Jump to content

GraemeS

Honorary Members
  • Posts

    29
  • Joined

  • Last visited

Everything posted by GraemeS

  1. Every time I try to download OTC it fails and I get a McAfee warning about a Trojan. I guess I need to turn McAfee off before I can do this step??
  2. Combofix is now uninstalled. "As to your last note, re "C:\Documents and Settings\Application Data\Sun\Java\Deployment cache\6.0\59\" Was that the only item "tagged" by your antivirus?" Yes, that was the only one. All caches are cleared. Is there anything else I need to do??? Whilst waiting for a response I will go into her profile and see if anything untoward happens.....
  3. From the top..... Tried to uninstall combofix but it wouldn't do it - couldn't find the file but it's clearly there on my desktop. Ran disk cleanup ok. Updated and ran scan - came back with one item. No option to create a report and no way to copy & paste, but this is what it said - 2fc93fb-12ec9515 C:\Documents and Settings\Application Data\Sun\Java\Deployment cache\6.0\59\ Exploit - FBR!90D0a0343913
  4. Unfortunately I cannot find any trace of it in the reports and was a little tired after a 12 hour night shift so didn't think to write down details. I believe it was located in "restore" but cannot be sure. Sorry for being a pain - I will be sure to write down any future alerts if I get any.....
  5. I downloaded Ultimate boot CD about 3 or 4 months ago to fix my father's PC - I have a disc so there is no need to keep the file. Now deleted. ESET log - it detected these items but there was no option to remove them?? C:\Qoobox\Quarantine\C\Documents and Settings\Mo\Local Settings\temp\ICReinstall\cnet2_QJRCSetup_zip.exe.vir a variant of Win32/InstallCore.D application C:\Qoobox\Quarantine\C\Documents and Settings\Mo\My Documents\Downloads\cnet2_QJRCSetup_zip.exe.vir a variant of Win32/InstallCore.D application C:\Qoobox\Quarantine\C\Documents and Settings\poppy star\My Documents\Downloads\Guffins.exe.vir a variant of Win32/AdInstaller application C:\Qoobox\Quarantine\C\Documents and Settings\Yvette Preston\My Documents\Downloads\videora-ipod-407-setup.exe.vir Win32/OpenCandy application C:\Qoobox\Quarantine\C\UBCD4Win\BartPE\PROGRAMS\sdfix\SDFix.exe.vir Win32/PrcView application C:\Qoobox\Quarantine\C\UBCD4Win\plugin\Cleanup Tools\SDFix\SDFix.exe.vir Win32/PrcView application C:\System Volume Information\_restore{B1C538C0-CBA3-4434-A006-53A338B37653}\RP372\A0174622.exe Win32/PrcView application C:\System Volume Information\_restore{B1C538C0-CBA3-4434-A006-53A338B37653}\RP372\A0174623.exe Win32/PrcView application As for the system now, I have just woken up after a night shift and found a notification from McAfee saying "threat detected"
  6. part 2. C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/psg-1/psg-1.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/psg-1/psg-1.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/qizi/qizi.model C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/qizi/qizi.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/qizi/qizi.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/rock/rock.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/rock/rock01.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/rzfemale/rzfemale.model C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/rzfemale/rzfemale.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/rzfemale/rzfemale.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/rzmale/rzmale.model C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/rzmale/rzmale.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/rzmale/rzmale.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Songguo/Songguo.model C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Songguo/Songguo.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Songguo/Songguo.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Squirrel/Squirrel.model C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Squirrel/squirrel.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Squirrel/Squirrel.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/stump/1.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/stump/gang.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/stump2/1.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Tree001/1.model C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Tree001/3.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Tree001/leaf.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Tree001/trunk.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Tree002/1.model C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Tree002/3.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Tree002/leaf.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Tree003/1.model C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Tree003/3.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Tree003/leaf.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Tree004/1.model C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Tree004/4.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Tree004/leaf.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/ump45/ump45.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/ump45/ump45.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/ana.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/angel.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/baozha.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/beijizhong.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/blink2.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/buy.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/char.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/chilun.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/chong.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/clear.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/enemydie.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/enemyfire1.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/enemyfire2.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/enemyfire3.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/enemyfire4.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/enemyfire5.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/enemyhurt.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/failed.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/femaledie.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/fire.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/fire1.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/fire2.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/fire3.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/fire4.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/fire5.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/fire6.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/fire7.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/foot.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/generaldie.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/heiying.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/heiyingfire.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/hold1.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/hold2.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/ka.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/kaijing.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/list.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/lock.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/locked.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/maledie.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/mission.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/mission01.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/mission02.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/mission03.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/mission04.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/mission05.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/mission06.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/mission07.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/mission08.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/motobaozha.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/motoshikong.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/no.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/o.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/paper.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/phoneoff.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/phoneon.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/reng.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/sfxbutton.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/sikai.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/songguo.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/squirreldie.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/squirrelhurt.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/story.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/tandan.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/tiaozhan1.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/tiaozhan2.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/tishi.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/title.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/use.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/wrong.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/wuzibaozha.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/xmas.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/xmas1.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/xmas2.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/xmas3.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/xmas4.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/xmas5.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/xmas6.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/xmas7.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/xmas8.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/sound/xmas9.ogg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/AgencyFB.dat C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/AgencyFB.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/Arcade.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/Bank.dat C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/Bank.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/Flares.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/Gears.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/hits.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/Julius.dat C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/Julius.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/logo.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/lvIntro.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/lvIntro02.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/lvIntro03.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/lvIntro04.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/lvIntro05.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/lvIntro06.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/lvIntro07.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/lvIntro08.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/shop.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/tips.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/uic.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/uiHard.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/uiLevel.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/uiLMV.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/uiLMV2.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/uiLoad.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/uiLoadx.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/uiLVFailed.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/uiLVFailed2.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/uiMain.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/uio.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/uiPause.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/uiPurchase.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/uistory.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/help/help1.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/help/help2.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/help/help3.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv1/lv1_1.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv1/lv1_10.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv1/lv1_11.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv1/lv1_12.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv1/lv1_2.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv1/lv1_3.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv1/lv1_4.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv1/lv1_5.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv1/lv1_6.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv1/lv1_7.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv1/lv1_8.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv1/lv1_9.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv1/story1.script C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv1/story2.script C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv1/title1.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv2/lv2_1.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv2/lv2_2.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv2/lv2_3.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv2/lv2_4.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv2/story1.script C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv2/story2.script C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv2/title2.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv3/lv3_1.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv3/lv3_2.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv3/lv3_3.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv3/lv3_4.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv3/lv3_5.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv3/story1.script C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv3/story2.script C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv3/title3.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv4/lv4_1.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv4/lv4_2.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv4/lv4_3.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv4/lv4_4.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv4/lv4_5.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv4/story1.script C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv4/story2.script C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv4/title4.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv5/lv5_1.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv5/lv5_2.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv5/lv5_3.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv5/lv5_4.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv5/lv5_5.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv5/story1.script C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv5/story2.script C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv5/title5.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv6/lv6_1.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv6/lv6_2.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv6/lv6_3.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv6/lv6_4.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv6/lv6_5.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv6/story1.script C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv6/story2.script C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/lv6/title6.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/LV7/lv7_1.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/LV7/lv7_2.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/LV7/story1.script C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/LV7/story2.script C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/LV7/title7.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/LV8/lv8_1.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/LV8/lv8_10.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/LV8/lv8_11.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/LV8/lv8_12.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/LV8/lv8_13.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/LV8/lv8_2.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/LV8/lv8_3.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/LV8/lv8_4.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/LV8/lv8_5.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/LV8/lv8_6.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/LV8/lv8_7.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/LV8/lv8_8.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/LV8/lv8_9.png C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/LV8/story1.script C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/LV8/story2.script C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/ui/story/LV8/title8.png C:\Documents and Settings\Yvette Preston\My Documents\Downloads\Eminem Discography (1995-2005)\Eminem - Encore [2004]\04 - Yellow Brick Road (Produced By Eminem) - Eminem.mp3\xlconv.msp C:\DOCUMENTS AND SETTINGS\YVETTE PRESTON\LOCAL SETTINGS\TEMP\ETILQS_JZQ5BQM66B20HBY C:\DOCUMENTS AND SETTINGS\YVETTE PRESTON\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS\USRCLASS.DAT C:\DOCUMENTS AND SETTINGS\YVETTE PRESTON\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS\USRCLASS.DAT.LOG C:\DOCUMENTS AND SETTINGS\YVETTE PRESTON\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\2UB6XUDT.DEFAULT\PARENT.LOCK C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\NTUSER.DAT C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\NTUSER.DAT.LOG C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS\USRCLASS.DAT C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS\USRCLASS.DAT.LOG C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\NTUSER.DAT C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\NTUSER.DAT.LOG C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS\USRCLASS.DAT C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS\USRCLASS.DAT.LOG C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\FunWebProducts2.zip\sbRecovery.reg C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\FunWebProducts2.zip\sbRecovery.ini C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\FunWebProducts1.zip\sbRecovery.reg C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\FunWebProducts1.zip\sbRecovery.ini C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\FraudDesktopSecurity.zip\sbRecovery.reg C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Dropperragger.zip\sbRecovery.reg C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\FraudDesktopSecurity.zip\sbRecovery.ini C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Dropperragger.zip\sbRecovery.ini C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DlucaCWAD.zip\sbRecovery.reg C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DlucaCWAD.zip\sbRecovery.ini C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\FunWebProducts.zip\sbRecovery.reg C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\FunWebProducts.zip\sbRecovery.ini C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\FunWebProducts3.zip\sbRecovery.reg C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\FunWebProducts3.zip\sbRecovery.ini C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\FunWebProducts4.zip\sbRecovery.reg C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\FunWebProducts4.zip\sbRecovery.ini C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\FunWebProducts7.zip\sbRecovery.reg C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\FunWebProducts7.zip\sbRecovery.ini C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsAppFirewallBypass.zip\sbRecovery.reg C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsAppFirewallBypass.zip\sbRecovery.ini C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\FunWebProducts5.zip\sbRecovery.reg C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\FunWebProducts5.zip\sbRecovery.ini C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsAppFirewallBypass1.zip\sbRecovery.reg C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsAppFirewallBypass1.zip\sbRecovery.ini C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\FunWebProducts6.zip\Program Files/FunWebProducts/Installr/1.bin/F3EZSETP.DLL C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\FunWebProducts6.zip\Program Files/FunWebProducts/Installr/1.bin/F3PLUGIN.DLL C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\FunWebProducts6.zip\Program Files/FunWebProducts/Installr/1.bin/NPFUNWEB.DLL C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\FunWebProducts6.zip\sbRecovery.ini C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityCenterAntiVirusOverride.zip\sbRecovery.reg C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityCenterAntiVirusOverride.zip\sbRecovery.ini C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityCenterdisabled.zip\sbRecovery.reg C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityCenterdisabled.zip\sbRecovery.ini C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityCenterAntiVirusDisableNotify.zip\sbRecovery.reg C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityCenterAntiVirusDisableNotify.zip\sbRecovery.ini C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityCenterFirewallDisableNotify.zip\sbRecovery.reg C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityCenterFirewallDisableNotify.zip\sbRecovery.ini C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityCenterFirewallOverride.zip\sbRecovery.reg C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WinWebprefix.zip\msjdbd10.dll C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityCenterFirewallOverride.zip\sbRecovery.ini C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WinWebprefix.zip\sbRecovery.ini Options Scanning engines: Scanning options: Scan all files Scan inside archives Use advanced heuristics Copyright © 1998-2009 Product support | Send virus sample to F-Secure F-Secure assumes no responsibility for material created or published by third parties that F-Secure World Wide Web pages have a link to. Unless you have clearly stated otherwise, by submitting material to any of our servers, for example by E-mail or via our F-Secure's CGI E-mail, you agree that the material you make available may be published in the F-Secure World Wide Pages or hard-copy publications. You will reach F-Secure public web site by clicking on underlined links. While doing this, your access will be logged to our private access statistics with your domain name. This information will not be given to any third party. You agree not to take action against us in relation to material that you submit. Unless you have clearly stated otherwise, by submitting material you warrant that F-Secure may incorporate any concepts described in it in the F-Secure products/publications without liability. f
  7. McAfee® Labs Stinger Version 10.2.0.555 built on Mar 22 2012 Copyright © 2011 McAfee, Inc. All Rights Reserved. Virus data file v1000.0000 created on Mar 22 2012. Ready to scan for 4198 viruses, trojans and variants. Scan initiated on Thu Mar 22 20:19:14 2012 Rootkit scan result : Clean Master Boot Record(s):....1 Possibly Infected:.............0 Boot Sector(s):.................1 Possibly Infected: ............0 Number of clean files: 25976 F-secure did not give me the option to "decide item by item" - it simply produced the report. Scanning Report Friday, March 23, 2012 21:05:46 - 08:00:43 Computer name: YVETTE Scanning type: Scan system for malware, spyware and rootkits Target: C:\ 25 malware found TrackingCookie.Questionmarket (spyware) System (Disinfected) TrackingCookie.2o7 (spyware) System (Disinfected) TrackingCookie.Adtech (spyware) System (Disinfected) TrackingCookie.Revsci (spyware) System (Disinfected) TrackingCookie.Zanox (spyware) System (Disinfected) TrackingCookie.Mookie (spyware) System (Disinfected) TrackingCookie.Webtrends (spyware) System (Disinfected) TrackingCookie.Liveperson (spyware) System (Disinfected) TrackingCookie.Emediate (spyware) System (Disinfected) TrackingCookie.Atwola (spyware) System (Disinfected) TrackingCookie.Yieldmanager (spyware) System (Disinfected) Suspicious:W32/Malware!Gemini (virus) C:\UBCD4Win\bartpe.exe (Not cleaned & Submitted) Suspicious:W32/Malware!Gemini (virus) C:\UBCD4Win\temp\cax.exe (Not cleaned & Submitted) Suspicious:W32/Malware!Gemini (virus) C:\UBCD4Win\plugin\Registry\WRA\WRA.exe (Not cleaned & Submitted) Suspicious:W32/Malware!Gemini (virus) C:\UBCD4Win\plugin\Registry\regreswiz\regreswiz.exe (Not cleaned & Submitted) Suspicious:W32/Malware!Gemini (virus) C:\UBCD4Win\plugin\Registry\DialAFix\Dial-a-fix.exe (Not cleaned & Submitted) Suspicious:W32/Malware!Gemini (virus) C:\UBCD4Win\plugin\AutoBuild\Files\Cax.exe (Not cleaned & Submitted) Suspicious:W32/Malware!Gemini (virus) C:\UBCD4Win\plugin\Add-Ons\MyInfo\MyInfo.exe (Not cleaned & Submitted) Suspicious:W32/Malware!Gemini (virus) C:\UBCD4Win\plugin\Add-Ons\coolmon\files\coolmon.exe (Not cleaned & Submitted) Suspicious:W32/Malware!Gemini (virus) C:\UBCD4Win\BartPE\PROGRAMS\WRA\wra.exe (Not cleaned & Submitted) Suspicious:W32/Malware!Gemini (virus) C:\UBCD4Win\BartPE\PROGRAMS\RegResWiz\regreswiz.exe (Not cleaned & Submitted) Suspicious:W32/Malware!Gemini (virus) C:\UBCD4Win\BartPE\PROGRAMS\myinfo\myinfo.exe (Not cleaned & Submitted) Suspicious:W32/Malware!Gemini (virus) C:\UBCD4Win\BartPE\PROGRAMS\dialafix\Dial-a-fix.exe (Not cleaned & Submitted) Suspicious:W32/Malware!Gemini (virus) C:\UBCD4Win\BartPE\PROGRAMS\Coolmon\CoolMon.exe (Not cleaned & Submitted) Suspicious:W32/Malware!Gemini (virus) C:\UBCD4Win\BartPE\I386\SYSTEM32\BARTPE.EXE (Not cleaned & Submitted) Statistics Scanned: Files: 1975159 System: 5665 Not scanned: 638 Actions: Disinfected: 11 Renamed: 0 Deleted: 0 Not cleaned: 14 Submitted: 14 Files not scanned: C:\HIBERFIL.SYS C:\PAGEFILE.SYS C:\WINDOWS\SYSTEM32\INETPPJ.DLL C:\WINDOWS\SYSTEM32\DRIVERS\ETC\HOSTS.BAK C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT.LOG C:\WINDOWS\SYSTEM32\CONFIG\SAM C:\WINDOWS\SYSTEM32\CONFIG\SAM.LOG C:\WINDOWS\SYSTEM32\CONFIG\SECURITY C:\WINDOWS\SYSTEM32\CONFIG\SECURITY.LOG C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE.LOG C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.LOG C:\WINDOWS\SYSTEM32\CATROOT2\EDB.LOG C:\WINDOWS\SYSTEM32\CATROOT2\TMP.EDB C:\DOCUMENTS AND SETTINGS\YVETTE PRESTON\NTUSER.DAT.LOG C:\DOCUMENTS AND SETTINGS\YVETTE PRESTON\NTUSER.DAT C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/cfg/Game.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/cfg/gear.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/cfg/Objects.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/cfg/weapon.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1/background.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1/color.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1/lv.cfg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1/lv.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1/lv.terrain C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1/lv.tm C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1/message.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1/opacity01.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1/opacity02.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1/sence01.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1/sence02.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1/sence03.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1/sky.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1/view1.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1/view2.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1/view3.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1/view4.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1/building/house.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1/building/house0.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1/building/house1.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1/building/house2.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1/building/house3.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1001/background.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1001/color.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1001/lv.cfg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1001/lv.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1001/lv.terrain C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1001/lv.tm C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1001/message.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1001/opacity01.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1001/opacity02.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1001/sence01.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1001/sence02.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1001/sence03.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1001/sky.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1001/view1.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1001/building/house.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1001/building/house0.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1001/building/house1.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1001/building/house2.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1001/building/house3.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1002/background.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1002/color.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1002/fog.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1002/lv.cfg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1002/lv.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1002/lv.terrain C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1002/lv.tm C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1002/message.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1002/opactiy1.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1002/sence1.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1002/sence2.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1002/sky.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1002/sky.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1002/view1.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1002/view2.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1003/background.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1003/color.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1003/lv.cfg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1003/lv.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1003/lv.terrain C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1003/lv.tm C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1003/message.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1003/sence01.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1003/sky.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1003/sky.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1003/view1.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1003/view2.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1003/view3.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1003/view4.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1003/view5.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1003/buildings/house.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1003/buildings/house0.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1003/buildings/house1.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1003/buildings/house2.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1003/buildings/house3.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1003/buildings/house4.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1004/background.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1004/color.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1004/color.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1004/lv.cfg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1004/lv.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1004/lv.terrain C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1004/lv.tm C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1004/message.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1004/opacity01.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1004/opacity02.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1004/sence01.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1004/sence02.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1004/sence03.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1004/sky.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1004/view1.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1004/view2.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1004/building/building.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1004/building/house0.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1004/building/house1.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1004/building/house2.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1005/color.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1005/lv.cfg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1005/lv.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1005/lv.terrain C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1005/lv.tm C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1005/message.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1005/sence1.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1005/view1.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1005/building/house.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1005/building/house0.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv1005/building/house1.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv2/background.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv2/color.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv2/fog.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv2/lv.cfg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv2/lv.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv2/lv.terrain C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv2/lv.tm C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv2/message.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv2/opactiy1.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv2/sence1.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv2/sence2.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv2/sky.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv2/sky.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv2/view1.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv2/view2.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv2/view3.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv2/view4.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv3/background.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv3/backtree.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv3/color.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv3/lv.cfg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv3/lv.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv3/lv.terrain C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv3/lv.tm C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv3/message.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv3/opacity01.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv3/opacity02.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv3/sence01.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv3/sence02.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv3/sence03.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv3/sky.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv3/view1.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv3/view2.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv3/view3.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv3/view4.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv3/building/building.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv3/building/house0.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv3/building/house1.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv3/building/house2.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv3/building/house3.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv4/background.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv4/color.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv4/lv.cfg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv4/lv.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv4/lv.terrain C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv4/lv.tm C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv4/message.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv4/opacity01.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv4/opacity02.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv4/sence01.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv4/sence02.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv4/sence03.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv4/sky.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv4/view1.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv4/buildings/house.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv4/buildings/house0.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv4/buildings/house1.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv4/buildings/house2.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv4/buildings/house3.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv4/buildings/house4.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv4/buildings/house5.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv4/buildings/house6.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv4/buildings/house7.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv5/background.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv5/color.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv5/color.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv5/lv.cfg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv5/lv.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv5/lv.terrain C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv5/lv.tm C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv5/message.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv5/opacity01.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv5/opacity02.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv5/sence01.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv5/sence02.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv5/sence03.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv5/sky.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv5/view1.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv5/view2.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv5/view3.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv5/view4.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv5/building/building.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv5/building/house0.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv5/building/house1.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv5/building/house2.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv6/background.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv6/color.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv6/lv.cfg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv6/lv.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv6/lv.terrain C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv6/lv.tm C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv6/message.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv6/sence01.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv6/sky.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv6/sky.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv6/view1.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv6/view2.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv6/view3.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv6/view4.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv6/view5.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv6/buildings/house.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv6/buildings/house0.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv6/buildings/house1.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv6/buildings/house2.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv6/buildings/house3.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv6/buildings/house4.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv7/color.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv7/lv.cfg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv7/lv.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv7/lv.terrain C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv7/lv.tm C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv7/message.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv7/opacity01.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv7/opacity02.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv7/sence01.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv7/sence02.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv7/sence03.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv7/view1.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv7/view2.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv7/view3.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv7/view4.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv7/view5.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv7/buildings/building.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv7/buildings/sky.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv8/color.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv8/color.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv8/ground.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv8/lv.cfg C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv8/lv.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv8/lv.terrain C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv8/lv.tm C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv8/message.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv8/sky.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv8/sky.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv8/view1.dot C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv8/building/house.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv8/building/house0.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv8/building/house1.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv8/building/house2.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv8/building/house3.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/lvs/lv8/building/house4.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/fc.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/fx.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Mark2.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Shadow.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/ak-47/ak-47.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/ak-47/ak-47.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/BadassA/Badass.pak C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/BadassA/Skin.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/BadassB/Badass.pak C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/BadassB/Skin.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/BadassC/Badass.pak C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/BadassC/Skin.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/BadassD/Badass.pak C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/BadassD/Skin.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/BadassE/Badass.pak C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/BadassE/Skin.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/BadassE/Super.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Barrel/Barrel.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Barrel/publictx.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/bombman/bombman.model C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/bombman/bombman.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/bombman/bombman.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Boss8/boss.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Boss8/boss8.pak C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Boss8/boss8.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/bullet/bullet.model C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/bullet/bullet.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/CharShared/Ani.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/CharShared/Shared.pak C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/daocao/dao.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/daocao/daocao.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/general/general.model C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/general/general.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/general/general.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Gifts/box.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Gifts/Box01.model C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Gifts/Box02.model C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Gifts/Box03.model C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Gifts/Box04.model C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Gifts/candy.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Gifts/Candy01.model C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Gifts/Candy02.model C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Gifts/Candy03.model C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Gifts/Candy04.model C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/grass001/1.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/grass001/grass.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/grass002/1.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/grass002/grass.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/grass003/1.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/grass003/flower.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/grass004/1.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/grass005/1.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/grass005/grass.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/grass006/1.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/grass006/grass.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/grass007/1.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/grass007/grass.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/hanma/1.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/hanma/han.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/heiying/heiying.model C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/heiying/heiying.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/heiying/heiying.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/horseHanma/han.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/horseHanma/hanma.model C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/horseHanma/hanma.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/kache/kache.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/kache/kache.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/laoren/laoren.pak C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/laoren/laoren.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/laoren/laoren.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/luche/luche.model C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/luche/luche.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/luche/luche.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/missile/daodan.model C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/missile/daodan.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Motor/motor.model C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Motor/motor.txt C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Motor/motuor.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/mp5/mp5.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/mp5/mp5.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/none/none.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/none/none.sModel C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Plane1/Plane1.pvr C:\Documents and Settings\Yvette Preston\My Documents\My Music\iTunes\iTunes Media\Mobile Applications\iSniper 3D 2.9.1.ipa\Payload\iSniper 3D.app\data.dat\data/Objects/Plane1/Plane1.sModel
  8. Here are the two requested logs. Malwarebytes Anti-Malware 1.60.1.1000 www.malwarebytes.org Database version: v2012.03.21.05 Windows XP Service Pack 3 x86 NTFS Internet Explorer 8.0.6001.18702 Yvette Preston :: YVETTE [administrator] 21/03/2012 20:07:36 mbam-log-2012-03-21 (20-07-36).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P Scan options disabled: Objects scanned: 303656 Time elapsed: 17 minute(s), 52 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) ComboFix 12-03-20.01 - Yvette Preston 20/03/2012 21:35:12.3.1 - x86 Microsoft Windows XP Home Edition 5.1.2600.3.1252.44.1033.18.895.398 [GMT 0:00] Running from: c:\documents and settings\Yvette Preston\Desktop\Combo-Fix.exe Command switches used :: c:\documents and settings\Yvette Preston\Desktop\CFScript.txt AV: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83} FW: McAfee Firewall *Enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8} . FILE :: "c:\documents and settings\Mo\Local Settings\Application Data\zmexuml.exe" "c:\documents and settings\Mo\Local Settings\temp\ICReinstall\cnet2_QJRCSetup_zip.exe" "c:\documents and settings\Mo\Local Settings\Temporary Internet Files\Content.IE5\0IYY2K9I\softw[1].exe" "c:\documents and settings\Mo\My Documents\Downloads\cnet2_QJRCSetup_zip.exe" "c:\documents and settings\poppy star\My Documents\Downloads\Guffins.exe" "c:\documents and settings\Yvette Preston\My Documents\Downloads\videora-ipod-407-setup.exe" "c:\ubcd4win\BartPE\PROGRAMS\sdfix\SDFix.exe" "c:\ubcd4win\plugin\Cleanup Tools\SDFix\SDFix.exe" "c:\ubcd4win\UBCD4WinBuilder.iso" . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\documents and settings\Mo\Local Settings\temp\ICReinstall\cnet2_QJRCSetup_zip.exe c:\documents and settings\Mo\My Documents\Downloads\cnet2_QJRCSetup_zip.exe c:\documents and settings\poppy star\My Documents\Downloads\Guffins.exe c:\documents and settings\Yvette Preston\My Documents\Downloads\videora-ipod-407-setup.exe C:\Thumbs.db c:\ubcd4win\BartPE\PROGRAMS\sdfix\SDFix.exe c:\ubcd4win\plugin\Cleanup Tools\SDFix\SDFix.exe c:\ubcd4win\UBCD4WinBuilder.iso . . ((((((((((((((((((((((((( Files Created from 2012-02-20 to 2012-03-20 ))))))))))))))))))))))))))))))) . . 2012-03-19 22:30 . 2012-03-19 22:30 -------- d-----w- c:\program files\ESET 2012-03-19 21:55 . 2012-03-19 21:55 -------- d-----w- c:\program files\Common Files\Java 2012-03-19 21:54 . 2012-03-19 21:54 73728 ----a-w- c:\windows\system32\javacpl.cpl 2012-03-19 14:37 . 2012-03-19 14:38 -------- d-----w- C:\rsit 2012-03-19 14:33 . 2012-03-19 14:33 -------- d-----w- c:\program files\ERUNT 2012-03-19 12:39 . 2012-03-19 12:39 24064 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys 2012-03-17 22:57 . 2012-03-17 22:57 -------- d-----w- c:\program files\Mozilla Maintenance Service 2012-02-21 20:26 . 2012-02-21 20:26 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Sun . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-03-19 21:54 . 2010-10-11 21:36 472808 ----a-w- c:\windows\system32\deployJava1.dll 2012-03-13 19:59 . 2011-06-24 09:18 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl . . ((((((((((((((((((((((((((((( SnapShot@2012-03-19_18.59.04 ))))))))))))))))))))))))))))))))))))))))) . - 2004-08-10 15:38 . 2011-10-30 07:39 80600 c:\windows\system32\perfc009.dat + 2004-08-10 15:38 . 2012-03-19 19:44 80600 c:\windows\system32\perfc009.dat + 2005-10-08 13:03 . 2012-03-20 19:28 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat - 2005-10-08 13:03 . 2012-03-19 15:40 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat + 2005-10-08 13:03 . 2012-03-20 19:28 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat - 2005-10-08 13:03 . 2012-03-19 15:40 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat + 2012-03-19 20:11 . 2012-03-20 19:28 32768 c:\windows\system32\config\systemprofile\Cookies\index.dat - 2005-10-08 13:03 . 2012-03-19 15:40 32768 c:\windows\system32\config\systemprofile\Cookies\index.dat + 2011-06-06 12:55 . 2011-06-06 12:55 17304 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\ViewerPS.dll + 2011-06-06 12:55 . 2011-06-06 12:55 35736 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\reader_sl.exe + 2011-06-06 12:55 . 2011-06-06 12:55 88992 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\PDFPrevHndlr.dll + 2011-06-06 12:55 . 2011-06-06 12:55 94608 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\eula.exe + 2011-06-06 12:55 . 2011-06-06 12:55 49064 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\acrotextextractor.exe + 2011-06-06 12:55 . 2011-06-06 12:55 17824 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\AcroRd32Info.exe + 2011-06-06 12:55 . 2011-06-06 12:55 63912 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\acroiehelpershim.dll + 2011-06-06 12:55 . 2011-06-06 12:55 64928 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\AcroIEHelper.dll + 2011-06-06 12:55 . 2011-06-06 12:55 63384 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\Acrofx32.dll + 2004-08-10 15:38 . 2012-03-19 19:44 467016 c:\windows\system32\perfh009.dat - 2004-08-10 15:38 . 2011-10-30 07:39 467016 c:\windows\system32\perfh009.dat + 2012-03-19 21:54 . 2012-03-19 21:54 157472 c:\windows\system32\javaws.exe + 2012-03-19 21:54 . 2012-03-19 21:54 149280 c:\windows\system32\javaw.exe + 2012-03-19 21:54 . 2012-03-19 21:54 149280 c:\windows\system32\java.exe + 2009-06-01 10:03 . 2012-03-20 19:28 262144 c:\windows\system32\config\systemprofile\IETldCache\index.dat - 2009-06-01 10:03 . 2012-03-19 15:40 262144 c:\windows\system32\config\systemprofile\IETldCache\index.dat + 2012-03-19 21:55 . 2012-03-19 21:55 203776 c:\windows\Installer\79eb8.msi + 2012-03-19 21:54 . 2012-03-19 21:54 901120 c:\windows\Installer\79eb3.msi + 2011-06-06 12:55 . 2011-06-06 12:55 249232 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\sqlite.dll + 2011-06-06 12:55 . 2011-06-06 12:55 394136 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\pdfshell.dll + 2011-06-06 12:55 . 2011-06-06 12:55 103848 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\PDFPrevHndlrShim.exe + 2011-06-06 12:55 . 2011-06-06 12:55 183696 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\nppdf32.dll + 2011-06-06 12:55 . 2011-06-06 12:55 104344 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\AiodLite.dll + 2011-06-06 12:55 . 2011-06-06 12:55 937920 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\adobearm.exe + 2011-06-06 12:55 . 2011-06-06 12:55 102808 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\AcroRdIF.dll + 2011-06-06 12:55 . 2011-06-06 12:55 755088 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\AcroPDF.dll + 2011-06-06 12:55 . 2011-06-06 12:55 296344 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\acrobroker.exe + 2011-06-06 12:55 . 2011-06-06 12:55 205720 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\a3dutils.dll + 2012-03-19 22:18 . 2012-03-19 22:18 2295808 c:\windows\Installer\7a0b3.msi + 2011-06-06 12:55 . 2011-06-06 12:55 2215312 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\rt3d.dll + 2011-06-06 12:55 . 2011-06-06 12:55 1189004 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\JSByteCodeWin.bin + 2011-06-06 12:55 . 2011-06-06 12:55 6543768 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\authplay.dll + 2011-06-06 12:55 . 2011-06-06 12:55 1240992 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\AdobeCollabSync.exe + 2011-06-06 12:55 . 2011-06-06 12:55 1480600 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\AcroRd32.exe + 2012-01-03 17:44 . 2012-01-03 17:44 15929344 c:\windows\Installer\7a0b4.msp + 2011-06-06 12:55 . 2011-06-06 12:55 24731544 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\AcroRd32.dll . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "KiesPDLR"="c:\program files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2011-11-29 21392] "KiesHelper"="c:\program files\Samsung\Kies\KiesHelper.exe" [2011-11-29 935312] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2011-11-22 1318816] "Conime"="c:\windows\system32\conime.exe" [2008-04-14 27648] "SoundMan"="SOUNDMAN.EXE" [2005-05-17 77824] "snpstd3"="c:\windows\vsnpstd3.exe" [2006-09-19 827392] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2010-11-29 421888] "PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-04 455168] "PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-04 455168] "PCMService"="c:\apps\Powercinema\PCMService.exe" [2005-01-28 110740] "Mobile Connectivity Suite"="c:\program files\HTC\HTC Sync\Application Launcher\Application Launcher.exe" [2009-11-19 598016] "KiesTrayAgent"="c:\program files\Samsung\Kies\KiesTrayAgent.exe" [2011-11-29 3508624] "itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2006-07-07 576320] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-10-09 421736] "IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2006-07-07 600896] "IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-04 208952] "Epson stylus C82 series 1"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE" [2002-07-01 74752] "EKIJ5000StatusMonitor"="c:\windows\System32\spool\DRIVERS\W32X86\3\EKIJ5000MUI.exe" [2010-09-02 1638400] "ATIPTA"="c:\ati technologies\ATI Control Panel\atiptaxx.exe" [2005-03-22 339968] "APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240] "AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2010-12-14 47904] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "RunNarrator"="Narrator.exe" [2008-04-14 53760] . c:\documents and settings\All Users\Start Menu\Programs\Startup\ ExifLauncher2.lnk - c:\program files\FinePixViewer\QuickDCF2.exe [N/A] Google Updater.lnk - c:\program files\Google\Google Updater\GoogleUpdater.exe [N/A] Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2008-5-26 123904] . [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks] "{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128] . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus] "DisableMonitoring"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall] "DisableMonitoring"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) "DisableNotifications"= 1 (0x1) . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "c:\\StubInstaller.exe"= "c:\\Program Files\\Real\\RealPlayer\\realplay.exe"= "c:\\Program Files\\AOL 9.0\\aol.exe"= "c:\\WINDOWS\\system32\\sessmgr.exe"= "c:\\Program Files\\Messenger\\msmsgs.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"= "c:\\Program Files\\Bonjour\\mDNSResponder.exe"= "c:\\Program Files\\Kodak\\AiO\\Center\\AiOHomeCenter.exe"= "c:\\Program Files\\Kodak\\AiO\\Center\\Kodak.Statistics.exe"= "c:\\Program Files\\Kodak\\AiO\\Center\\NetworkPrinterDiscovery.exe"= "c:\\Program Files\\Kodak\\AiO\\Firmware\\KodakAiOUpdater.exe"= "c:\\Documents and Settings\\All Users\\Application Data\\Kodak\\Installer\\Setup.exe"= "c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"= "c:\\Program Files\\iTunes\\iTunes.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= "c:\\Program Files\\Common Files\\McAfee\\McSvcHost\\McSvHost.exe"= . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "9322:TCP"= 9322:TCP:EKDiscovery "5353:UDP"= 5353:UDP:Bonjour Port 5353 "9323:TCP"= 9323:TCP:EKDiscovery . R1 mfetdi2k;McAfee Inc. mfetdi2k;c:\windows\system32\drivers\mfetdi2k.sys [07/10/2010 15:45 89792] R2 Kodak AiO Network Discovery Service;Kodak AiO Network Discovery Service;c:\program files\Kodak\AiO\Center\ekdiscovery.exe [13/09/2010 16:18 308656] R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\McAfee\SiteAdvisor\McSACore.exe [07/05/2009 08:07 95200] R2 McMPFSvc;McAfee Personal Firewall Service;"c:\program files\Common Files\Mcafee\McSvcHost\McSvHost.exe" /McCoreSvc [07/10/2010 15:45 214904] R2 McNaiAnn;McAfee VirusScan Announcer;"c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe" /McCoreSvc [07/10/2010 15:45 214904] R2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\mfefire.exe [07/10/2010 15:45 160608] R2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [07/10/2010 15:45 150856] R3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [07/10/2010 15:45 57600] R3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [07/10/2010 15:45 338176] R3 mfendiskmp;mfendiskmp;c:\windows\system32\drivers\mfendisk.sys [07/10/2010 15:45 83856] S2 gupdate1c9f8127c8c90e;Google Update Service (gupdate1c9f8127c8c90e);c:\program files\Google\Update\GoogleUpdate.exe [28/06/2009 17:01 133104] S3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\drivers\ssadadb.sys [09/12/2011 23:56 30312] S3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [28/06/2009 17:01 133104] S3 HTCAND32;HTC Device Driver;c:\windows\system32\drivers\ANDROIDUSB.sys [26/12/2010 16:33 24576] S3 mbamchameleon;mbamchameleon;c:\windows\system32\drivers\mbamchameleon.sys [19/03/2012 12:39 24064] S3 mfendisk;McAfee Core NDIS Intermediate Filter;c:\windows\system32\drivers\mfendisk.sys [07/10/2010 15:45 83856] S3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [07/10/2010 15:45 87656] S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [17/03/2012 22:57 129976] S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\drivers\ssadbus.sys [09/12/2011 23:56 121064] S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\drivers\ssadmdfl.sys [09/12/2011 23:56 12776] S3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\drivers\ssadmdm.sys [09/12/2011 23:56 136808] S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\drivers\ssadserd.sys [09/12/2011 23:56 114280] . --- Other Services/Drivers In Memory --- . *Deregistered* - MBAMSwissArmy *Deregistered* - mfeavfk01 . Contents of the 'Scheduled Tasks' folder . 2012-03-13 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 17:57] . 2012-03-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2009-06-28 17:00] . 2012-03-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2009-06-28 17:00] . 2012-03-19 c:\windows\Tasks\Norton Security Scan for Yvette Preston.job - c:\progra~1\NORTON~2\Engine\370~1.18\Nss.exe [2012-02-04 10:01] . . ------- Supplementary Scan ------- . uStart Page = hxxp://www.google.co.uk/ uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 uInternet Settings,ProxyOverride = 127.0.0.1;*.local uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://uk.red.clientapps.yahoo.com/customize/btyahoo/defaults/su/*http://uk.search.yahoo.com/ TCP: DhcpNameServer = 192.168.1.1 DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab FF - ProfilePath - c:\documents and settings\Yvette Preston\Application Data\Mozilla\Firefox\Profiles\2ub6xudt.default\ FF - prefs.js: keyword.URL - hxxp://www.google.co.uk/search?btnG=Google+Search&q= FF - prefs.js: network.proxy.type - 0 . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2012-03-20 21:46 Windows 5.1.2600 Service Pack 3 NTFS . scanning hidden processes ... . scanning hidden autostart entries ... . scanning hidden files ... . scan completed successfully hidden files: 0 . ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- . - - - - - - - > 'winlogon.exe'(844) c:\windows\system32\Ati2evxx.dll . Completion time: 2012-03-20 21:48:48 ComboFix-quarantined-files.txt 2012-03-20 21:48 ComboFix2.txt 2012-03-19 19:41 ComboFix3.txt 2010-12-21 11:05 . Pre-Run: 76,030,210,048 bytes free Post-Run: 76,032,983,040 bytes free . WindowsXP-KB310994-SP2-Home-BootDisk-ENU.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons UnsupportedDebug="do not select this" /debug multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect [spybotsd] timeout.old=3 . - - End Of File - - 2861C421C363400B412389A8A2DEF284
  9. ESET log - ESETSmartInstaller@High as downloader log: all ok # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6583 # api_version=3.0.2 # EOSSerial=01acde867afbca458654b7cc9a1672ac # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=true # antistealth_checked=true # utc_time=2012-03-20 01:00:24 # local_time=2012-03-20 01:00:24 (+0000, GMT Standard Time) # country="United Kingdom" # lang=1033 # osver=5.1.2600 NT Service Pack 3 # compatibility_mode=512 16777215 100 0 32659 32659 0 0 # compatibility_mode=5121 16777189 100 75 2621568 32681201 0 0 # compatibility_mode=8192 67108863 100 0 4311 4311 0 0 # scanned=155526 # found=9 # cleaned=0 # scan_time=8287 C:\Documents and Settings\Mo\Local Settings\Application Data\zmexuml.exe probably a variant of Win32/Kryptik.ACTX trojan (unable to clean) 00000000000000000000000000000000 I C:\Documents and Settings\Mo\Local Settings\temp\ICReinstall\cnet2_QJRCSetup_zip.exe a variant of Win32/InstallCore.D application (unable to clean) 00000000000000000000000000000000 I C:\Documents and Settings\Mo\Local Settings\Temporary Internet Files\Content.IE5\0IYY2K9I\softw[1].exe probably a variant of Win32/Kryptik.ACTX trojan (unable to clean) 00000000000000000000000000000000 I C:\Documents and Settings\Mo\My Documents\Downloads\cnet2_QJRCSetup_zip.exe a variant of Win32/InstallCore.D application (unable to clean) 00000000000000000000000000000000 I C:\Documents and Settings\poppy star\My Documents\Downloads\Guffins.exe a variant of Win32/AdInstaller application (unable to clean) 00000000000000000000000000000000 I C:\Documents and Settings\Yvette Preston\My Documents\Downloads\videora-ipod-407-setup.exe Win32/OpenCandy application (unable to clean) 00000000000000000000000000000000 I C:\UBCD4Win\UBCD4WinBuilder.iso Win32/PrcView application (unable to clean) 00000000000000000000000000000000 I C:\UBCD4Win\BartPE\PROGRAMS\sdfix\SDFix.exe Win32/PrcView application (unable to clean) 00000000000000000000000000000000 I C:\UBCD4Win\plugin\Cleanup Tools\SDFix\SDFix.exe Win32/PrcView application (unable to clean) 00000000000000000000000000000000 I Just got up so not had chance to test system. They all say unable to clean so I presume it is status quo...
  10. d) You should see the General tab. It should have Normal startup selected (in the radio-box=selection) IF it does not, then you click on Normal startup. It didn't but does now e) Click on Services tab. To get it's display of services. Keep a written list of any changes from my list of services below. That way you and I have a reference document. f) Look at the bottom line Hide all Microsoft services IF and only IF its is checkmarked, then un-check it. This was already unchecked. g) the list of servies may be shown in non-alphabetical order, so .... Look at the heading titled "Service". Click on it as needed so the list is sorted and top of list starts with the "A" services. You can toggle as needed to get the desired order. IF any of below services are NOT shown, don't panic & do not stop, just write down the info for me and proceed with the others ! h) Then using the scroll-bar scroll down the list Look for DNS Client service Is it shown ? Is it checked ? If not, click on that checkbox to checkmark. Shown & Checked Look for Ipsec Services. Is it shown? Is it checked? If not, click on that checkbox to checkmark. Shown & Checked Look for Remote Procedure Call (RPC). Is it shown ? Is it checked? If not, click on that checkbox to checkmark. Shown & Checked Look for Remote Procedure Call (RPC) Locator. Is it shown ? Is it checked? If not, click on that checkbox to checkmark. Shown & Checked Look for Security Center. Is it shown? Is it checked? If not, click on chekbox to checkmark. Shown & Checked Look for Windows Firewall/Internet Connection. Is it shown ? Is it checked? If not, click on that checkbox to checkmark. Shown & Checked When done, press the Apply button, and the OK button. You're likely to be prompted to Restart Windows, do so. If not prompted, you do a Logoff and Restart of Windows. When finished, Exit out of the services console. What does it show for Firewall? Firewall should be ON. Indeed it is and other security related lines ? Virus Protection should show ON. It is ON and lists McAfee I will now proceed with the rest of the steps...
  11. BTW - when I go back into my partner's account it is still there. If I am performing all these steps running my account (Admin) will it still remove problems from hers?? I presume that it will as it is the same machine.........
  12. Well, it finally finished..... ComboFix 12-03-18.04 - Yvette Preston 19/03/2012 18:42:32.2.1 - x86 Microsoft Windows XP Home Edition 5.1.2600.3.1252.44.1033.18.895.252 [GMT 0:00] Running from: c:\documents and settings\Yvette Preston\Desktop\CBfx.exe AV: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83} FW: McAfee Firewall *Enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8} . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\docume~1\YVETTE~1\LOCALS~1\Temp\8aefdf3f-82dc-462e-be91-2ca1c43911cf\CliSecureRT.dll c:\documents and settings\All Users\Application Data\TEMP c:\documents and settings\Yvette Preston\Application Data\PriceGong c:\documents and settings\Yvette Preston\Application Data\PriceGong\Data\1.xml c:\documents and settings\Yvette Preston\Application Data\PriceGong\Data\a.xml c:\documents and settings\Yvette Preston\Application Data\PriceGong\Data\b.xml c:\documents and settings\Yvette Preston\Application Data\PriceGong\Data\c.xml c:\documents and settings\Yvette Preston\Application Data\PriceGong\Data\d.xml c:\documents and settings\Yvette Preston\Application Data\PriceGong\Data\e.xml c:\documents and settings\Yvette Preston\Application Data\PriceGong\Data\f.xml c:\documents and settings\Yvette Preston\Application Data\PriceGong\Data\g.xml c:\documents and settings\Yvette Preston\Application Data\PriceGong\Data\h.xml c:\documents and settings\Yvette Preston\Application Data\PriceGong\Data\i.xml c:\documents and settings\Yvette Preston\Application Data\PriceGong\Data\J.xml c:\documents and settings\Yvette Preston\Application Data\PriceGong\Data\k.xml c:\documents and settings\Yvette Preston\Application Data\PriceGong\Data\l.xml c:\documents and settings\Yvette Preston\Application Data\PriceGong\Data\m.xml c:\documents and settings\Yvette Preston\Application Data\PriceGong\Data\mru.xml c:\documents and settings\Yvette Preston\Application Data\PriceGong\Data\n.xml c:\documents and settings\Yvette Preston\Application Data\PriceGong\Data\o.xml c:\documents and settings\Yvette Preston\Application Data\PriceGong\Data\p.xml c:\documents and settings\Yvette Preston\Application Data\PriceGong\Data\q.xml c:\documents and settings\Yvette Preston\Application Data\PriceGong\Data\r.xml c:\documents and settings\Yvette Preston\Application Data\PriceGong\Data\s.xml c:\documents and settings\Yvette Preston\Application Data\PriceGong\Data\t.xml c:\documents and settings\Yvette Preston\Application Data\PriceGong\Data\u.xml c:\documents and settings\Yvette Preston\Application Data\PriceGong\Data\v.xml c:\documents and settings\Yvette Preston\Application Data\PriceGong\Data\w.xml c:\documents and settings\Yvette Preston\Application Data\PriceGong\Data\x.xml c:\documents and settings\Yvette Preston\Application Data\PriceGong\Data\y.xml c:\documents and settings\Yvette Preston\Application Data\PriceGong\Data\z.xml c:\documents and settings\Yvette Preston\Local Settings\temp\8aefdf3f-82dc-462e-be91-2ca1c43911cf\CliSecureRT.dll c:\documents and settings\Yvette Preston\WINDOWS C:\Thumbs.db c:\windows\system32\muzapp.exe c:\windows\system32\SETF1.tmp c:\windows\system32\SETF5.tmp c:\windows\system32\SETFD.tmp . . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . . -------\Legacy_EPSONSTATUSAGENT2 -------\Service_EPSONStatusAgent2 . . ((((((((((((((((((((((((( Files Created from 2012-02-19 to 2012-03-19 ))))))))))))))))))))))))))))))) . . 2012-03-19 14:37 . 2012-03-19 14:38 -------- d-----w- C:\rsit 2012-03-19 14:33 . 2012-03-19 14:33 -------- d-----w- c:\program files\ERUNT 2012-03-19 12:39 . 2012-03-19 12:39 24064 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys 2012-03-17 22:57 . 2012-03-17 22:57 -------- d-----w- c:\program files\Mozilla Maintenance Service 2012-02-21 20:26 . 2012-02-21 20:26 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Sun . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-03-13 19:59 . 2011-06-24 09:18 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "KiesPDLR"="c:\program files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2011-11-29 21392] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2011-11-22 1318816] "Conime"="c:\windows\system32\conime.exe" [2008-04-14 27648] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-05-04 252136] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "RunNarrator"="Narrator.exe" [2008-04-14 53760] . [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks] "{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128] . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" . [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk] path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup . [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^ExifLauncher2.lnk] path=c:\documents and settings\All Users\Start Menu\Programs\Startup\ExifLauncher2.lnk backup=c:\windows\pss\ExifLauncher2.lnkCommon Startup . [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Google Updater.lnk] path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Google Updater.lnk backup=c:\windows\pss\Google Updater.lnkCommon Startup . [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Windows Search.lnk] path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Windows Search.lnk backup=c:\windows\pss\Windows Search.lnkCommon Startup . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AppleSyncNotifier] 2010-12-14 17:17 47904 ----a-w- c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon] 2011-09-27 07:22 59240 ----a-w- c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIPTA] 2005-03-22 20:05 339968 -c--a-w- c:\ati technologies\ATI Control Panel\atiptaxx.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EKIJ5000StatusMonitor] 2010-09-02 07:23 1638400 ----a-w- c:\windows\system32\spool\drivers\w32x86\3\EKIJ5000MUI.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Epson stylus C82 series 1] 2002-07-01 03:05 74752 -c--a-w- c:\windows\system32\spool\drivers\w32x86\3\E_S10IC2.EXE . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPSON Stylus DX4000 Series] 2006-02-21 04:00 131072 ----a-w- c:\windows\system32\spool\drivers\w32x86\3\E_FATIBEE.EXE . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMJPMIG8.1] 2004-08-04 13:00 208952 -c--a-w- c:\windows\ime\IMJP8_1\imjpmig.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelliPoint] 2006-07-07 23:15 600896 ----a-w- c:\program files\Microsoft IntelliPoint\ipoint.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] 2011-10-09 18:06 421736 ----a-w- c:\program files\iTunes\iTunesHelper.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\itype] 2006-07-07 23:14 576320 ----a-w- c:\program files\Microsoft IntelliType Pro\itype.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesHelper] 2011-11-29 20:58 935312 ----a-w- c:\program files\Samsung\Kies\KiesHelper.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPDLR] 2011-11-29 20:58 21392 ----a-w- c:\program files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent] 2011-11-29 20:58 3508624 ----a-w- c:\program files\Samsung\Kies\KiesTrayAgent.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Mobile Connectivity Suite] 2009-11-19 17:19 598016 ----a-r- c:\program files\HTC\HTC Sync\Application Launcher\Application Launcher.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] 2008-04-14 00:12 1695232 ----a-w- c:\program files\Messenger\msmsgs.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr] 2009-07-26 16:44 3883856 ----a-w- c:\program files\Windows Live\Messenger\msnmsgr.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCMService] 2005-01-28 10:10 110740 -c--a-w- c:\apps\Powercinema\PCMService.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A] 2004-08-04 13:00 455168 ----a-w- c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync] 2004-08-04 13:00 455168 ----a-w- c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] 2010-11-29 17:38 421888 ----a-w- c:\program files\QuickTime\QTTask.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\snpstd3] 2006-09-19 09:07 827392 ----a-w- c:\windows\vsnpstd3.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan] 2005-05-17 17:48 77824 ----a-w- c:\windows\SOUNDMAN.EXE . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] 2011-05-04 13:59 252136 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "gupdate1c9f8127c8c90e"=2 (0x2) "AOL ACS"=2 (0x2) . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus] "DisableMonitoring"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall] "DisableMonitoring"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) "DisableNotifications"= 1 (0x1) . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "c:\\StubInstaller.exe"= "c:\\Program Files\\Real\\RealPlayer\\realplay.exe"= "c:\\Program Files\\AOL 9.0\\aol.exe"= "c:\\WINDOWS\\system32\\sessmgr.exe"= "c:\\Program Files\\Messenger\\msmsgs.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"= "c:\\Program Files\\Bonjour\\mDNSResponder.exe"= "c:\\Program Files\\Kodak\\AiO\\Center\\AiOHomeCenter.exe"= "c:\\Program Files\\Kodak\\AiO\\Center\\Kodak.Statistics.exe"= "c:\\Program Files\\Kodak\\AiO\\Center\\NetworkPrinterDiscovery.exe"= "c:\\Program Files\\Kodak\\AiO\\Firmware\\KodakAiOUpdater.exe"= "c:\\Documents and Settings\\All Users\\Application Data\\Kodak\\Installer\\Setup.exe"= "c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"= "c:\\Program Files\\iTunes\\iTunes.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= "c:\\Program Files\\Common Files\\McAfee\\McSvcHost\\McSvHost.exe"= . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "9322:TCP"= 9322:TCP:EKDiscovery "5353:UDP"= 5353:UDP:Bonjour Port 5353 "9323:TCP"= 9323:TCP:EKDiscovery . R1 mfetdi2k;McAfee Inc. mfetdi2k;c:\windows\system32\drivers\mfetdi2k.sys [07/10/2010 15:45 89792] R2 Kodak AiO Network Discovery Service;Kodak AiO Network Discovery Service;c:\program files\Kodak\AiO\Center\ekdiscovery.exe [13/09/2010 16:18 308656] R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\McAfee\SiteAdvisor\McSACore.exe [07/05/2009 08:07 95200] R2 McMPFSvc;McAfee Personal Firewall Service;"c:\program files\Common Files\Mcafee\McSvcHost\McSvHost.exe" /McCoreSvc [07/10/2010 15:45 214904] R2 McNaiAnn;McAfee VirusScan Announcer;"c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe" /McCoreSvc [07/10/2010 15:45 214904] R2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\mfefire.exe [07/10/2010 15:45 160608] R2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [07/10/2010 15:45 150856] R3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [07/10/2010 15:45 338176] R3 mfendiskmp;mfendiskmp;c:\windows\system32\drivers\mfendisk.sys [07/10/2010 15:45 83856] S2 gupdate1c9f8127c8c90e;Google Update Service (gupdate1c9f8127c8c90e);c:\program files\Google\Update\GoogleUpdate.exe [28/06/2009 17:01 133104] S3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\drivers\ssadadb.sys [09/12/2011 23:56 30312] S3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [07/10/2010 15:45 57600] S3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [28/06/2009 17:01 133104] S3 HTCAND32;HTC Device Driver;c:\windows\system32\drivers\ANDROIDUSB.sys [26/12/2010 16:33 24576] S3 mbamchameleon;mbamchameleon;c:\windows\system32\drivers\mbamchameleon.sys [19/03/2012 12:39 24064] S3 mfendisk;McAfee Core NDIS Intermediate Filter;c:\windows\system32\drivers\mfendisk.sys [07/10/2010 15:45 83856] S3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [07/10/2010 15:45 87656] S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [17/03/2012 22:57 129976] S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\drivers\ssadbus.sys [09/12/2011 23:56 121064] S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\drivers\ssadmdfl.sys [09/12/2011 23:56 12776] S3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\drivers\ssadmdm.sys [09/12/2011 23:56 136808] S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\drivers\ssadserd.sys [09/12/2011 23:56 114280] . --- Other Services/Drivers In Memory --- . *Deregistered* - mfeavfk01 . Contents of the 'Scheduled Tasks' folder . 2012-03-13 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 17:57] . 2012-03-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2009-06-28 17:00] . 2012-03-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2009-06-28 17:00] . 2012-03-19 c:\windows\Tasks\Norton Security Scan for Yvette Preston.job - c:\progra~1\NORTON~2\Engine\370~1.18\Nss.exe [2012-02-04 10:01] . . ------- Supplementary Scan ------- . uStart Page = hxxp://www.google.co.uk/ uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 uInternet Settings,ProxyOverride = 127.0.0.1;*.local uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://uk.red.clientapps.yahoo.com/customize/btyahoo/defaults/su/*http://uk.search.yahoo.com/ TCP: DhcpNameServer = 192.168.1.1 DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab FF - ProfilePath - c:\documents and settings\Yvette Preston\Application Data\Mozilla\Firefox\Profiles\2ub6xudt.default\ FF - prefs.js: keyword.URL - hxxp://www.google.co.uk/search?btnG=Google+Search&q= FF - prefs.js: network.proxy.type - 0 . - - - - ORPHANS REMOVED - - - - . Toolbar-Locked - (no file) AddRemove-01_Simmental - c:\program files\Samsung\USB Drivers\01_Simmental\Uninstall.exe AddRemove-02_Siberian - c:\program files\Samsung\USB Drivers\02_Siberian\Uninstall.exe AddRemove-03_Swallowtail - c:\program files\Samsung\USB Drivers\03_Swallowtail\Uninstall.exe AddRemove-04_semseyite - c:\program files\Samsung\USB Drivers\04_semseyite\Uninstall.exe AddRemove-05_Sloan - c:\program files\Samsung\USB Drivers\05_Sloan\Uninstall.exe AddRemove-06_Spencer - c:\program files\Samsung\USB Drivers\06_Spencer\Uninstall.exe AddRemove-07_Schorl - c:\program files\Samsung\USB Drivers\07_Schorl\Uninstall.exe AddRemove-08_EMPChipset - c:\program files\Samsung\USB Drivers\08_EMPChipset\Uninstall.exe AddRemove-09_Hsp - c:\program files\Samsung\USB Drivers\09_Hsp\Uninstall.exe AddRemove-11_HSP_Plus_Default - c:\program files\Samsung\USB Drivers\11_HSP_Plus_Default\Uninstall.exe AddRemove-16_Shrewsbury - c:\program files\Samsung\USB Drivers\16_Shrewsbury\Uninstall.exe AddRemove-17_EMP_Chipset2 - c:\program files\Samsung\USB Drivers\17_EMP_Chipset2\Uninstall.exe AddRemove-18_Zinia_Serial_Driver - c:\program files\Samsung\USB Drivers\18_Zinia_Serial_Driver\Uninstall.exe AddRemove-19_VIA_driver - c:\program files\Samsung\USB Drivers\19_VIA_driver\Uninstall.exe AddRemove-20_NXP_Driver - c:\program files\Samsung\USB Drivers\20_NXP_Driver\Uninstall.exe AddRemove-21_Searsburg - c:\program files\Samsung\USB Drivers\21_Searsburg\Uninstall.exe AddRemove-22_WiBro_WiMAX - c:\program files\Samsung\USB Drivers\22_WiBro_WiMAX\Uninstall.exe AddRemove-24_flashusbdriver - c:\program files\Samsung\USB Drivers\24_flashusbdriver\Uninstall.exe AddRemove-25_escape - c:\program files\Samsung\USB Drivers\25_escape\Uninstall.exe . . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2012-03-19 19:40 Windows 5.1.2600 Service Pack 3 NTFS . scanning hidden processes ... . scanning hidden autostart entries ... . scanning hidden files ... . scan completed successfully hidden files: 0 . ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- . - - - - - - - > 'winlogon.exe'(840) c:\windows\system32\Ati2evxx.dll . ------------------------ Other Running Processes ------------------------ . c:\windows\system32\Ati2evxx.exe c:\windows\system32\Ati2evxx.exe c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe c:\program files\Bonjour\mDNSResponder.exe c:\apps\Powercinema\Kernel\TV\CLCapSvc.exe c:\apps\Powercinema\Kernel\TV\CLSched.exe c:\program files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe c:\program files\Common Files\EPSON\EBAPI\eEBAgent.exe c:\program files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe c:\program files\Java\jre7\bin\jqs.exe c:\program files\Common Files\McAfee\SystemCore\mcshield.exe c:\windows\system32\rundll32.exe c:\windows\system32\SearchIndexer.exe c:\windows\system32\wscntfy.exe c:\windows\system32\locator.exe . ************************************************************************** . Completion time: 2012-03-19 19:41:52 - machine was rebooted ComboFix-quarantined-files.txt 2012-03-19 19:41 ComboFix2.txt 2010-12-21 11:05 . Pre-Run: 76,022,288,384 bytes free Post-Run: 76,515,807,232 bytes free . WindowsXP-KB310994-SP2-Home-BootDisk-ENU.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons UnsupportedDebug="do not select this" /debug multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect [spybotsd] timeout.old=3 . - - End Of File - - 275A3633F140CE1B452DC2F126454357
  13. No worries - will wait until at least the top of the hour before doing anything else.....
  14. It went through all the stages (50 or so....) and asutomatically restarted. The window says in the top bar - ComboFix Find 3M And then in the window itself it says - Preparing log report. Do not run any programs until ComboFix has finished _ (flashing) Still the same now with a plain background. My background picture is there but no icons.....
  15. I ran combofix but it seems to have stalled at the following screen- Preparing log Do not start any programs until combofix has finished (or words to that effect) Does it normally take a long time at this stage?? It has been about 10-15 mins on this screen so far....
  16. Just about to start combofix but wanted to share this first - Went to DNS client and it wasn't started and didn't give me the option to start it either. Went into properties and under startup options it is "disabled". Is it just a case of selecting "automatic startup"?
  17. BTW - tried the CMD>ipconfig /flushdns and got the following error message - "Windows IP configuration Could not flush the DNS Resolver Cache: function failed during execution" Tried to diagnose the connection problems and got this - DNS Client Diagnostic DNS - Not a home user scenario info Using Web Proxy: no info Resolving name ok for (www.microsoft.com): no warn Is DNS Client Service running: no warn Unrecognized WinSock NSP: mdnsNSP No DNS servers warn Is DNS Client Service running: no action Automated repair: Renew IP address action Releasing the current IP address... error Error releasing the current IP address: The system cannot find the file specified. warn Is DNS Client Service running: no info Redirecting user to support call Gateway Diagnostic Gateway info The following proxy configuration is being used by IE: Automatically Detect Settings:Disabled Automatic Configuration Script: Proxy Server: Proxy Bypass list: info This computer has the following default gateway entry(ies): 192.168.1.1 info This computer has the following IP address(es): 192.168.1.10 info The default gateway is in the same subnet as this computer info The default gateway entry is a valid unicast address info The default gateway address was resolved via ARP in 1 try(ies) info The default gateway was reached via ICMP Ping in 1 try(ies) warn Hostname www.microsoft.com could not be resolved (Error code 0x2afc). Could be either gateway or DNS issue action Automated repair: Reset network connection action Disabling the network adapter action Enabling the network adapter info Network adapter successfully enabled info This computer has the following default gateway entry(ies): 192.168.1.1 info This computer has the following IP address(es): 192.168.1.10 info The default gateway is in the same subnet as this computer info The default gateway entry is a valid unicast address info The default gateway address was resolved via ARP in 1 try(ies) info The default gateway was reached via ICMP Ping in 1 try(ies) warn Hostname www.microsoft.com could not be resolved (Error code 0x2afc). Could be either gateway or DNS issue action Manual repair: Reboot modem info This computer has the following default gateway entry(ies): 192.168.1.1 info This computer has the following IP address(es): 192.168.1.10 info The default gateway is in the same subnet as this computer info The default gateway entry is a valid unicast address info The default gateway address was resolved via ARP in 1 try(ies) info The default gateway was reached via ICMP Ping in 1 try(ies) warn Hostname www.microsoft.com could not be resolved (Error code 0x2afc). Could be either gateway or DNS issue info Waiting some time for the modem/router to stabilize warn Hostname www.microsoft.com could not be resolved (Error code 0x2afc). Could be either gateway or DNS issue info Waiting some time for the modem/router to stabilize warn Hostname www.microsoft.com could not be resolved (Error code 0x2afc). Could be either gateway or DNS issue info Waiting some time for the modem/router to stabilize warn Hostname www.microsoft.com could not be resolved (Error code 0x2afc). Could be either gateway or DNS issue info Waiting some time for the modem/router to stabilize warn Hostname www.microsoft.com could not be resolved (Error code 0x2afc). Could be either gateway or DNS issue info Waiting some time for the modem/router to stabilize warn Hostname www.microsoft.com could not be resolved (Error code 0x2afc). Could be either gateway or DNS issue info Waiting some time for the modem/router to stabilize warn Hostname www.microsoft.com could not be resolved (Error code 0x2afc). Could be either gateway or DNS issue info Waiting some time for the modem/router to stabilize warn Hostname www.microsoft.com could not be resolved (Error code 0x2afc). Could be either gateway or DNS issue info Waiting some time for the modem/router to stabilize warn Hostname www.microsoft.com could not be resolved (Error code 0x2afc). Could be either gateway or DNS issue info Waiting some time for the modem/router to stabilize warn Hostname www.microsoft.com could not be resolved (Error code 0x2afc). Could be either gateway or DNS issue info Waiting some time for the modem/router to stabilize warn Hostname www.microsoft.com could not be resolved (Error code 0x2afc). Could be either gateway or DNS issue IP Layer Diagnostic Corrupted IP routing table info The default route is valid info The loopback route is valid info The local host route is valid info The local subnet route is valid Invalid ARP cache entries action The ARP cache has been flushed IP Configuration Diagnostic Invalid IP address info Valid IP address detected: 192.168.1.10 Wireless Diagnostic Wireless - Service disabled Wireless - User SSID Wireless - First time setup Wireless - Radio off Wireless - Out of range Wireless - Hardware issue Wireless - Novice user Wireless - Ad-hoc network Wireless - Less preferred Wireless - 802.1x enabled Wireless - Configuration mismatch Wireless - Low SNR WinSock Diagnostic WinSock status info All base service provider entries are present in the Winsock catalog. info The Winsock Service provider chains are valid. info Provider entry MSAFD Tcpip [TCP/IP] passed the loopback communication test. info Provider entry MSAFD Tcpip [uDP/IP] passed the loopback communication test. info Provider entry RSVP UDP Service Provider passed the loopback communication test. info Provider entry RSVP TCP Service Provider passed the loopback communication test. info Connectivity is valid for all Winsock service providers. Network Adapter Diagnostic Network location detection info Using home Internet connection Network adapter identification info Network connection: Name=Local Area Connection, Device=Realtek RTL8139/810x Family Fast Ethernet NIC, MediaType=LAN, SubMediaType=LAN info Network connection: Name=1394 Connection, Device=1394 Net Adapter, MediaType=LAN, SubMediaType=1394 info Network connection: Name=Broadband Connection, Device=WAN Miniport (PPPOE), MediaType=PPPOE, SubMediaType=NONE info Network connection: Name=BTbroadband, Device=WAN Miniport (PPPOE), MediaType=PPPOE, SubMediaType=NONE info Ethernet connection selected Network adapter status info Network connection status: Connected HTTP, HTTPS, FTP Diagnostic HTTP, HTTPS, FTP connectivity warn HTTP: Error 12007 connecting to www.microsoft.com: The server name or address could not be resolved warn FTP (Passive): Error 12007 connecting to ftp.microsoft.com: The server name or address could not be resolved warn HTTPS: Error 12007 connecting to www.microsoft.com: The server name or address could not be resolved warn HTTPS: Error 12007 connecting to www.passport.net: The server name or address could not be resolved warn FTP (Active): Error 12007 connecting to ftp.microsoft.com: The server name or address could not be resolved warn HTTP: Error 12007 connecting to www.hotmail.com: The server name or address could not be resolved error Could not make an HTTP connection. error Could not make an HTTPS connection. error Could not make an FTP connection.
  18. Here is the MBAM log - exactly the same as all other scans...... Malwarebytes Anti-Malware 1.60.1.1000 www.malwarebytes.org Database version: v2012.03.19.02 Windows XP Service Pack 3 x86 NTFS Internet Explorer 8.0.6001.18702 Yvette Preston :: YVETTE [administrator] 19/03/2012 15:58:51 mbam-log-2012-03-19 (15-58-51).txt Scan type: Full scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P Scan options disabled: Objects scanned: 394917 Time elapsed: 1 hour(s), 16 minute(s), 7 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) (end)
  19. Well, here is the roguekiller report - RogueKiller V7.3.1 [03/10/2012] by Tigzy mail: tigzyRK<at>gmail<dot>com Feedback: http://www.geekstogo.com/forum/files/file/413-roguekiller/ Blog: http://tigzyrk.blogspot.com Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version Started in : Normal mode User: Yvette Preston [Admin rights] Mode: DNSFix -- Date: 03/19/2012 15:12:39 ¤¤¤ Bad processes: 0 ¤¤¤ ¤¤¤ Driver: [LOADED] ¤¤¤ ¤¤¤ Registry Entries: 2 ¤¤¤ [DNS] HKLM\[...]\ControlSet001\Parameters\Interfaces\{BD33E286-220E-4961-BA65-5AC5818FE4CD} : NameServer (193.36.79.101,193.36.79.100) -> REPLACED () [DNS] HKLM\[...]\ControlSet002\Parameters\Interfaces\{BD33E286-220E-4961-BA65-5AC5818FE4CD} : NameServer (193.36.79.101,193.36.79.100) -> REPLACED () Finished : << RKreport[4].txt >> RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt ; RKreport[4].txt and here is the rkill log - This log file is located at C:\rkill.log. Please post this only if requested to by the person helping you. Otherwise you can close this log when you wish. Rkill was run on 19/03/2012 at 15:24:42. Operating System: Microsoft Windows XP Processes terminated by Rkill or while it was running: c:\PROGRA~1\mcafee\VIRUSS~1\mcvsshld.exe Rkill completed on 19/03/2012 at 15:24:46.
  20. OK, thanks. As I only updated MBAM about an hour or so ago, I have started a full scan. The one I performed earlier (with zero results) took around 2 hours so it will be some time before I post the logs. Still no luck with internet connection - I am connected to the router OK and I can access sites with this (non-affected) PC so I guess it is connected to the roguekiller step, specifically DNS fix???
  21. I have tried to follow the above steps but have experienced problems. After completing Step 2 I tried to open a browser to visit this page to follow the next step and was unable to connect to any websites. This also stopped me from completing step 3 on the problem machine. I used another PC to download Rkill, copied it to a memory stick and ran it on the affected PC without issue. I then opened MBAM and checked the settings, as in Step 4, but when trying to update got the following error - PROGRAM_ERROR_UPDATING (11004, 0, No address found) What do I do now???
  22. RogueKiller V7.3.1 [03/10/2012] by Tigzy mail: tigzyRK<at>gmail<dot>com Feedback: http://www.geekstogo.com/forum/files/file/413-roguekiller/ Blog: http://tigzyrk.blogspot.com Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version Started in : Normal mode User: Yvette Preston [Admin rights] Mode: Scan -- Date: 03/19/2012 14:43:26 ¤¤¤ Bad processes: 0 ¤¤¤ ¤¤¤ Registry Entries: 4 ¤¤¤ [DNS] HKLM\[...]\ControlSet001\Parameters\Interfaces\{BD33E286-220E-4961-BA65-5AC5818FE4CD} : NameServer (193.36.79.101,193.36.79.100) -> FOUND [DNS] HKLM\[...]\ControlSet002\Parameters\Interfaces\{BD33E286-220E-4961-BA65-5AC5818FE4CD} : NameServer (193.36.79.101,193.36.79.100) -> FOUND [HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND [FILEASSO] HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command : (C:\Program Files\Mozilla Firefox 4.0 Beta 6\firefox.exe) -> FOUND ¤¤¤ Particular Files / Folders: ¤¤¤ [FAKED] nwlnknb.sys : c:\windows\system32\drivers\nwlnknb.sys --> CANNOT FIX ¤¤¤ Driver: [LOADED] ¤¤¤ ¤¤¤ Infection : Rogue.AntiSpy-AH ¤¤¤ ¤¤¤ HOSTS File: ¤¤¤ 127.0.0.1 localhost 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com 127.0.0.1 www.0scan.com 127.0.0.1 0scan.com 127.0.0.1 1000gratisproben.com 127.0.0.1 www.1000gratisproben.com 127.0.0.1 1001namen.com 127.0.0.1 www.1001namen.com 127.0.0.1 100888290cs.com 127.0.0.1 www.100888290cs.com 127.0.0.1 www.100sexlinks.com [...] ¤¤¤ MBR Check: ¤¤¤ +++++ PhysicalDrive0: ST3200826A +++++ --- User --- [MBR] 147fd4bb9e465778de37982bb619896b [bSP] 987cf5983f07a295a06cf311d092e291 : Windows XP MBR Code Partition table: 0 - [XXXXXX] FAT32 (0x1b) [HIDDEN!] Offset (sectors): 63 | Size: 6149 Mo 1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 12594960 | Size: 184621 Mo User = LL1 ... OK! User = LL2 ... OK! Finished : << RKreport[1].txt >> RKreport[1].txt
  23. Results of screen317's Security Check version 0.99.31 Windows XP Service Pack 3 x86 Internet Explorer 8 `````````````````````````````` Antivirus/Firewall Check: ``````````````````````````````` Anti-malware/Other Utilities Check: MVPS Hosts File Spybot - Search & Destroy CCleaner Java 6 Update 21 Java 7 Update 1 Java SE Development Kit 7 Update 1 Java 2 Runtime Environment, SE v1.4.2_05 Java version out of date! Adobe Flash Player 11.1.102.63 Mozilla Firefox (12.0.) ```````````````````````````````` Process Check: objlist.exe by Laurent ``````````End of Log````````````
  24. info.txt logfile of random's system information tool 1.09 2012-03-19 14:38:05 ======Uninstall list====== World of Science - Mini Version -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{29E0A36E-4B21-11D6-9C49-0050DAC69116}\Setup.exe" -->"C:\Program Files\Common Files\aolshare\Coach\AolCInUn.exe" -lang="en-uk" -->c:\apps\skype\phone\unins000.exe -->C:\PROGRA~1\COMMON~1\AOL\ACS\AcsUninstall.exe /c -->C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\UNWISE.EXE C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\INSTALL.LOG -->C:\Program Files\Common Files\AOL\Screensaver\uninst_ygpss.exe -->C:\Program Files\Common Files\aolshare\Aolunins_uk.exe -->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0 -->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0 -->C:\Program Files\Learn2.com\StRunner\stuninst.exe -->C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\orun32.isu -->C:\WINDOWS\Modio\SLAMR2KO\Setup.exe /Remove -->C:\WINDOWS\system32\\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19} -->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log -->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe" -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.EXE" -uninstall -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C151CE54-E7EA-4804-854B-F515368B0798}\setup.exe" -l0x9 -->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe Adobe Flash Player 11 Plugin-->C:\WINDOWS\system32\Macromed\Flash\FlashUtil11g_Plugin.exe -maintain plugin Adobe Reader 7.1.0-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A71000000002} Adobe Shockwave Player 11.5-->"C:\WINDOWS\system32\Adobe\Shockwave 11\uninstaller.exe" aiofw-->MsiExec.exe /I{DE6B7599-D3EF-4436-8836-BAA0B0D7768D} aioprnt-->MsiExec.exe /X{0645A454-AD44-4F0D-99CF-6B762735AD1F} Android SDK Tools-->C:\Program Files\Android\android-sdk\uninstall.exe Apple Application Support-->MsiExec.exe /I{A83279FD-CA4B-4206-9535-90974DE76654} Apple Mobile Device Support-->MsiExec.exe /I{A00B9A50-3090-4CFF-9CDA-82DA0BEDAA21} Apple Software Update-->MsiExec.exe /I{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} AviSynth 2.5-->"C:\Program Files\AviSynth 2.5\Uninstall.exe" Bonjour-->MsiExec.exe /X{79155F2B-9895-49D7-8612-D92580E0DE5B} Bratz Activity Centre-->"C:\Program Files\Bratz Activity Centre\unins000.exe" BT NetProtect Plus-->C:\Program Files\McAfee\MSC\mcuihost.exe /body:misp://MSCJsRes.dll::uninstall.html /id:uninstall CANON iMAGE GATEWAY MyCamera Download Plugin-->"C:\Program Files\Common Files\Canon\UIW\1.8.0.0\Uninst.exe" "C:\Program Files\Canon\MyCamera Download Plugin\MyCameraPluginUninstall.ini" CANON iMAGE GATEWAY Task for ZoomBrowser EX-->"C:\Program Files\Common Files\Canon\UIW\1.8.0.0\Uninst.exe" "C:\Program Files\Canon\ZoomBrowser EX\Program\CRWUnInstall.ini" Canon Internet Library for ZoomBrowser EX-->"C:\Program Files\Common Files\Canon\UIW\1.8.0.0\Uninst.exe" "C:\Program Files\Canon\ZoomBrowser EX\Program\CIGUnInstall.ini" Canon MOV Decoder-->"C:\Program Files\Common Files\Canon\UIW\1.8.0.0\Uninst.exe" "C:\Program Files\Canon\Canon MOV Decoder170\CanonMOVDecoderUnInstall.ini" Canon MOV Encoder-->"C:\Program Files\Common Files\Canon\UIW\1.8.0.0\Uninst.exe" "C:\Program Files\Canon\Canon MOV Encoder\CanonMOVEncoderUnInstall.ini" Canon MovieEdit Task for ZoomBrowser EX-->"C:\Program Files\Common Files\Canon\UIW\1.8.0.0\Uninst.exe" "C:\Program Files\Canon\ZoomBrowser EX\Program\MVWUninst.ini" Canon Utilities Digital Photo Professional 3.9-->"C:\Program Files\Common Files\Canon\UIW\1.8.0.0\Uninst.exe" "C:\Program Files\Canon\Digital Photo Professional\Uninst.ini" Canon Utilities EOS Utility-->"C:\Program Files\Common Files\Canon\UIW\1.8.0.0\Uninst.exe" "C:\Program Files\Canon\EOS Utility\Uninst.ini" Canon Utilities Original Data Security Tools-->"C:\Program Files\Common Files\Canon\UIW\1.8.0.0\Uninst.exe" "C:\Program Files\Canon\Original Data Security Tools\Uninst.ini" Canon Utilities PhotoStitch-->"C:\Program Files\Common Files\Canon\UIW\1.8.0.0\Uninst.exe" "C:\Program Files\Canon\PhotoStitch\Uninst.ini" Canon Utilities Picture Style Editor-->"C:\Program Files\Common Files\Canon\UIW\1.8.0.0\Uninst.exe" "C:\Program Files\Canon\Picture Style Editor\Uninst.ini" Canon Utilities WFT Utility-->"C:\Program Files\Common Files\Canon\UIW\1.8.0.0\Uninst.exe" "C:\Program Files\Canon\WFT Utility\Uninst.ini" Canon Utilities ZoomBrowser EX-->"C:\Program Files\Common Files\Canon\UIW\1.8.0.0\Uninst.exe" "C:\Program Files\Canon\ZoomBrowser EX\Program\Uninst.ini" Canon ZoomBrowser EX Memory Card Utility-->"C:\Program Files\Common Files\Canon\UIW\1.8.0.0\Uninst.exe" "C:\Program Files\Canon\ZoomBrowser EX MCU\Uninst.ini" CCleaner-->"C:\Program Files\CCleaner\uninst.exe" center-->MsiExec.exe /I{56BA241F-580C-43D2-8403-947241AAE633} Compatibility Pack for the 2007 Office system-->MsiExec.exe /X{90120000-0020-0409-0000-0000000FF1CE} Critical Update for Windows Media Player 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe" EPSON Attach To Email-->C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{20C45B32-5AB6-46A4-94EF-58950CAF05E5} /l1033 ADDREMOVEDLG EPSON CardMonitor-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{109D28C7-FB38-483A-9C91-001CB59E2699}\SETUP.EXE" -l0x9 uninst EPSON Copy Utility 3-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67EDD823-135A-4D59-87BD-950616D6E857}\SETUP.EXE" -l0x9 -UnInstall EPSON Easy Photo Print-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BC69DDB8-4840-4D9B-BB31-0D4DB2BA1312}\SETUP.EXE" -l0x9 UNINST EPSON PhotoQuicker3.5-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{65F5B7AF-3363-11D7-BB6B-00018021113F}\SETUP.EXE" -l0x9 uninst EPSON PhotoStarter3.1-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C48817E7-AA05-4151-A99D-1E1E550CE801}\SETUP.EXE" -l0x9 uninst EPSON PRINT Image Framer Tool2.1-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{23B59ED4-C360-11D7-875B-0090CC005647}\SETUP.EXE" -l0x9 anything EPSON Printer Software-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R EPSON Scan Assistant-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}\Setup.exe" -l0x9 -u EPSON Scan-->C:\Program Files\epson\escndv\setup\setup.exe /r EPSON Web-To-Page-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}\SETUP.EXE" -l0x9 -anything ERUNT 1.1j-->"C:\Program Files\ERUNT\unins000.exe" ESDX4000_4050_CX3900-->C:\Program Files\EPSON\TPMANUAL\ESDX4000_4050_CX3900\USE_G\DOCUNINS.EXE Focus Magic 3.02-->"C:\Program Files\Focus Magic\unins000.exe" G-Force-->C:\Program Files\SoundSpectrum\G-Force\Uninstall.exe Google Earth-->MsiExec.exe /X{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E} Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} HiJackThis-->MsiExec.exe /X{45A66726-69BC-466B-A7A4-12FCBA4883D7} Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT="" Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT="" Hotfix for Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe" Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe" Hotfix for Windows Media Player 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe" Hotfix for Windows XP (KB2158563)-->"C:\WINDOWS\$NtUninstallKB2158563$\spuninst\spuninst.exe" Hotfix for Windows XP (KB2443685)-->"C:\WINDOWS\$NtUninstallKB2443685$\spuninst\spuninst.exe" Hotfix for Windows XP (KB915800-v4)-->"C:\WINDOWS\$NtUninstallKB915800-v4$\spuninst\spuninst.exe" Hotfix for Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe" Hotfix for Windows XP (KB954708)-->"C:\WINDOWS\$NtUninstallKB954708$\spuninst\spuninst.exe" Hotfix for Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe" Hotfix for Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe" Hotfix for Windows XP (KB976098-v2)-->"C:\WINDOWS\$NtUninstallKB976098-v2$\spuninst\spuninst.exe" Hotfix for Windows XP (KB979306)-->"C:\WINDOWS\$NtUninstallKB979306$\spuninst\spuninst.exe" Hotfix for Windows XP (KB981793)-->"C:\WINDOWS\$NtUninstallKB981793$\spuninst\spuninst.exe" HTC Driver Installer-->MsiExec.exe /X{6D6664A9-3342-4948-9B7E-034EFE366F0F} HTC Sync-->MsiExec.exe /I{DFAA3C20-5968-46A3-B7B0-0AF72D758A59} iTunes-->MsiExec.exe /I{29ED20C9-5E15-4969-9279-25BF3727A3DA} J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060} Java 2 Runtime Environment, SE v1.4.2_05-->MsiExec.exe /I{7148F0A8-6813-11D6-A77B-00B0D0142050} Java 6 Update 21-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216021FF} Java 7 Update 1-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83217001FF} Java SE Development Kit 7 Update 1-->MsiExec.exe /I{32A3A4F4-B792-11D6-A78A-00B0D0170010} Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5} KODAK AiO Home Centre-->C:\Documents and Settings\All Users\Application Data\Kodak\Installer\Setup.exe /Web /x "{E0F274B7-592B-4669-8FB8-8D9825A09858}" CompanyName="Eastman Kodak Company" /code "2057" LEGO Universe-->"C:\Program Files\LEGO Software\LEGO Universe\uninstall.exe" Magic FLAC to MP3 Converter 3.72-->"C:\Program Files\FLAC to MP3 Converter\unins000.exe" Malwarebytes Anti-Malware version 1.60.1.1000-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe" Math Attack-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3AB15CD7-B024-11D4-9766-00508BC086E6}\Setup.exe" McDonald's Fairies-->C:\Program Files\McDonaldsFairies\uninstall.exe Microsoft .NET Framework 1.1 Security Update (KB2416447)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M2416447\M2416447Uninstall.msp" Microsoft .NET Framework 1.1 Security Update (KB979906)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M979906\M979906Uninstall.msp" Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7} Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe" Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe" Microsoft Kernel-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe" Microsoft Kernel-Mode Driver Framework Feature Pack 1.7-->"C:\WINDOWS\$NtUninstallWdf01007$\spuninst\spuninst.exe" Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe" Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC} Microsoft Office Outlook Connector-->MsiExec.exe /I{95120000-0122-0409-0000-0000000FF1CE} Microsoft Office Standard Edition 2003-->MsiExec.exe /I{91120409-6000-11D3-8CFE-0150048383C9} Microsoft Search Enhancement Pack-->MsiExec.exe /X{06E6E30D-B498-442F-A943-07DE41D7F785} Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5} Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB} Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe" Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118} Microsoft Visual C++ 2005 Redistributable - KB2467175-->MsiExec.exe /X{a0fe116e-9a8a-466f-aee0-625cb7c207e3} Microsoft WinUsb 1.0-->"C:\WINDOWS\$NtUninstallwinusb0100$\spuninst\spuninst.exe" Microsoft Works 7.0-->MsiExec.exe /I{764D06D8-D8DE-411E-A1C8-D9E9380F8A84} Mozilla Firefox 12.0 (x86 en-US)-->C:\Program Files\Mozilla Firefox 4.0 Beta 6\uninstall\helper.exe Mozilla Maintenance Service-->"C:\Program Files\Mozilla Maintenance Service\uninstall.exe" MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94} MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F} MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF} MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} MSXML 6.0 Parser-->MsiExec.exe /I{A43BF6A5-D5F0-4AAA-BF41-65995063EC44} Norton Security Scan-->C:\Program Files\Norton Security Scan\Engine\3.7.0.18\InstWrap.exe Palringo-->C:\Program Files\Palringo\Uninstall.exe PIF DESIGNER-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B90450DF-E781-46FD-B1F1-0C86DA40E443}\SETUP.EXE" -l0x9 anything PopCap Browser Plugin-->C:\Program Files\PopCap Games\PopCap Browser Plugin\Uninstall.exe PreReq-->MsiExec.exe /I{DA5BDB2A-12F0-4343-8351-21AAEB293990} Quick JPEG Image Resize and Crop-->MsiExec.exe /I{2FDB98BE-6E6D-4543-A5FD-C4ABB6214FC9} QuickTime-->MsiExec.exe /I{57752979-A1C9-4C02-856B-FBB27AC4E02C} RapidBIT Suite-->MsiExec.exe /I{C5F4A58B-0729-4F9C-9AA5-54008EEE8CFB} Rhapsody Player Engine-->MsiExec.exe /I{8A62A068-3FD6-495A-9F66-26FE94F32EC9} Safari-->MsiExec.exe /I{6B9B0C6F-E5FA-4633-A640-AB98A272ECCA} Samsung Kies-->"C:\Program Files\InstallShield Installation Information\{758C8301-2696-4855-AF45-534B1200980A}\setup.exe" -runfromtemp -l0x0409 -removeonly Samsung Kies-->MsiExec.exe /I{758C8301-2696-4855-AF45-534B1200980A} SAMSUNG USB Driver for Mobile Phones-->C:\Program Files\Samsung\USB Drivers\Uninstall.exe Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A8894F19-59C8-38D2-8A75-36C0CCE56A5B} /qb+ REBOOTPROMPT="" Security Update for Step By Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe" Security Update for Step By Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB928090)-->"C:\WINDOWS\ie7updates\KB928090-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB929969)-->"C:\WINDOWS\ie7updates\KB929969\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB931768)-->"C:\WINDOWS\ie7updates\KB931768-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB933566)-->"C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB937143)-->"C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 8 (KB2183461)-->"C:\WINDOWS\ie8updates\KB2183461-IE8\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 8 (KB2360131)-->"C:\WINDOWS\ie8updates\KB2360131-IE8\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 8 (KB2416400)-->"C:\WINDOWS\ie8updates\KB2416400-IE8\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 8 (KB2482017)-->"C:\WINDOWS\ie8updates\KB2482017-IE8\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 8 (KB2497640)-->"C:\WINDOWS\ie8updates\KB2497640-IE8\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 8 (KB2510531)-->"C:\WINDOWS\ie8updates\KB2510531-IE8\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 8 (KB969897)-->"C:\WINDOWS\ie8updates\KB969897-IE8\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 8 (KB972260)-->"C:\WINDOWS\ie8updates\KB972260-IE8\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 8 (KB974455)-->"C:\WINDOWS\ie8updates\KB974455-IE8\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 8 (KB976325)-->"C:\WINDOWS\ie8updates\KB976325-IE8\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 8 (KB978207)-->"C:\WINDOWS\ie8updates\KB978207-IE8\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 8 (KB981332)-->"C:\WINDOWS\ie8updates\KB981332-IE8\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 8 (KB982381)-->"C:\WINDOWS\ie8updates\KB982381-IE8\spuninst\spuninst.exe" Security Update for Windows Media Encoder (KB2447961)-->"C:\WINDOWS\$NtUninstallKB2447961_WM9L$\spuninst\spuninst.exe" Security Update for Windows Media Encoder (KB954156)-->"C:\WINDOWS\$NtUninstallKB954156_WM9L$\spuninst\spuninst.exe" Security Update for Windows Media Encoder (KB979332)-->"C:\WINDOWS\$NtUninstallKB979332_WM9L$\spuninst\spuninst.exe" Security Update for Windows Media Player (KB2378111)-->"C:\WINDOWS\$NtUninstallKB2378111_WM9$\spuninst\spuninst.exe" Security Update for Windows Media Player (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe" Security Update for Windows Media Player (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe" Security Update for Windows Media Player (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe" Security Update for Windows Media Player (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe" Security Update for Windows Media Player (KB975558)-->"C:\WINDOWS\$NtUninstallKB975558_WM8$\spuninst\spuninst.exe" Security Update for Windows Media Player (KB978695)-->"C:\WINDOWS\$NtUninstallKB978695_WM9$\spuninst\spuninst.exe" Security Update for Windows Media Player 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe" Security Update for Windows Media Player 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe" Security Update for Windows Media Player 9 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe" Security Update for Windows Media Player 9 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP9$\spuninst\spuninst.exe" Security Update for Windows Search 4 - KB963093-->"C:\WINDOWS\$NtUninstallKB963093$\spuninst\spuninst.exe" Security Update for Windows XP (KB2079403)-->"C:\WINDOWS\$NtUninstallKB2079403$\spuninst\spuninst.exe" Security Update for Windows XP (KB2115168)-->"C:\WINDOWS\$NtUninstallKB2115168$\spuninst\spuninst.exe" Security Update for Windows XP (KB2121546)-->"C:\WINDOWS\$NtUninstallKB2121546$\spuninst\spuninst.exe" Security Update for Windows XP (KB2160329)-->"C:\WINDOWS\$NtUninstallKB2160329$\spuninst\spuninst.exe" Security Update for Windows XP (KB2229593)-->"C:\WINDOWS\$NtUninstallKB2229593$\spuninst\spuninst.exe" Security Update for Windows XP (KB2259922)-->"C:\WINDOWS\$NtUninstallKB2259922$\spuninst\spuninst.exe" Security Update for Windows XP (KB2279986)-->"C:\WINDOWS\$NtUninstallKB2279986$\spuninst\spuninst.exe" Security Update for Windows XP (KB2286198)-->"C:\WINDOWS\$NtUninstallKB2286198$\spuninst\spuninst.exe" Security Update for Windows XP (KB2296011)-->"C:\WINDOWS\$NtUninstallKB2296011$\spuninst\spuninst.exe" Security Update for Windows XP (KB2296199)-->"C:\WINDOWS\$NtUninstallKB2296199$\spuninst\spuninst.exe" Security Update for Windows XP (KB2347290)-->"C:\WINDOWS\$NtUninstallKB2347290$\spuninst\spuninst.exe" Security Update for Windows XP (KB2360937)-->"C:\WINDOWS\$NtUninstallKB2360937$\spuninst\spuninst.exe" Security Update for Windows XP (KB2387149)-->"C:\WINDOWS\$NtUninstallKB2387149$\spuninst\spuninst.exe" Security Update for Windows XP (KB2393802)-->"C:\WINDOWS\$NtUninstallKB2393802$\spuninst\spuninst.exe" Security Update for Windows XP (KB2412687)-->"C:\WINDOWS\$NtUninstallKB2412687$\spuninst\spuninst.exe" Security Update for Windows XP (KB2419632)-->"C:\WINDOWS\$NtUninstallKB2419632$\spuninst\spuninst.exe" Security Update for Windows XP (KB2423089)-->"C:\WINDOWS\$NtUninstallKB2423089$\spuninst\spuninst.exe" Security Update for Windows XP (KB2436673)-->"C:\WINDOWS\$NtUninstallKB2436673$\spuninst\spuninst.exe" Security Update for Windows XP (KB2440591)-->"C:\WINDOWS\$NtUninstallKB2440591$\spuninst\spuninst.exe" Security Update for Windows XP (KB2443105)-->"C:\WINDOWS\$NtUninstallKB2443105$\spuninst\spuninst.exe" Security Update for Windows XP (KB2476687)-->"C:\WINDOWS\$NtUninstallKB2476687$\spuninst\spuninst.exe" Security Update for Windows XP (KB2478960)-->"C:\WINDOWS\$NtUninstallKB2478960$\spuninst\spuninst.exe" Security Update for Windows XP (KB2478971)-->"C:\WINDOWS\$NtUninstallKB2478971$\spuninst\spuninst.exe" Security Update for Windows XP (KB2479628)-->"C:\WINDOWS\$NtUninstallKB2479628$\spuninst\spuninst.exe" Security Update for Windows XP (KB2479943)-->"C:\WINDOWS\$NtUninstallKB2479943$\spuninst\spuninst.exe" Security Update for Windows XP (KB2481109)-->"C:\WINDOWS\$NtUninstallKB2481109$\spuninst\spuninst.exe" Security Update for Windows XP (KB2483185)-->"C:\WINDOWS\$NtUninstallKB2483185$\spuninst\spuninst.exe" Security Update for Windows XP (KB2485376)-->"C:\WINDOWS\$NtUninstallKB2485376$\spuninst\spuninst.exe" Security Update for Windows XP (KB2485663)-->"C:\WINDOWS\$NtUninstallKB2485663$\spuninst\spuninst.exe" Security Update for Windows XP (KB2503658)-->"C:\WINDOWS\$NtUninstallKB2503658$\spuninst\spuninst.exe" Security Update for Windows XP (KB2506212)-->"C:\WINDOWS\$NtUninstallKB2506212$\spuninst\spuninst.exe" Security Update for Windows XP (KB2506223)-->"C:\WINDOWS\$NtUninstallKB2506223$\spuninst\spuninst.exe" Security Update for Windows XP (KB2507618)-->"C:\WINDOWS\$NtUninstallKB2507618$\spuninst\spuninst.exe" Security Update for Windows XP (KB2508272)-->"C:\WINDOWS\$NtUninstallKB2508272$\spuninst\spuninst.exe" Security Update for Windows XP (KB2508429)-->"C:\WINDOWS\$NtUninstallKB2508429$\spuninst\spuninst.exe" Security Update for Windows XP (KB2509553)-->"C:\WINDOWS\$NtUninstallKB2509553$\spuninst\spuninst.exe" Security Update for Windows XP (KB2511455)-->"C:\WINDOWS\$NtUninstallKB2511455$\spuninst\spuninst.exe" Security Update for Windows XP (KB2524375)-->"C:\WINDOWS\$NtUninstallKB2524375$\spuninst\spuninst.exe" Security Update for Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe" Security Update for Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe" Security Update for Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe" Security Update for Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe" Security Update for Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe" Security Update for Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe" Security Update for Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe" Security Update for Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe" Security Update for Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe" Security Update for Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe" Security Update for Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe" Security Update for Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe" Security Update for Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe" Security Update for Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe" Security Update for Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe" Security Update for Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe" Security Update for Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe" Security Update for Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe" Security Update for Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe" Security Update for Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe" Security Update for Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe" Security Update for Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe" Security Update for Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe" Security Update for Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe" Security Update for Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe" Security Update for Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe" Security Update for Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe" Security Update for Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe" Security Update for Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe" Security Update for Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe" Security Update for Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe" Security Update for Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe" Security Update for Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe" Security Update for Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe" Security Update for Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe" Security Update for Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe" Security Update for Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe" Security Update for Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe" Security Update for Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe" Security Update for Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe" Security Update for Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe" Security Update for Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe" Security Update for Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe" Security Update for Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe" Security Update for Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe" Security Update for Windows XP (KB970430)-->"C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe" Security Update for Windows XP (KB971468)-->"C:\WINDOWS\$NtUninstallKB971468$\spuninst\spuninst.exe" Security Update for Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe" Security Update for Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe" Security Update for Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe" Security Update for Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe" Security Update for Windows XP (KB972270)-->"C:\WINDOWS\$NtUninstallKB972270$\spuninst\spuninst.exe" Security Update for Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe" Security Update for Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe" Security Update for Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe" Security Update for Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe" Security Update for Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe" Security Update for Windows XP (KB973904)-->"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe" Security Update for Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe" Security Update for Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe" Security Update for Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe" Security Update for Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe" Security Update for Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe" Security Update for Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe" Security Update for Windows XP (KB975560)-->"C:\WINDOWS\$NtUninstallKB975560$\spuninst\spuninst.exe" Security Update for Windows XP (KB975561)-->"C:\WINDOWS\$NtUninstallKB975561$\spuninst\spuninst.exe" Security Update for Windows XP (KB975562)-->"C:\WINDOWS\$NtUninstallKB975562$\spuninst\spuninst.exe" Security Update for Windows XP (KB975713)-->"C:\WINDOWS\$NtUninstallKB975713$\spuninst\spuninst.exe" Security Update for Windows XP (KB977165)-->"C:\WINDOWS\$NtUninstallKB977165$\spuninst\spuninst.exe" Security Update for Windows XP (KB977816)-->"C:\WINDOWS\$NtUninstallKB977816$\spuninst\spuninst.exe" Security Update for Windows XP (KB977914)-->"C:\WINDOWS\$NtUninstallKB977914$\spuninst\spuninst.exe" Security Update for Windows XP (KB978037)-->"C:\WINDOWS\$NtUninstallKB978037$\spuninst\spuninst.exe" Security Update for Windows XP (KB978251)-->"C:\WINDOWS\$NtUninstallKB978251$\spuninst\spuninst.exe" Security Update for Windows XP (KB978262)-->"C:\WINDOWS\$NtUninstallKB978262$\spuninst\spuninst.exe" Security Update for Windows XP (KB978338)-->"C:\WINDOWS\$NtUninstallKB978338$\spuninst\spuninst.exe" Security Update for Windows XP (KB978542)-->"C:\WINDOWS\$NtUninstallKB978542$\spuninst\spuninst.exe" Security Update for Windows XP (KB978601)-->"C:\WINDOWS\$NtUninstallKB978601$\spuninst\spuninst.exe" Security Update for Windows XP (KB978706)-->"C:\WINDOWS\$NtUninstallKB978706$\spuninst\spuninst.exe" Security Update for Windows XP (KB979309)-->"C:\WINDOWS\$NtUninstallKB979309$\spuninst\spuninst.exe" Security Update for Windows XP (KB979482)-->"C:\WINDOWS\$NtUninstallKB979482$\spuninst\spuninst.exe" Security Update for Windows XP (KB979559)-->"C:\WINDOWS\$NtUninstallKB979559$\spuninst\spuninst.exe" Security Update for Windows XP (KB979683)-->"C:\WINDOWS\$NtUninstallKB979683$\spuninst\spuninst.exe" Security Update for Windows XP (KB979687)-->"C:\WINDOWS\$NtUninstallKB979687$\spuninst\spuninst.exe" Security Update for Windows XP (KB980195)-->"C:\WINDOWS\$NtUninstallKB980195$\spuninst\spuninst.exe" Security Update for Windows XP (KB980218)-->"C:\WINDOWS\$NtUninstallKB980218$\spuninst\spuninst.exe" Security Update for Windows XP (KB980232)-->"C:\WINDOWS\$NtUninstallKB980232$\spuninst\spuninst.exe" Security Update for Windows XP (KB980436)-->"C:\WINDOWS\$NtUninstallKB980436$\spuninst\spuninst.exe" Security Update for Windows XP (KB981322)-->"C:\WINDOWS\$NtUninstallKB981322$\spuninst\spuninst.exe" Security Update for Windows XP (KB981852)-->"C:\WINDOWS\$NtUninstallKB981852$\spuninst\spuninst.exe" Security Update for Windows XP (KB981957)-->"C:\WINDOWS\$NtUninstallKB981957$\spuninst\spuninst.exe" Security Update for Windows XP (KB981997)-->"C:\WINDOWS\$NtUninstallKB981997$\spuninst\spuninst.exe" Security Update for Windows XP (KB982132)-->"C:\WINDOWS\$NtUninstallKB982132$\spuninst\spuninst.exe" Security Update for Windows XP (KB982214)-->"C:\WINDOWS\$NtUninstallKB982214$\spuninst\spuninst.exe" Security Update for Windows XP (KB982665)-->"C:\WINDOWS\$NtUninstallKB982665$\spuninst\spuninst.exe" Security Update for Windows XP (KB982802)-->"C:\WINDOWS\$NtUninstallKB982802$\spuninst\spuninst.exe" Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7} Skype Toolbars-->MsiExec.exe /I{CD95D125-2992-4858-B3EF-5F6FB52FBAD6} Skype™ 5.0-->MsiExec.exe /X{E633D396-5188-4E9D-8F6B-BFB8BF3467E8} Sonic MyDVD-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29} Sonic RecordNow!-->MsiExec.exe /I{9541FED0-327F-4DF0-8B96-EF57EF622F19} Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe" Text-To-Speech-Runtime-->MsiExec.exe /X{7B3F0113-E63C-4D6D-AF19-111A3165CCA2} UBCD4Win 3.60-->"C:\UBCD4Win\unins000.exe" Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT="" Update for Windows Internet Explorer 8 (KB971180)-->"C:\WINDOWS\ie8updates\KB971180-IE8\spuninst\spuninst.exe" Update for Windows Internet Explorer 8 (KB976662)-->"C:\WINDOWS\ie8updates\KB976662-IE8\spuninst\spuninst.exe" Update for Windows Internet Explorer 8 (KB976749)-->"C:\WINDOWS\ie8updates\KB976749-IE8\spuninst\spuninst.exe" Update for Windows Internet Explorer 8 (KB980182)-->"C:\WINDOWS\ie8updates\KB980182-IE8\spuninst\spuninst.exe" Update for Windows XP (KB2141007)-->"C:\WINDOWS\$NtUninstallKB2141007$\spuninst\spuninst.exe" Update for Windows XP (KB2345886)-->"C:\WINDOWS\$NtUninstallKB2345886$\spuninst\spuninst.exe" Update for Windows XP (KB2467659)-->"C:\WINDOWS\$NtUninstallKB2467659$\spuninst\spuninst.exe" Update for Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe" Update for Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe" Update for Windows XP (KB955759)-->"C:\WINDOWS\$NtUninstallKB955759$\spuninst\spuninst.exe" Update for Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe" Update for Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe" Update for Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe" Update for Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe" Update for Windows XP (KB971029)-->"C:\WINDOWS\$NtUninstallKB971029$\spuninst\spuninst.exe" Update for Windows XP (KB971737)-->"C:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe" Update for Windows XP (KB973687)-->"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe" Update for Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe" VC_MergeModuleToMSI-->MsiExec.exe /I{900A92BA-19EF-4A34-86CF-7B6C85BDD971} VideoEgg Publisher-->C:\Program Files\VideoEgg\Uninstall.exe Videora iPod Converter 5.04-->C:\Program Files\Red Kawa\Video Converter App\uninstaller.exe Viewpoint Media Player-->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u WinArchiver-->"C:\Program Files\WinArchiver\uninstall.exe" Windows Easy Transfer for Windows 7-->"C:\WINDOWS\$NtUninstallWET7Cable$\spuninst\spuninst.exe" Windows Easy Transfer-->"C:\WINDOWS\$NtUninstallWETCable$\spuninst\spuninst.exe" Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe" Windows Live Essentials-->C:\Program Files\Windows Live\Installer\wlarp.exe Windows Live Essentials-->MsiExec.exe /I{81128EE8-8EAD-4DB0-85C6-17C2CE50FF71} Windows Live Family Safety-->MsiExec.exe /X{139E303E-1050-497F-98B1-9AE87B15C463} Windows Live Mail-->MsiExec.exe /I{6412CECE-8172-4BE5-935B-6CECACD2CA87} Windows Live Messenger-->MsiExec.exe /X{A85FD55B-891B-4314-97A5-EA96C0BD80B5} Windows Live Photo Gallery-->MsiExec.exe /X{D6C75F0B-3BC1-4FC9-B8C5-3F7E8ED059CA} Windows Live Sign-in Assistant-->MsiExec.exe /I{45338B07-A236-4270-9A77-EBB4115517B5} Windows Live Sync-->MsiExec.exe /X{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1} Windows Live Toolbar-->MsiExec.exe /X{995F1E2E-F542-4310-8E1D-9926F5A279B3} Windows Live Upload Tool-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238} Windows Live Writer-->MsiExec.exe /X{178832DE-9DE0-4C87-9F82-9315A9B03985} Windows Media Encoder 9 Series-->msiexec.exe /I {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E} Windows Media Encoder 9 Series-->MsiExec.exe /I{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E} Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe" Windows Media Player 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe" Windows Search 4.0-->"C:\WINDOWS\$NtUninstallKB940157$\spuninst\spuninst.exe" Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe" WinRAR archiver-->C:\Program Files\WinRAR\uninstall.exe WinZip Self-Extractor-->"C:\Program Files\WinZip Self-Extractor\setup.exe" /uninstall Wizard101-->"C:\Program Files\InstallShield Installation Information\{A9E27FF5-6294-46A8-B8FD-77B1DECA3021}\setup.exe" -runfromtemp -l0x0009 -removeonly Xvid 1.2.2 final uninstall-->"C:\Program Files\Xvid\unins001.exe" YouTube Downloader App 2.03-->C:\Program Files\Regensoft\Downloader App\uninstaller.exe ======Hosts File====== 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com ======Security center information====== AV: McAfee Anti-Virus and Anti-Spyware FW: McAfee Firewall ======System event log====== Computer Name: YVETTE Event Code: 36 Message: The time service has not been able to synchronize the system time for 49152 seconds because none of the time providers has been able to provide a usable time stamp. The system clock is unsynchronized. Record Number: 104530 Source Name: W32Time Time Written: 20120207230718.000000+000 Event Type: warning User: Computer Name: YVETTE Event Code: 10010 Message: The server {3A185DDE-E020-4985-A8F2-E27CDC4A0F3A} did not register with DCOM within the required timeout. Record Number: 104418 Source Name: DCOM Time Written: 20120205113505.000000+000 Event Type: error User: NT AUTHORITY\SYSTEM Computer Name: YVETTE Event Code: 36 Message: The time service has not been able to synchronize the system time for 49152 seconds because none of the time providers has been able to provide a usable time stamp. The system clock is unsynchronized. Record Number: 104290 Source Name: W32Time Time Written: 20120205001645.000000+000 Event Type: warning User: Computer Name: YVETTE Event Code: 10010 Message: The server {7A1A13F5-B96B-492A-B591-D7526E0B3013} did not register with DCOM within the required timeout. Record Number: 104265 Source Name: DCOM Time Written: 20120204115610.000000+000 Event Type: error User: YVETTE\Yvette Preston Computer Name: YVETTE Event Code: 10010 Message: The server {3A185DDE-E020-4985-A8F2-E27CDC4A0F3A} did not register with DCOM within the required timeout. Record Number: 104247 Source Name: DCOM Time Written: 20120204104108.000000+000 Event Type: error User: NT AUTHORITY\SYSTEM =====Application event log===== Computer Name: YVETTE Event Code: 5022 Message: MCSCAN32 Engine Initialisation failed. Engine returned error : 3 Record Number: 436 Source Name: McLogEvent Time Written: 20120209170540.000000+000 Event Type: error User: NT AUTHORITY\SYSTEM Computer Name: YVETTE Event Code: 3013 Message: The entry <C:\DOCUMENTS AND SETTINGS\ALL USERS\START MENU\PROGRAMS\MCAFEE\BT NETPROTECT PLUS.LNK> in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) Record Number: 49 Source Name: Windows Search Service Time Written: 20120207102534.000000+000 Event Type: error User: Computer Name: YVETTE Event Code: 3013 Message: The entry <C:\DOCUMENTS AND SETTINGS\ALL USERS\START MENU\PROGRAMS\MCAFEE\BT NETPROTECT PLUS.LNK> in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) Record Number: 48 Source Name: Windows Search Service Time Written: 20120207102534.000000+000 Event Type: error User: Computer Name: YVETTE Event Code: 5022 Message: MCSCAN32 Engine Initialisation failed. Engine returned error : 3 Record Number: 14 Source Name: McLogEvent Time Written: 20120207081909.000000+000 Event Type: error User: NT AUTHORITY\SYSTEM Computer Name: YVETTE Event Code: 5022 Message: MCSCAN32 Engine Initialisation failed. Engine returned error : 3 Record Number: 7 Source Name: McLogEvent Time Written: 20120207081859.000000+000 Event Type: error User: NT AUTHORITY\SYSTEM ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;C:\Program Files\Common Files\ArcSoft\Bin;C:\ATI Technologies\ATI Control Panel;C:\PROGRA~1\COMMON~1\SONICS~1;C:\Program Files\QuickTime\QTSystem;C:\Program Files\Common Files\Teleca Shared "windir"=%SystemRoot% "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "PROCESSOR_ARCHITECTURE"=x86 "PROCESSOR_LEVEL"=15 "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 47 Stepping 0, AuthenticAMD "PROCESSOR_REVISION"=2f00 "NUMBER_OF_PROCESSORS"=1 "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "asl.log"=Destination=file "KDS_LANGUAGE"=52 "CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip "QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip -----------------EOF-----------------
  25. Logfile of random's system information tool 1.09 (written by random/random) Run by Yvette Preston at 2012-03-19 14:37:12 Microsoft Windows XP Home Edition Service Pack 3 System drive C: has 73 GB (39%) free of 185 GB Total RAM: 895 MB (28% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 14:38:00, on 19/03/2012 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe c:\APPS\Powercinema\Kernel\TV\CLSched.exe C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe C:\Program Files\Common Files\EPSON\EBAPI\eEBAgent.exe C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe C:\WINDOWS\system32\E_S00RP2.EXE c:\APPS\HIDSERVICE\HIDSERVICE.exe C:\Program Files\Java\jre7\bin\jqs.exe C:\Program Files\Kodak\AiO\Center\ekdiscovery.exe C:\Program Files\McAfee\SiteAdvisor\McSACore.exe C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe C:\WINDOWS\system32\mfevtps.exe C:\WINDOWS\system32\slserv.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe C:\WINDOWS\system32\SearchIndexer.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\rundll32.exe C:\Program Files\McAfee.com\Agent\mcagent.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe C:\Program Files\Mozilla Firefox 4.0 Beta 6\firefox.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Mozilla Firefox 4.0 Beta 6\plugin-container.exe c:\PROGRA~1\mcafee\SITEAD~1\saui.exe C:\WINDOWS\system32\SearchProtocolHost.exe C:\Documents and Settings\Yvette Preston\My Documents\Downloads\RSIT.exe C:\Program Files\trend micro\Yvette Preston.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://uk.red.clientapps.yahoo.com/customize/btyahoo/defaults/su/*http://uk.search.yahoo.com/ R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;*.local O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file) O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing) O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20111230143956.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: (no name) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - (no file) O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O4 - HKLM\..\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey O4 - HKLM\..\Run: [Conime] %windir%\system32\conime.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [KiesPDLR] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\RunOnce: [RunNarrator] Narrator.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - HKUS\.DEFAULT\..\RunOnce: [RunNarrator] Narrator.exe (User 'Default user') O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\uk.htm O17 - HKLM\System\CCS\Services\Tcpip\..\{BD33E286-220E-4961-BA65-5AC5818FE4CD}: NameServer = 193.36.79.101,193.36.79.100 O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O18 - Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\progra~1\mcafee\msc\mcsniepl.dll O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe O23 - Service: EpsonBidirectionalAgent - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\eEBAgent.exe O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe O23 - Service: EPSON V3 Service2(02) (EPSON_PM_RPCV2_02) - SEIKO EPSON CORPORATION - C:\WINDOWS\system32\E_S00RP2.EXE O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe O23 - Service: Google Update Service (gupdate1c9f8127c8c90e) (gupdate1c9f8127c8c90e) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe O23 - Service: Kodak AiO Network Discovery Service - Eastman Kodak Company - C:\Program Files\Kodak\AiO\Center\ekdiscovery.exe O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe O23 - Service: McAfee Personal Firewall Service (McMPFSvc) - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan\mcods.exe O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - McAfee, Inc. - C:\WINDOWS\system32\mfevtps.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe -- End of file - 11537 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\AppleSoftwareUpdate.job C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job C:\WINDOWS\tasks\Norton Security Scan for Yvette Preston.job =========Mozilla firefox========= ProfilePath - C:\Documents and Settings\Yvette Preston\Application Data\Mozilla\Firefox\Profiles\2ub6xudt.default prefs.js - "browser.search.useDBForOrder" - true prefs.js - "keyword.URL" - "http://www.google.co.uk/search?btnG=Google+Search&q=" "{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ "{4ED1F68A-5463-4931-9384-8FFF5ED91D92}"=C:\Program Files\McAfee\SiteAdvisor "{D19CA586-DD6C-4a0a-96F8-14644F340D60}"=C:\Program Files\Common Files\McAfee\SystemCore [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 10.1 Plugin "Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer] "Description"=Adobe Shockwave Player "Path"=C:\WINDOWS\system32\Adobe\Director\np32dsw.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=] "Description"=iTunes Detector Plug-in "Path"= [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0] "Description"= "Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@canon.com/MycameraPlugin] "Description"=Canon MycameraPlugin "Path"=C:\Program Files\Canon\MyCamera Download Plugin\NPCIG.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@funwebproducts.com/Plugin] "Description"=Fun Web Products Plugin "Path"=C:\Program Files\FunWebProducts\Installr\1.bin\NPFunWeb.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin] "Description"=Google Earth in your browser "Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin] "Description"=Oracle® Next Generation Java™ Plug-In "Path"=C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mcafee.com/MSC,version=10] "Description"=McAfee Total Protection MIME Plugin "Path"=c:\progra~1\mcafee\msc\npmcsn~1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mcafee.com/SAFFPlugin] "Description"= "Path"=C:\Program Files\McAfee\SiteAdvisor\npmcffplg32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=c:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3] "Description"=Office Live Update v1.3 "Path"=C:\Program Files\Microsoft\Office Live\npOLW.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709] "Description"=WLPG Install MIME type "Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5] "Description"=Windows Presentation Foundation plug-in for Mozilla browsers "Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=6.0.11.1864] "Description"=RealPlayer LiveConnect-Enabled Plug-In "Path"=C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprjplug;version=1.0.2.1924] "Description"=RealJukebox Netscape Plugin "Path"=C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.857] "Description"=6.0.12.857 "Path"=C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=] "Description"= "Path"= [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/RhapsodyPlayerEngine,version=1.0] "Description"=Rhapsody Control "Path"=C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3] "Description"=Google Update "Path"=C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9] "Description"=Google Update "Path"=C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@viewpoint.com/VMP] "Description"=Viewpoint Media Player for Mozilla "Path"=C:\Program Files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@yverinfo.yahoo.com/YahooVersionInfoPlugin;version=1.0.0.1] "Description"=Yahoo VerInfo for Mozilla "Path"=C:\Program Files\Yahoo!\Shared\npYVerInfo.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1] "Description"=Yahoo! activeX Plug-in Bridge "Path"=C:\Program Files\Yahoo!\Common\npyaxmpb.dll C:\Program Files\Mozilla Firefox 4.0 Beta 6\extensions\ testpilot@labs.mozilla.com {972ce4c6-7e08-4474-a285-3208198ce6fd} {AB2CE124-6272-4b12-94A9-7303C7397BD1} C:\Program Files\Mozilla Firefox 4.0 Beta 6\components\ binary.manifest browsercomps.dll nsIQTScriptablePlugin.xpt popcaploader.xpt Scriptff.dll C:\Program Files\Mozilla Firefox 4.0 Beta 6\plugins\ npdeployJava1.dll nppopcaploader.dll npqtplugin.dll npqtplugin2.dll npqtplugin3.dll npqtplugin4.dll npqtplugin5.dll npqtplugin6.dll npqtplugin7.dll QuickTimePlugin.class C:\Program Files\Mozilla Firefox 4.0 Beta 6\searchplugins\ amazondotcom.xml bing.xml eBay.xml google.xml twitter.xml wikipedia.xml yahoo.xml ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}] Adobe PDF Reader Link Helper - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}] Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}] Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-05-14 191792] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7DB2D5A0-7241-4E79-B68D-6309F01C5231}] scriptproxy - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20111230143956.dll [2011-12-06 79744] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}] McAfee SiteAdvisor BHO - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll [2012-02-17 281600] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2011-12-09 57224] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}] Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}] EpsonToolBandKicker Class - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-22 368640] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {EF99BD32-C1FB-11D2-892F-0090271D4F88} {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-22 368640] {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll [2012-02-17 281600] {21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "mcui_exe"=C:\Program Files\McAfee.com\Agent\mcagent.exe [2011-11-22 1318816] "Conime"=C:\WINDOWS\system32\conime.exe [2008-04-14 27648] "SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-05-04 252136] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360] "KiesPDLR"=C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2011-11-29 21392] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [2010-12-14 47904] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2011-09-27 59240] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe [2005-03-22 339968] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EKIJ5000StatusMonitor] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EKIJ5000MUI.exe [2010-09-02 1638400] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Epson stylus C82 series 1] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE [2002-07-01 74752] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPSON Stylus DX4000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBEE.EXE [2006-02-21 131072] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-04 208952] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelliPoint] C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2006-07-07 600896] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe [2011-10-09 421736] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\itype] C:\Program Files\Microsoft IntelliType Pro\itype.exe [2006-07-07 576320] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesHelper] C:\Program Files\Samsung\Kies\KiesHelper.exe [2011-11-29 935312] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPDLR] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2011-11-29 21392] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [2011-11-29 3508624] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Mobile Connectivity Suite] C:\Program Files\HTC\HTC Sync\Application Launcher\Application Launcher.exe [2009-11-19 598016] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr] C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883856] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCMService] c:\Apps\Powercinema\PCMService.exe [2005-01-28 110740] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-04 455168] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-04 455168] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] C:\Program Files\QuickTime\qttask.exe [2010-11-29 421888] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\snpstd3] C:\WINDOWS\vsnpstd3.exe [2006-09-19 827392] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan] C:\WINDOWS\SOUNDMAN.EXE [2005-05-17 77824] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-05-04 252136] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk] C:\PROGRA~1\Adobe\ACROBA~2.0\Reader\READER~1.EXE [2008-04-23 29696] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^ExifLauncher2.lnk] C:\PROGRA~1\FINEPI~1\QUICKD~1.EXE [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Google Updater.lnk] C:\PROGRA~1\Google\GOOGLE~3\GOOGLE~1.EXE -systray -startup [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Windows Search.lnk] C:\PROGRA~1\WINDOW~4\WINDOW~1.EXE [2008-05-26 123904] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "gupdate1c9f8127c8c90e"=2 "AOL ACS"=2 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent] C:\WINDOWS\system32\Ati2evxx.dll [2005-03-22 46080] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon] C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefire] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefirek] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefirek.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfevtp] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "DisableTaskMgr"=0 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=323 "NoDrives"=0 "NoDriveAutoRun"=67108863 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "HonorAutoRunSetting"=1 "NoDriveAutoRun"=67108863 "NoDrives"=0 "NoRun"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "C:\StubInstaller.exe"="C:\StubInstaller.exe:*:Disabled:LimeWire swarmed installer" "C:\Program Files\Real\RealPlayer\realplay.exe"="C:\Program Files\Real\RealPlayer\realplay.exe:*:Disabled:RealPlayer" "C:\Program Files\AOL 9.0\aol.exe"="C:\Program Files\AOL 9.0\aol.exe:*:Disabled:AOL" "C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019" "C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Disabled:Windows Messenger" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync" "C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service" "C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent" "C:\Program Files\Kodak\AiO\Center\AiOHomeCenter.exe"="C:\Program Files\Kodak\AiO\Center\AiOHomeCenter.exe:*:Enabled:Kodak.AiO.HomeCenter" "C:\Program Files\Kodak\AiO\Center\Kodak.Statistics.exe"="C:\Program Files\Kodak\AiO\Center\Kodak.Statistics.exe:*:Enabled:Kodak.AiO.Statistics" "C:\Program Files\Kodak\AiO\Center\NetworkPrinterDiscovery.exe"="C:\Program Files\Kodak\AiO\Center\NetworkPrinterDiscovery.exe:*:Enabled:Kodak.AiO.SetupUtility" "C:\Program Files\Kodak\AiO\Firmware\KodakAiOUpdater.exe"="C:\Program Files\Kodak\AiO\Firmware\KodakAiOUpdater.exe:*:Enabled:Kodak.AiO.FwUpdater" "C:\Documents and Settings\All Users\Application Data\Kodak\Installer\Setup.exe"="C:\Documents and Settings\All Users\Application Data\Kodak\Installer\Setup.exe:*:Enabled:Kodak.AiO.Installer" "C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager" "C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes" "C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype" "C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe"="C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe:*:Enabled:McAfee Shared Service Host" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "midimapper"=midimap.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msadpcm"=msadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.trspch"=tssoft32.acm "vidc.cvid"=iccvid.dll "VIDC.I420"=msh263.drv "vidc.iv31"=ir32_32.dll "vidc.iv32"=ir32_32.dll "vidc.iv41"=ir41_32.ax "VIDC.IYUV"=iyuv_32.dll "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVU9"=tsbyuv.dll "VIDC.YVYU"=msyuv.dll "wavemapper"=msacm32.drv "msacm.msg723"=msg723.acm "vidc.M263"=msh263.drv "vidc.M261"=msh261.drv "msacm.msaudio1"=msaud32.acm "msacm.sl_anet"=sl_anet.acm "msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax "vidc.iv50"=ir50_32.dll "msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "msacm.siren"=sirenacm.dll "MSVideo8"=VfWWDM32.dll "vidc.mpg4"=mpg4c32.dll "vidc.mp42"=mpg4c32.dll "vidc.mp43"=mpg4c32.dll "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux"=wdmaud.drv "vidc.XVID"=xvidvfw.dll "vidc.aflc"=flccodec32.dll "vidc.afli"=flccodec32.dll "vidc.aasc"=aasc32.dll ======List of files/folders created in the last 1 month====== 2012-03-19 14:37:11 ----D---- C:\rsit 2012-03-19 14:33:39 ----D---- C:\Program Files\ERUNT 2012-03-19 12:39:46 ----A---- C:\WINDOWS\system32\drivers\mbamchameleon.sys 2012-03-17 22:57:23 ----D---- C:\Documents and Settings\All Users\Application Data\Mozilla 2012-03-17 22:57:22 ----D---- C:\Program Files\Mozilla Maintenance Service ======List of files/folders modified in the last 1 month====== 2012-03-19 14:38:00 ----D---- C:\Program Files\Trend Micro 2012-03-19 14:37:49 ----D---- C:\WINDOWS\Temp 2012-03-19 14:37:14 ----D---- C:\WINDOWS\system32\CatRoot2 2012-03-19 14:34:26 ----D---- C:\WINDOWS\ERDNT 2012-03-19 14:33:39 ----RD---- C:\Program Files 2012-03-19 14:30:35 ----D---- C:\Documents and Settings\All Users\Application Data\Kodak 2012-03-19 14:29:24 ----A---- C:\WINDOWS\SchedLgU.Txt 2012-03-19 14:26:54 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2012-03-19 14:10:53 ----D---- C:\Documents and Settings\Yvette Preston\Application Data\uTorrent 2012-03-19 13:51:05 ----D---- C:\WINDOWS\system32\drivers 2012-03-19 13:11:53 ----D---- C:\WINDOWS\Prefetch 2012-03-19 10:29:50 ----D---- C:\Program Files\Malwarebytes' Anti-Malware 2012-03-17 22:57:34 ----D---- C:\Program Files\Mozilla Firefox 4.0 Beta 6 2012-02-24 12:01:21 ----D---- C:\WINDOWS 2012-02-23 09:51:10 ----D---- C:\Program Files\Common Files\Symantec Shared 2012-02-23 00:09:01 ----HD---- C:\WINDOWS\inf ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 agp440;Intel AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-13 42368] R0 agpCPQ;Compaq AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\agpCPQ.sys [2008-04-13 44928] R0 alim1541;ALI AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\alim1541.sys [2008-04-13 42752] R0 amdagp;AMD AGP Bus Filter Driver; C:\WINDOWS\system32\DRIVERS\amdagp.sys [2008-04-13 43008] R0 cbidf;cbidf; C:\WINDOWS\system32\DRIVERS\cbidf2k.sys [2001-08-17 13952] R0 mfehidk;McAfee Inc. mfehidk; C:\WINDOWS\system32\drivers\mfehidk.sys [2011-10-15 464176] R0 ohci1394;VIA OHCI Compliant IEEE 1394 Host Controller; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696] R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2004-10-21 20576] R0 sisagp;SIS AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\sisagp.sys [2008-04-13 40960] R0 viaagp;VIA AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-13 42240] R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568] R1 AmdK8;AMD Processor Driver; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2005-03-09 36352] R1 mfetdi2k;McAfee Inc. mfetdi2k; C:\WINDOWS\system32\drivers\mfetdi2k.sys [2011-10-15 89792] R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2009-08-05 54752] R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-05-18 2319680] R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2005-03-22 1034752] R3 cfwids;McAfee Inc. cfwids; C:\WINDOWS\system32\drivers\cfwids.sys [2011-10-15 57600] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2009-05-18 26600] R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368] R3 mfeapfk;McAfee Inc. mfeapfk; C:\WINDOWS\system32\drivers\mfeapfk.sys [2011-10-15 121256] R3 mfeavfk;McAfee Inc. mfeavfk; C:\WINDOWS\system32\drivers\mfeavfk.sys [2011-10-15 180816] R3 mfebopk;McAfee Inc. mfebopk; C:\WINDOWS\system32\drivers\mfebopk.sys [2011-10-15 59456] R3 mfefirek;McAfee Inc. mfefirek; C:\WINDOWS\system32\drivers\mfefirek.sys [2011-10-15 338176] R3 mfendiskmp;mfendiskmp; C:\WINDOWS\system32\DRIVERS\mfendisk.sys [2011-10-15 83856] R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160] R3 NuidFltr;NUID filter driver; C:\WINDOWS\system32\DRIVERS\NuidFltr.sys [2009-05-09 14736] R3 Point32;Microsoft IntelliPoint Filter Driver; C:\WINDOWS\system32\DRIVERS\point32.sys [2006-06-30 21760] R3 RTL8023xp;Realtek RTL8139/810x/8169/8110 all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys [2004-12-02 70912] R3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys [2003-01-10 33588] R3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2008-01-19 503144] S1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14592] S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\WINDOWS\System32\Drivers\ssadadb.sys [2011-10-27 30312] S3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800] S3 catchme;catchme; \??\C:\DOCUME~1\YVETTE~1\LOCALS~1\Temp\catchme.sys [] S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024] S3 FINEPIX_PCC;FinePix Digital Camera 020523; C:\WINDOWS\System32\Drivers\V4CB0115.SYS [2001-11-25 81924] S3 HTCAND32;HTC Device Driver; C:\WINDOWS\System32\Drivers\ANDROIDUSB.sys [2009-06-10 24576] S3 mbamchameleon;mbamchameleon; \??\C:\WINDOWS\system32\drivers\mbamchameleon.sys [] S3 mfeavfk01;McAfee Inc.; C:\WINDOWS\system32\drivers\mfeavfk01.sys [] S3 mfendisk;McAfee Core NDIS Intermediate Filter; C:\WINDOWS\system32\DRIVERS\mfendisk.sys [2011-10-15 83856] S3 mferkdet;McAfee Inc. mferkdet; C:\WINDOWS\system32\drivers\mferkdet.sys [2011-10-15 87656] S3 MREMP50;MREMP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS [] S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS [] S3 MREMPR5;MREMPR5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS [] S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS [] S3 MRESP50;MRESP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS [] S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS [] S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504] S3 Mtlmnt5;Mtlmnt5; C:\WINDOWS\system32\DRIVERS\Mtlmnt5.sys [2003-07-16 221736] S3 Mtlstrm;Mtlstrm; C:\WINDOWS\system32\DRIVERS\Mtlstrm.sys [2003-07-02 1301128] S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248] S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880] S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824] S3 NtMtlFax;NtMtlFax; C:\WINDOWS\system32\DRIVERS\NtMtlFax.sys [2003-07-02 167384] S3 RecAgent;recagent; \??\C:\WINDOWS\system32\DRIVERS\RecAgent.sys [] S3 s117bus;Sony Ericsson Device 117 driver (WDM); C:\WINDOWS\system32\DRIVERS\s117bus.sys [2007-06-25 82984] S3 s117mdfl;Sony Ericsson Device 117 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s117mdfl.sys [2007-06-25 14888] S3 s117mdm;Sony Ericsson Device 117 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s117mdm.sys [2007-06-25 108456] S3 s117mgmt;Sony Ericsson Device 117 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s117mgmt.sys [2007-06-25 100264] S3 s117nd5;Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (NDIS); C:\WINDOWS\system32\DRIVERS\s117nd5.sys [2007-06-25 22952] S3 s117obex;Sony Ericsson Device 117 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s117obex.sys [2007-06-25 98344] S3 s117unic;Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (WDM); C:\WINDOWS\system32\DRIVERS\s117unic.sys [2007-06-25 98856] S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136] S3 Slntamr;SmartLink AMR_PCI Driver; C:\WINDOWS\system32\DRIVERS\slntamr.sys [2003-08-20 548952] S3 SlNtHal;SlNtHal; C:\WINDOWS\system32\DRIVERS\Slnthal.sys [2003-07-02 86128] S3 SlWdmSup;SlWdmSup; C:\WINDOWS\system32\DRIVERS\SlWdmSup.sys [2003-07-02 39348] S3 SNPSTD3;USB PC Camera (SNPSTD3); C:\WINDOWS\system32\DRIVERS\snpstd3.sys [2007-03-27 10252544] S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\WINDOWS\system32\DRIVERS\ssadbus.sys [2011-10-27 121064] S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\WINDOWS\system32\DRIVERS\ssadmdfl.sys [2011-10-27 12776] S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\WINDOWS\system32\DRIVERS\ssadmdm.sys [2011-10-27 136808] S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\WINDOWS\system32\DRIVERS\ssadserd.sys [2011-10-27 114280] S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232] S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2011-08-02 42496] S3 usbaudio;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032] S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128] S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856] S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104] S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] S3 winusb;WinUSB Service; C:\WINDOWS\system32\DRIVERS\WinUSB.SYS [2006-11-02 39368] S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528] S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200] S3 WUDFRd;WUDFRd; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [2006-09-28 82944] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2011-10-09 55144] R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2005-03-22 360448] R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 390504] R2 CLCapSvc;CyberLink Background Capture Service (CBCS); c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe [2005-01-28 176220] R2 CLSched;CyberLink Task Scheduler (CTS); c:\APPS\Powercinema\Kernel\TV\CLSched.exe [2005-01-28 110682] R2 CyberLink Media Library Service;CyberLink Media Library Service; C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe [2005-01-28 24576] R2 EPSON_PM_RPCV2_02;EPSON V3 Service2(02); C:\WINDOWS\system32\E_S00RP2.EXE [2002-07-01 62464] R2 EpsonBidirectionalAgent;EpsonBidirectionalAgent; C:\Program Files\Common Files\EPSON\EBAPI\eEBAgent.exe [2002-06-21 184320] R2 EpsonBidirectionalService;EpsonBidirectionalService; C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe [2002-01-29 77824] R2 EPSONStatusAgent2;EPSON Printer Status Agent2; C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe [2002-07-17 94208] R2 GenericHidService;Generic Service for HID Keyboard Input Collections; c:\APPS\HIDSERVICE\HIDSERVICE.exe [2005-01-07 49152] R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2011-12-09 161664] R2 Kodak AiO Network Discovery Service;Kodak AiO Network Discovery Service; C:\Program Files\Kodak\AiO\Center\ekdiscovery.exe [2010-09-13 308656] R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; C:\Program Files\McAfee\SiteAdvisor\McSACore.exe [2012-01-13 95200] R2 McMPFSvc;McAfee Personal Firewall Service; C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe [2011-01-27 214904] R2 mcmscsvc;McAfee Services; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2011-01-27 214904] R2 McNaiAnn;McAfee VirusScan Announcer; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2011-01-27 214904] R2 McNASvc;McAfee Network Agent; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2011-01-27 214904] R2 McProxy;McAfee Proxy Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2011-01-27 214904] R2 McShield;McAfee McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [2011-10-18 166288] R2 mfefire;McAfee Firewall Core Service; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [2011-10-18 160608] R2 mfevtp;McAfee Validation Trust Protection Service; C:\WINDOWS\system32\mfevtps.exe [2011-10-18 150856] R2 SLService;SmartLinkService; C:\WINDOWS\system32\slserv.exe [2003-07-02 45056] R2 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808] R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336] S2 gupdate1c9f8127c8c90e;Google Update Service (gupdate1c9f8127c8c90e); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-06-28 133104] S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632] S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104] S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-08-05 704864] S3 gupdatem;Google Update Service (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-06-28 133104] S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632] S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664] S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2011-10-09 821608] S3 McODS;McAfee Scanner; C:\Program Files\McAfee\VirusScan\mcods.exe [2011-10-18 361976] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2012-03-17 129976] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136] S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408] S4 AOL ACS;AOL Connectivity Service; C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe [2004-02-25 1123440] S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096] S4 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-05-14 249136] -----------------EOF-----------------
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.