008-01-19 10:40 . 2008-01-19 10:40 <DIR> d-------- C:\deljob 2008-01-18 20:28 . 2008-01-18 20:47 <DIR> d-------- C:\Program Files\Microsoft Windows OneCare Live 2008-01-18 18:42 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe 2008-01-17 18:56 . 2007-12-14 01:59 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl 2008-01-16 23:45 . 2008-01-16 23:45 24,576 --a------ C:\WINDOWS\system32\VundoFixSVC.exe 2008-01-16 23:28 . 2008-01-16 23:28 <DIR> d-------- C:\Documents and Settings\IBK\Application Data\McAfee 2008-01-16 23:18 . 2008-01-18 22:45 <DIR> d-------- C:\VundoFix Backups 2008-01-16 20:49 . 2008-01-16 20:49 1,934 --a------ C:\WINDOWS\system32\tmp.reg 2008-01-16 20:25 . 2005-08-25 18:19 115,920 --a------ C:\WINDOWS\system32\MSINET.OCX 2008-01-16 08:30 . 2008-01-16 08:30 <DIR> d-------- C:\Documents and Settings\IBK\Application Data\True Sword 2008-01-16 08:29 . 2008-01-16 09:55 <DIR> d-------- C:\Program Files\True Sword 4 2008-01-16 08:28 . 2008-01-16 23:39 <DIR> d-------- C:\Program Files\RegCure 2008-01-16 07:43 . 2008-01-16 07:43 <DIR> d-------- C:\Program Files\ACW 2008-01-15 23:17 . 2008-01-15 23:17 <DIR> d-------- C:\WINDOWS\system32\bits 2008-01-15 23:15 . 2007-03-29 12:56 409,600 -----c--- C:\WINDOWS\system32\dllcache\qmgr.dll 2008-01-15 23:15 . 2007-03-29 12:56 18,944 -----c--- C:\WINDOWS\system32\dllcache\qmgrprxy.dll 2008-01-15 23:15 . 2007-03-29 12:56 8,192 -----c--- C:\WINDOWS\system32\dllcache\bitsprx2.dll 2008-01-15 23:15 . 2007-03-29 12:56 7,168 -----c--- C:\WINDOWS\system32\dllcache\bitsprx4.dll 2008-01-15 23:15 . 2007-03-29 12:56 7,168 -----c--- C:\WINDOWS\system32\dllcache\bitsprx3.dll 2008-01-15 23:15 . 2007-03-29 12:56 7,168 --------- C:\WINDOWS\system32\bitsprx4.dll 2008-01-15 22:19 . 2008-01-19 10:32 8,386 --a------ C:\WINDOWS\system32\Config.MPF 2008-01-15 22:14 . 2006-03-03 11:07 143,360 --a------ C:\WINDOWS\system32\dunzip32.dll 2008-01-15 22:11 . 2006-12-22 16:02 37,480 --a------ C:\WINDOWS\system32\drivers\mfesmfk.sys 2008-01-15 22:11 . 2006-12-22 16:02 34,184 --a------ C:\WINDOWS\system32\drivers\mfebopk.sys 2008-01-15 22:11 . 2006-12-22 16:02 32,008 --a------ C:\WINDOWS\system32\drivers\mferkdk.sys 2008-01-15 22:10 . 2006-12-22 16:02 170,408 --a------ C:\WINDOWS\system32\drivers\mfehidk.sys 2008-01-15 22:10 . 2007-03-02 14:16 109,608 --a------ C:\WINDOWS\system32\drivers\Mpfp.sys 2008-01-15 22:10 . 2006-12-22 16:02 71,496 --a------ C:\WINDOWS\system32\drivers\mfeavfk.sys 2008-01-15 22:08 . 2008-01-15 22:09 <DIR> d-------- C:\Program Files\McAfee.com 2008-01-15 22:07 . 2008-01-16 23:47 <DIR> d-------- C:\Program Files\McAfee 2008-01-15 22:07 . 2008-01-15 22:13 <DIR> d-------- C:\Program Files\Common Files\McAfee 2008-01-15 22:06 . 2008-01-16 23:28 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\McAfee 2008-01-15 22:05 . 2008-01-15 22:05 <DIR> dr------- C:\Documents and Settings\All Users\Application Data\SalesMon 2008-01-15 18:41 . 2008-01-15 21:18 <DIR> d-------- C:\Program Files\Windows Live Safety Center 2008-01-15 10:00 . 2008-01-15 10:00 15,360 --a------ C:\WINDOWS\system32\ctfmon .exe 2008-01-15 07:57 . 2008-01-15 07:57 <DIR> d-------- C:\WINDOWS\McAfee.com 2008-01-15 00:12 . 2008-01-15 01:21 <DIR> d-------- C:\Program Files\Windows Live 2008-01-15 00:12 . 2008-01-17 20:09 <DIR> d--hsc--- C:\Program Files\Common Files\WindowsLiveInstaller 2008-01-15 00:12 . 2008-01-17 20:01 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller 2008-01-14 19:37 . 2008-01-14 20:19 <DIR> d-------- C:\Program Files\IE Doctor 2008-01-14 18:49 . 2008-01-14 18:50 <DIR> d--h----- C:\WINDOWS\msdownld.tmp 2008-01-14 17:26 . 2008-01-14 17:26 <DIR> d-------- C:\WINDOWS\RegBooster 2008-01-14 17:26 . 2008-01-14 19:38 <DIR> d-------- C:\Program Files\RegBooster . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-01-19 10:48 --------- d-----w C:\Documents and Settings\All Users\Application Data\Kontiki 2008-01-18 22:36 --------- d-----w C:\Program Files\Google 2008-01-18 21:09 --------- d-----w C:\Program Files\Microsoft ActiveSync 2008-01-17 18:55 --------- d-----w C:\Program Files\Java 2008-01-16 09:47 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP 2008-01-16 09:45 --------- d-----w C:\Program Files\iTunes 2008-01-16 07:13 --------- d-----w C:\Program Files\Windows Defender 2008-01-15 22:28 --------- d-----w C:\Program Files\MSN Messenger 2008-01-15 21:24 --------- d-----w C:\Documents and Settings\IBK\Application Data\Skype 2008-01-15 18:23 --------- d-----w C:\Program Files\QuickTime 2008-01-15 18:23 --------- d-----w C:\Program Files\Kontiki 2008-01-14 22:26 --------- d-----w C:\Program Files\Common Files\Symantec Shared 2008-01-14 22:17 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec 2008-01-12 09:51 --------- d-----w C:\Documents and Settings\IBK\Application Data\BitTorrent 2007-12-05 20:03 --------- d-----w C:\Program Files\Wondershare 2007-12-03 21:16 --------- d-----w C:\Program Files\BitTorrent 2007-11-30 08:56 --------- d-----w C:\Program Files\Windows Live Toolbar 2007-11-21 23:41 --------- d-----w C:\Program Files\Skype 2007-11-21 23:41 --------- d-----w C:\Program Files\Common Files\Skype 2007-11-21 23:41 --------- d-----w C:\Documents and Settings\All Users\Application Data\Skype 2007-11-07 09:26 721,920 ----a-w C:\WINDOWS\system32\lsasrv.dll 2007-10-29 22:43 1,287,680 ----a-w C:\WINDOWS\system32\quartz.dll 2007-10-27 17:40 222,720 ----a-w C:\WINDOWS\system32\wmasf.dll 2007-04-17 11:59 42,024 ----a-w C:\Documents and Settings\IBK\Application Data\GDIPFONTCACHEV1.DAT . [code] ----a-w 39,792 2008-01-15 18:26:08 C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl .exe ----a-w 45,056 2008-01-15 18:23:50 C:\Program Files\ATI Technologies\ATI.ACE\cli .exe ----a-w 68,856 2008-01-15 18:26:52 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier .exe ----a-w 49,152 2008-01-15 18:25:08 C:\Program Files\HP\HP Software Update\HPWuSchd .exe ----a-w 241,664 2008-01-15 18:25:17 C:\Program Files\HP\hpcoretech\hpcmpmgr .exe ----a-w 602,182 2008-01-15 18:25:07 C:\Program Files\Intel\Wireless\Bin\ifrmewrk .exe ----a-w 667,718 2008-01-15 18:25:07 C:\Program Files\Intel\Wireless\Bin\ZCfgSvc .exe ----a-w 290,816 2008-01-15 18:26:45 C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig .exe ----a-w 267,048 2008-01-15 18:26:06 C:\Program Files\iTunes\iTunesHelper .exe ----a-w 1,032,640 2008-01-15 18:25:57 C:\Program Files\Kontiki\KHost .exe ----a-w 5,674,352 2008-01-15 18:26:46 C:\Program Files\MSN Messenger\MsnMsgr .exe ----a-w 286,720 2008-01-15 18:26:00 C:\Program Files\QuickTime\qttask .exe ----a-w 22,880,040 2008-01-15 18:28:35 C:\Program Files\Skype\Phone\Skype .exe ----a-w 487,424 2008-01-15 18:25:47 C:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher .exe ----a-w 761,945 2008-01-15 18:23:53 C:\Program Files\Synaptics\SynTP\SynTPEnh .exe ----a-w 65,536 2008-01-15 18:26:26 C:\Program Files\Toshiba\TOSCDSPD\toscdspd .exe ----a-w 352,256 2008-01-15 18:24:00 C:\Program Files\Toshiba\TOSHIBA Applet\thotkey .exe ----a-w 118,784 2008-01-15 18:24:39 C:\Program Files\Toshiba\TOSHIBA Zooming Utility\SmoothView .exe ----a-w 73,728 2008-01-15 18:24:29 C:\Program Files\Toshiba\Tvs\TvsTray .exe ----a-w 866,584 2008-01-15 18:25:51 C:\Program Files\Windows Defender\MSASCui .exe ----a-w 15,360 2008-01-15 10:00:51 C:\WINDOWS\system32\ctfmon .exe ----a-w 122,940 2008-01-15 18:24:58 C:\WINDOWS\system32\DLA\DLACTRLW .exe [/code] ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 12:00 15360] "msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [2007-01-19 12:54 5674352] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RTHDCPL"="RTHDCPL.EXE" [2005-12-09 22:49 15691264 C:\WINDOWS\RTHDCPL.exe] "AGRSMMSG"="AGRSMMSG.exe" [2005-10-15 13:29 88203 C:\WINDOWS\agrsmmsg.exe] "TPSMain"="TPSMain.exe" [2005-08-03 13:26 266240 C:\WINDOWS\system32\TPSMain.exe] "NDSTray.exe"="NDSTray.exe" [] "TFncKy"="TFncKy.exe" [] "TDispVol"="TDispVol.exe" [2005-03-11 14:03 73728 C:\WINDOWS\system32\TDispVol.exe] "BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-04 00:56 110592 C:\WINDOWS\system32\bthprops.cpl] "MskAgentexe"="C:\Program Files\McAfee\MSK\MskAgent.exe" [2007-01-17 17:30 152144] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-11-02 18:36 267048] "MBkLogOnHook"="C:\Program Files\McAfee\MBK\LogOnHook.exe" [2007-01-08 11:22 20480] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe" [2007-12-14 03:42 144784] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.exe" [2004-08-04 12:00 15360] "DWQueuedReporting"="C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-02-26 01:01 437160] C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe [2005-12-07 13:01:32] DSLMON.lnk - C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2006-10-26 08:48:44] HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2003-09-16 04:19:24] Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.exe [2001-02-13 00:01:04] Photo Loader supervisory.lnk - C:\Program Files\CASIO\Photo Loader\Plauto.exe [2006-10-26 10:15:43] WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.exe [2007-04-11 10:10:00] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\OneCareMP] @="Service" R3 tosrfec;Bluetooth ACPI from TOSHIBA;C:\WINDOWS\system32\DRIVERS\tosrfec.sys [2005-09-09 13:47] R3 zebrceb;Sony Ericsson Cable Emulation Bus (WDM);C:\WINDOWS\system32\DRIVERS\zebrceb.sys [2006-04-21 09:21] S3 SVRPEDRV;SVRPEDRV;C:\DOCUME~1\IBK\LOCALS~1\Temp\RarSFX0\S10VWF\PEDrv.sys [] S3 zebrbus;Sony Ericsson Composite Device driver;C:\WINDOWS\system32\DRIVERS\zebrbus.sys [2006-04-21 09:21] S3 zebrmdfl;Sony Ericsson Modem Filter;C:\WINDOWS\system32\DRIVERS\zebrmdfl.sys [2006-04-21 09:22] S3 zebrmdm;Sony Ericsson Port (WDM);C:\WINDOWS\system32\DRIVERS\zebrmdm.sys [2006-04-21 09:22] S3 zebrmdmc;Sony Ericsson mRouter Port (WDM);C:\WINDOWS\system32\DRIVERS\zebrmdmc.sys [2006-04-21 09:22] S3 zebrsce;Sony Ericsson PC-Connect Port;C:\WINDOWS\system32\DRIVERS\zebrsce.sys [2006-04-21 09:22] . Contents of the 'Scheduled Tasks' folder "2008-01-16 20:14:14 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe "2008-01-18 23:26:03 C:\WINDOWS\Tasks\Check Updates for Windows Live Toolbar.job" - C:\Program Files\Windows Live Toolbar\MSNTBUP.exe "2008-01-15 22:09:20 C:\WINDOWS\Tasks\McDefragTask.job" - c:\program files\mcafee\mqc\QcConsol.exe' "2008-01-15 22:09:18 C:\WINDOWS\Tasks\McQcTask.job" - c:\program files\mcafee\mqc\QcConsol.exe "2008-01-19 10:33:05 C:\WINDOWS\Tasks\RegCure Program Check.job" - C:\Program Files\RegCure\RegCure.exe "2008-01-16 08:28:43 C:\WINDOWS\Tasks\RegCure.job" - C:\Program Files\RegCure\RegCure.exe . ************************************************************************** catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-01-19 10:48:38 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- PROCESS: C:\WINDOWS\explorer.exe [6.00.2900.3156] -> C:\WINDOWS\system32\TDispVol.dll . Completion time: 2008-01-19 10:51:16 ComboFix-quarantined-files.txt 2008-01-19 10:51:11 ComboFix2.txt 2008-01-18 23:19:22 ComboFix3.txt 2008-01-18 19:19:48 . 2008-01-18 22:17:07 --- E O F ---

0

Your log is clean Empty the restore folder. Go to start>control panel>system>system restore tab>check the box beside "turn off system restore>apply (takes a minute)>ok. Go back and uncheck the box to turn system restore back on>apply>ok. Download ATF Cleaner from this link: ATF Cleaner Next, please reboot your computer in Safe Mode by doing the following : Restart your computer After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually; Instead of Windows loading as normal, a menu with options should appear; Select the first option, to run Windows in Safe Mode, then press "Enter". Choose your usual account. Run ATF-Cleaner Double-click ATF-Cleaner.exe to run the program. Under Main choose: Select All Click the Empty Selected button. You should consider adding "Spywareblaster" to your arsenol of antispyware tools, you can download it from this link Spywareblaster Just download it,install it, and update it. Its free and runs in the background, so you don't actually run it, and re-writes malicious script before it can install on your computer. Look for updates weekly as there is no auto-update on the free version. How is the computer operating?

0

thanks for mall your help, it seems ok so i will watch it in the next few days and update you. grateful. thanks Ibk

0

Glad we could help.

0