alexd123456

Heres the HJT log Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:55:30 PM, on 7/6/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16674) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\WLTRYSVC.EXE C:\WINDOWS\System32\bcmwltry.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe C:\Program Files\McAfee\Common Framework\FrameworkService.exe C:\Program Files\McAfee\VirusScan Enterprise\mcshield.exe C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\WLTRAY.exe C:\WINDOWS\stsystra.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\Google\Google Talk\googletalk.exe C:\Program Files\Microsoft IntelliPoint\ipoint.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Program Files\PowerISO\PWRISOVM.EXE C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE C:\Program Files\McAfee\Common Framework\UdaterUI.exe C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe C:\Program Files\Logitech\QuickCam\Quickcam.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe C:\Program Files\DAEMON Tools\daemon.exe C:\Program Files\AIM6\aim6.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe C:\Program Files\Digital Line Detect\DLG.exe C:\Program Files\McAfee\Common Framework\McTray.exe C:\Program Files\Common Files\AOL\Loader\aolload.exe C:\Program Files\3M\PSNotes\psn.exe C:\PROGRA~1\3M\PSNotes\PSNGive.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe C:\Program Files\AIM6\aolsoftware.exe C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk-rel&channel=us&ibd=4061226 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://desktop.google.com/uninstall-feedback.html?hl=en O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll O4 - HKLM\..\Run: [broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe O4 - HKLM\..\Run: [sigmatelSysTrayApp] stsystra.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp O4 - HKLM\..\Run: [intelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe" O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE O4 - HKLM\..\Run: [shStatEXE] "C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\McAfee\Common Framework\UdaterUI.exe" /StartedFromRunKey O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe" O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [EasyLinkAdvisor] "C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe" /startup O4 - S-1-5-18 Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'SYSTEM') O4 - .DEFAULT Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'Default user') O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart16.exe O4 - Global Startup: Digital Line Detect.lnk = ? O4 - Global Startup: Post-it

and last C:\\ijji\ENGLISH\HgSoundOut.exe C:\\ijji\ENGLISH\HgTool3.dll C:\\ijji\ENGLISH\HgView3.dll C:\\ijji\ENGLISH\IjjiGamePluginRemoveTool.exe C:\\ijji\ENGLISH\ijjiLauncher_PostPluginDll_02.dll C:\\ijji\ENGLISH\ijjiLauncher_PrePluginDll_01.dll C:\\ijji\ENGLISH\ijjiUninstall.exe C:\\ijji\ENGLISH\ijl15.dll C:\\ijji\ENGLISH\nb_option.dat C:\\ijji\ENGLISH\NeoBit.dll C:\\ijji\ENGLISH\PiXel.dll C:\\ijji\ENGLISH\Rounders.exe C:\\ijji\ENGLISH\rounders\Channel.hml C:\\ijji\ENGLISH\rounders\Game.hml C:\\ijji\ENGLISH\rounders\images\Background\img_Board.bmp C:\\ijji\ENGLISH\rounders\images\Background\img_JokboArrow.bmp C:\\ijji\ENGLISH\rounders\images\Button\btn_Betting0.bmp C:\\ijji\ENGLISH\rounders\images\Button\btn_Betting1.bmp C:\\ijji\ENGLISH\rounders\images\Button\btn_Betting2.bmp C:\\ijji\ENGLISH\rounders\images\Button\btn_DontShow.bmp C:\\ijji\ENGLISH\rounders\images\Button\btn_GameAway.bmp C:\\ijji\ENGLISH\rounders\images\Button\btn_GameIAmBack.bmp C:\\ijji\ENGLISH\rounders\images\Button\btn_GameLeave.bmp C:\\ijji\ENGLISH\rounders\images\Button\btn_GameOption.bmp C:\\ijji\ENGLISH\rounders\images\Button\btn_GameReBuy.bmp C:\\ijji\ENGLISH\rounders\images\Button\btn_GameSitIn.bmp C:\\ijji\ENGLISH\rounders\images\Button\btn_GameSitOut.bmp C:\\ijji\ENGLISH\rounders\images\Button\btn_PreBetting0.bmp C:\\ijji\ENGLISH\rounders\images\Button\btn_PreBetting1.bmp C:\\ijji\ENGLISH\rounders\images\Button\btn_PreBetting2.bmp C:\\ijji\ENGLISH\rounders\images\Button\btn_PreBetting3.bmp C:\\ijji\ENGLISH\rounders\images\Button\btn_PreBetting4.bmp C:\\ijji\ENGLISH\rounders\images\Button\btn_PreBetting5.bmp C:\\ijji\ENGLISH\rounders\images\Button\btn_ShowCard.bmp C:\\ijji\ENGLISH\rounders\images\Button\btn_TitleCapture.bmp C:\\ijji\ENGLISH\rounders\images\Button\btn_TitleExitRoom.bmp C:\\ijji\ENGLISH\rounders\images\Button\btn_TitleFullMode.bmp C:\\ijji\ENGLISH\rounders\images\Button\btn_TitleMinimize.bmp C:\\ijji\ENGLISH\rounders\images\Button\btn_TitleWndMode.bmp C:\\ijji\ENGLISH\rounders\images\Button\img_BettingGaugeBack.bmp C:\\ijji\ENGLISH\rounders\images\Button\img_BettingGaugeBar.bmp C:\\ijji\ENGLISH\rounders\images\Button\img_PreBettingCheck.bmp C:\\ijji\ENGLISH\rounders\images\BuyInDlg\btn_BuyInDlgCancel.bmp C:\\ijji\ENGLISH\rounders\images\BuyInDlg\btn_BuyInDlgDeposit.bmp C:\\ijji\ENGLISH\rounders\images\BuyInDlg\btn_BuyInDlgLeave.bmp C:\\ijji\ENGLISH\rounders\images\BuyInDlg\btn_BuyInDlgOk.bmp C:\\ijji\ENGLISH\rounders\images\BuyInDlg\btn_BuyInDlgRefill.bmp C:\\ijji\ENGLISH\rounders\images\BuyInDlg\btn_BuyInDlgUseMax.bmp C:\\ijji\ENGLISH\rounders\images\BuyInDlg\img_BuyInDlgBack.bmp C:\\ijji\ENGLISH\rounders\images\BuyInDlg\Thumbs.db C:\\ijji\ENGLISH\rounders\images\Card\img_BigCardBack.bmp C:\\ijji\ENGLISH\rounders\images\Card\tile_BigCard.bmp C:\\ijji\ENGLISH\rounders\images\Card\tile_SmallCard.bmp C:\\ijji\ENGLISH\rounders\images\Card\tile_SmallCardBack0.bmp C:\\ijji\ENGLISH\rounders\images\Card\tile_SmallCardBack1.bmp C:\\ijji\ENGLISH\rounders\images\Card\tile_SmallCardBack2.bmp C:\\ijji\ENGLISH\rounders\images\Card\tile_SmallCardBack3.bmp C:\\ijji\ENGLISH\rounders\images\Card\tile_SmallCardBack4.bmp C:\\ijji\ENGLISH\rounders\images\Card\tile_SmallCardBack5.bmp C:\\ijji\ENGLISH\rounders\images\Card\tile_SmallCardBack6.bmp C:\\ijji\ENGLISH\rounders\images\Card\tile_SmallCardBack7.bmp C:\\ijji\ENGLISH\rounders\images\Card\tile_SmallCardBack8.bmp C:\\ijji\ENGLISH\rounders\images\Card\tile_SmallCardBack9.bmp C:\\ijji\ENGLISH\rounders\images\Card\tile_SmallCardBackCommon.bmp C:\\ijji\ENGLISH\rounders\images\Channel\_AdLogo1.bmp C:\\ijji\ENGLISH\rounders\images\Channel\_AdLogo2.bmp C:\\ijji\ENGLISH\rounders\images\Channel\_AdLogo3.bmp C:\\ijji\ENGLISH\rounders\images\Channel\_AdLogo4.bmp C:\\ijji\ENGLISH\rounders\images\Channel\_ChangeChannelBtn.him C:\\ijji\ENGLISH\rounders\images\Channel\_ChannelInfoBg.him C:\\ijji\ENGLISH\rounders\images\Channel\_ChnlGrl_AdBg1.him C:\\ijji\ENGLISH\rounders\images\Channel\_ChnlGrl_AdBg2.him C:\\ijji\ENGLISH\rounders\images\Channel\_ChnlGrl_AdBg3.him C:\\ijji\ENGLISH\rounders\images\Channel\_ChnlGrl_AdBg4.him C:\\ijji\ENGLISH\rounders\images\Channel\_ChnlGrp_ChannelListCtrlBg.him C:\\ijji\ENGLISH\rounders\images\Channel\_ChnlGrp_InfoBg.him C:\\ijji\ENGLISH\rounders\images\Channel\_ChnlGrp_JoinBtn.him C:\\ijji\ENGLISH\rounders\images\Channel\_ChnlGrp_ListCtrlBg.him C:\\ijji\ENGLISH\rounders\images\Channel\_ChnlGrp_RefreshBtn.him C:\\ijji\ENGLISH\rounders\images\Channel\_ChnlGrp_RoomGrpTitle.him C:\\ijji\ENGLISH\rounders\images\Channel\_ChnlGrp_RoomListTitle.him C:\\ijji\ENGLISH\rounders\images\Channel\_ChnlGrp_TextInfoBg.him C:\\ijji\ENGLISH\rounders\images\Channel\_Chnlst_ChnlGrpListCornerBottom.him C:\\ijji\ENGLISH\rounders\images\Channel\_Chnlst_ChnlGrpListCornerTop.him C:\\ijji\ENGLISH\rounders\images\Channel\_ComboboxArrowBtn.him C:\\ijji\ENGLISH\rounders\images\Channel\_CreateATableBtn.him C:\\ijji\ENGLISH\rounders\images\Channel\_GMark.him C:\\ijji\ENGLISH\rounders\images\Channel\_HowToPlayBtn.him C:\\ijji\ENGLISH\rounders\images\Channel\_MainframeAuctionBtn.him C:\\ijji\ENGLISH\rounders\images\Channel\_MainframeBorderBottom.him C:\\ijji\ENGLISH\rounders\images\Channel\_MainframeBorderSide.him C:\\ijji\ENGLISH\rounders\images\Channel\_MainframeCaption.him C:\\ijji\ENGLISH\rounders\images\Channel\_MainFrameCornerBottom.him C:\\ijji\ENGLISH\rounders\images\Channel\_MainframeExitBtn.him C:\\ijji\ENGLISH\rounders\images\Channel\_MainFrameMaximizeBtn.him C:\\ijji\ENGLISH\rounders\images\Channel\_MainFrameMinimizeBtn.him C:\\ijji\ENGLISH\rounders\images\Channel\_MyInfoBg.him C:\\ijji\ENGLISH\rounders\images\Channel\_PlayNowBtn.him C:\\ijji\ENGLISH\rounders\images\Channel\_PlayNowBtn_HoverAni.him C:\\ijji\ENGLISH\rounders\images\Channel\_Popup_BorderBottom.him C:\\ijji\ENGLISH\rounders\images\Channel\_Popup_BorderSide.him C:\\ijji\ENGLISH\rounders\images\Channel\_Popup_BorderTop.him C:\\ijji\ENGLISH\rounders\images\Channel\_Popup_CancelBtn.him C:\\ijji\ENGLISH\rounders\images\Channel\_Popup_CaptionIcon.him C:\\ijji\ENGLISH\rounders\images\Channel\_Popup_CornerBottom.him C:\\ijji\ENGLISH\rounders\images\Channel\_Popup_CornerTop.him C:\\ijji\ENGLISH\rounders\images\Channel\_Popup_OKBtn.him C:\\ijji\ENGLISH\rounders\images\Channel\_Popup_Title_Ad.him C:\\ijji\ENGLISH\rounders\images\Channel\_Popup_Title_Auctions.him C:\\ijji\ENGLISH\rounders\images\Channel\_RoomJoinBtn.him C:\\ijji\ENGLISH\rounders\images\Channel\_RoomListCornerBottom.him C:\\ijji\ENGLISH\rounders\images\Channel\_RoomListCornerTop.him C:\\ijji\ENGLISH\rounders\images\Channel\_RoundersGameTitle.bmp C:\\ijji\ENGLISH\rounders\images\Channel\_TabBtnNotice.him C:\\ijji\ENGLISH\rounders\images\Channel\_TableImage_AA.him C:\\ijji\ENGLISH\rounders\images\Channel\AuctionNotifyBg.him C:\\ijji\ENGLISH\rounders\images\Channel\btn_DlgCancel.bmp C:\\ijji\ENGLISH\rounders\images\Channel\btn_DlgCheck.bmp C:\\ijji\ENGLISH\rounders\images\Channel\btn_DlgFold.bmp C:\\ijji\ENGLISH\rounders\images\Channel\btn_DlgLeave.bmp C:\\ijji\ENGLISH\rounders\images\Channel\btn_DlgOk.bmp C:\\ijji\ENGLISH\rounders\images\Channel\btn_TnmBuyInDlgPrizePage.bmp C:\\ijji\ENGLISH\rounders\images\Channel\btn_TnmBuyInDlgRefill.bmp C:\\ijji\ENGLISH\rounders\images\Channel\btn_TnmWinInfoDlgContinue.bmp C:\\ijji\ENGLISH\rounders\images\Channel\btn_TnmWinInfoDlgStop.bmp C:\\ijji\ENGLISH\rounders\images\Channel\img_TnmBuyInDlgAlreadyFinalWin.bmp C:\\ijji\ENGLISH\rounders\images\Channel\img_TnmBuyInDlgBack.bmp C:\\ijji\ENGLISH\rounders\images\Channel\img_TnmBuyInDlgEnterTournament.bmp C:\\ijji\ENGLISH\rounders\images\Channel\img_TnmBuyInDlgNotEnoughMoney.bmp C:\\ijji\ENGLISH\rounders\images\Channel\img_TnmWinInfoDlgBack.bmp C:\\ijji\ENGLISH\rounders\images\Channel\img_UserInfoArrow.bmp C:\\ijji\ENGLISH\rounders\images\Channel\img_UserInfoLine.bmp C:\\ijji\ENGLISH\rounders\images\Character\img_Chr0.bmp C:\\ijji\ENGLISH\rounders\images\Character\img_Chr1.bmp C:\\ijji\ENGLISH\rounders\images\Character\img_Chr2.bmp C:\\ijji\ENGLISH\rounders\images\Character\img_Chr3.bmp C:\\ijji\ENGLISH\rounders\images\Character\img_Chr4.bmp C:\\ijji\ENGLISH\rounders\images\Character\img_Chr5.bmp C:\\ijji\ENGLISH\rounders\images\Character\img_Chr6.bmp C:\\ijji\ENGLISH\rounders\images\Character\img_Chr7.bmp C:\\ijji\ENGLISH\rounders\images\Character\img_Chr8.bmp C:\\ijji\ENGLISH\rounders\images\Character\img_Chr9.bmp C:\\ijji\ENGLISH\rounders\images\Chat\btn_ChatScrollCenter.bmp C:\\ijji\ENGLISH\rounders\images\Chat\btn_ChatScrollDown.bmp C:\\ijji\ENGLISH\rounders\images\Chat\btn_ChatScrollUp.bmp C:\\ijji\ENGLISH\rounders\images\Chat\img_ChatScroll.bmp C:\\ijji\ENGLISH\rounders\images\Chat\img_ChatWindow.bmp C:\\ijji\ENGLISH\rounders\images\Chip\img_DealerChip.bmp C:\\ijji\ENGLISH\rounders\images\Chip\tile_ChipA.bmp C:\\ijji\ENGLISH\rounders\images\Chip\tile_ChipB.bmp C:\\ijji\ENGLISH\rounders\images\Chip\tile_ChipShadow.bmp C:\\ijji\ENGLISH\rounders\images\GameOption\btn_GameOptCancel.bmp C:\\ijji\ENGLISH\rounders\images\GameOption\btn_GameOptOk.bmp C:\\ijji\ENGLISH\rounders\images\GameOption\img_GameOptBack.bmp C:\\ijji\ENGLISH\rounders\images\GameOption\img_GameOptCheckBox.bmp C:\\ijji\ENGLISH\rounders\images\Player\AwayMark.bmp C:\\ijji\ENGLISH\rounders\images\Player\spr_AllinEffect.hgs C:\\ijji\ENGLISH\rounders\images\Player\spr_BettingTextAllin.hgs C:\\ijji\ENGLISH\rounders\images\Player\spr_BettingTextBet.hgs C:\\ijji\ENGLISH\rounders\images\Player\spr_BettingTextCall.hgs C:\\ijji\ENGLISH\rounders\images\Player\spr_BettingTextCheck.hgs C:\\ijji\ENGLISH\rounders\images\Player\spr_BettingTextFold.hgs C:\\ijji\ENGLISH\rounders\images\Player\spr_BettingTextRaise.hgs C:\\ijji\ENGLISH\rounders\images\Player\tile_Grade.bmp C:\\ijji\ENGLISH\rounders\images\Player\tile_UserInfoBar0.bmp C:\\ijji\ENGLISH\rounders\images\Player\tile_UserInfoBar1.bmp C:\\ijji\ENGLISH\rounders\images\Player\tile_UserInfoBar2.bmp C:\\ijji\ENGLISH\rounders\images\Player\tile_UserInfoBar3.bmp C:\\ijji\ENGLISH\rounders\images\Player\tile_UserInfoBar4.bmp C:\\ijji\ENGLISH\rounders\images\Player\tile_UserInfoBar5.bmp C:\\ijji\ENGLISH\rounders\images\Player\tile_UserInfoBar6.bmp C:\\ijji\ENGLISH\rounders\images\Player\tile_UserInfoBar7.bmp C:\\ijji\ENGLISH\rounders\images\Player\tile_UserInfoBar8.bmp C:\\ijji\ENGLISH\rounders\images\Player\tile_UserInfoBar9.bmp C:\\ijji\ENGLISH\rounders\images\TimeGauge\img_TimeGaugeBack.bmp C:\\ijji\ENGLISH\rounders\images\TimeGauge\img_TimeGaugeBar.bmp C:\\ijji\ENGLISH\rounders\sounds\effect\Bgm_GameStart1.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Bgm_GameStart2.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Bgm_GameStart3.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Bgm_GameStart4.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Bgm_GameStart5.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Bgm_Lobby.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_BettingBetBig1.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_BettingBetBig2.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_BettingBetBig3.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_BettingBetMedium1.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_BettingBetMedium2.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_BettingBetMedium3.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_BettingBetSmall1.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_BettingBetSmall2.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_BettingBetSmall3.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_BettingBetSmall4.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_BettingCheck.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_BettingFold.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_Buyin.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_ChipToPlayer.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_ChipToTable.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_DealPlayerCard.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_DealPlayers.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_DoorClose.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_DoorOpen.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_MouseClickBtn.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_MouseClickPreBettingBtn.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_MouseOverBtn.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_MyTurn.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_OpenTableCard.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_SitdownChair.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_Timer.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_Win.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_WinBigpot.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_WinBigpotMe.ogg C:\\ijji\ENGLISH\rounders\sounds\effect\Eff_WinMe.ogg C:\\ijji\ENGLISH\rounders\VideoObject3\cache\data\chess_170_170\chess_170_170.png C:\\ijji\ENGLISH\rounders\VideoObject3\cache\data\chess_170_170\df.dat C:\\ijji\ENGLISH\rounders\VideoObject3\cache\data\ijji_120_240\df.dat C:\\ijji\ENGLISH\rounders\VideoObject3\cache\data\ijji_120_240\ijji_120_240.jpg C:\\ijji\ENGLISH\rounders\VideoObject3\cache\data\ijji_728_90\df.dat C:\\ijji\ENGLISH\rounders\VideoObject3\cache\data\ijji_728_90\ijji_728_90.jpg C:\\ijji\ENGLISH\rounders\VideoObject3\cache\data\ijji_banner_300_250\df.dat C:\\ijji\ENGLISH\rounders\VideoObject3\cache\data\ijji_banner_300_250\ijji_banner_300_250.swf C:\\ijji\ENGLISH\rounders\VideoObject3\cache\Objects.dfo C:\\ijji\ENGLISH\rounders\VideoObject3\Engine.Var C:\\ijji\ENGLISH\roundershgc.hsp C:\\ijji\ENGLISH\SwitcheRooUS.ini C:\\ijji\ENGLISH\sysfiles\MFC71.dll C:\\ijji\ENGLISH\sysfiles\msvcp71.dll C:\\ijji\ENGLISH\sysfiles\msvcr71.dll C:\\ijji\ENGLISH\u_dcity.agt C:\\ijji\ENGLISH\u_gbound.exe C:\\ijji\ENGLISH\u_skid.exe C:\\ijji\ENGLISH\u_skid\dbghelp.dll C:\\ijji\ENGLISH\u_skid\DSETUP.dll C:\\ijji\ENGLISH\u_skid\HanAuthForClient.dll C:\\ijji\ENGLISH\u_skid\HanReportForClient.dll C:\\ijji\ENGLISH\u_skid\u_dcity.exe C:\\ijji\ENGLISH\u_skid_fordownloader.exe C:\\ijji\ENGLISH\urlhgb3.cfg C:\\ijji\ENGLISH\urlhgc3.cfg C:\\ijji\ENGLISH\USAAniChannelWnd.dll C:\\ijji\ENGLISH\UsaBase.dll C:\\ijji\ENGLISH\USABASE.hvr C:\\ijji\ENGLISH\UsaBaseExt.dll C:\\ijji\ENGLISH\XDebug.dll C:\\ijji\ENGLISH\XFire\xfire_installer_27409.driftcity.exe C:\\ijji\ENGLISH\XInNetwork.dll C:\\ijji\ENGLISH\XPlatform.dll C:\\ijji\ENGLISH\XStream.dll C:\\ijji\ENGLISH\XSystem.dll C:\Documents and Settings\AlexDong\Application Data\dvdcss C:\Documents and Settings\AlexDong\Application Data\dvdcss\CACHEDIR.TAG C:\Documents and Settings\AlexDong\Application Data\dvdcss\THE_WIZARD_OF_OZ-2005081516371200-2b36e4e9d7\0000019893 C:\Documents and Settings\AlexDong\Application Data\dvdcss\THE_WIZARD_OF_OZ-2005081516371200-2b36e4e9d7\000002038e C:\Documents and Settings\AlexDong\Local Settings\Temporary Internet Files\ijjistarter2FxB.exe C:\Documents and Settings\All Users\Application Data\Symantec C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Product.Inventory.LiveUpdate C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Settings.LiveUpdate C:\Documents and Settings\All Users\Application Data\Symantec\rmt.dat C:\Documents and Settings\All Users\Application Data\Symantec\Shared\QBackup\{6264B4CC-4FA2-4731-9E10-0558B109FCDF}.qbi C:\Documents and Settings\All Users\Application Data\Symantec\Shared\QBackup\{6264B4CC-4FA2-4731-9E10-0558B109FCDF}\{3B178E35-4454-4DBD-AAFC-10FDA0760093}.qbd C:\Documents and Settings\All Users\Application Data\Symantec\Shared\QBackup\{6264B4CC-4FA2-4731-9E10-0558B109FCDF}\{3B178E35-4454-4DBD-AAFC-10FDA0760093}.qbi C:\Documents and Settings\All Users\Application Data\Symantec\Shared\QBackup\{6264B4CC-4FA2-4731-9E10-0558B109FCDF}\{3E9DAB77-A08C-43ED-9208-BBFA2663FE25}.qbd C:\Documents and Settings\All Users\Application Data\Symantec\Shared\QBackup\{6264B4CC-4FA2-4731-9E10-0558B109FCDF}\{3E9DAB77-A08C-43ED-9208-BBFA2663FE25}.qbi C:\Documents and Settings\All Users\Application Data\Symantec\Shared\QBackup\{6264B4CC-4FA2-4731-9E10-0558B109FCDF}\{43090295-8F23-4899-BEB9-553617D0BFC9}.qbd C:\Documents and Settings\All Users\Application Data\Symantec\Shared\QBackup\{6264B4CC-4FA2-4731-9E10-0558B109FCDF}\{43090295-8F23-4899-BEB9-553617D0BFC9}.qbi C:\Documents and Settings\All Users\Application Data\Symantec\Shared\QBackup\{6264B4CC-4FA2-4731-9E10-0558B109FCDF}\{690F8E8D-BDE6-45D2-9FCE-E44C869886D5}.qbd C:\Documents and Settings\All Users\Application Data\Symantec\Shared\QBackup\{6264B4CC-4FA2-4731-9E10-0558B109FCDF}\{690F8E8D-BDE6-45D2-9FCE-E44C869886D5}.qbi C:\Documents and Settings\All Users\Application Data\Symantec\Shared\QBackup\{6264B4CC-4FA2-4731-9E10-0558B109FCDF}\{7734629D-4A43-42D9-BFEA-E3D4A58C9E5F}.qbd C:\Documents and Settings\All Users\Application Data\Symantec\Shared\QBackup\{6264B4CC-4FA2-4731-9E10-0558B109FCDF}\{7734629D-4A43-42D9-BFEA-E3D4A58C9E5F}.qbi C:\Documents and Settings\All Users\Application Data\Symantec\Shared\QBackup\{6264B4CC-4FA2-4731-9E10-0558B109FCDF}\{CA435F40-E562-4F7D-9225-CF7671884D1E}.qbd C:\Documents and Settings\All Users\Application Data\Symantec\Shared\QBackup\{6264B4CC-4FA2-4731-9E10-0558B109FCDF}\{CA435F40-E562-4F7D-9225-CF7671884D1E}.qbi C:\Documents and Settings\All Users\Application Data\Symantec\Shared\QBackup\{6264B4CC-4FA2-4731-9E10-0558B109FCDF}\{E26713BF-57D3-40A9-8328-96C008F05B88}.qbd C:\Documents and Settings\All Users\Application Data\Symantec\Shared\QBackup\{6264B4CC-4FA2-4731-9E10-0558B109FCDF}\{E26713BF-57D3-40A9-8328-96C008F05B88}.qbi C:\Documents and Settings\All Users\Application Data\Symantec\Shared\QBackup\{6264B4CC-4FA2-4731-9E10-0558B109FCDF}\{EE35A479-29A5-4D4A-8D28-FD83102FB8E8}.qbd C:\Documents and Settings\All Users\Application Data\Symantec\Shared\QBackup\{6264B4CC-4FA2-4731-9E10-0558B109FCDF}\{EE35A479-29A5-4D4A-8D28-FD83102FB8E8}.qbi C:\Documents and Settings\All Users\Application Data\Symantec\wds.dat C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe\ C:\Program Files\Common Files\Symantec Shared C:\Program Files\Common Files\Symantec Shared\CCPD-LC\ez_log.htm C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcnet.dll C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcrst.dll C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlctnk.dll C:\Program Files\Common Files\Symantec Shared\COH\coh.cache C:\Program Files\Common Files\Symantec Shared\COH\COH32.exe C:\Program Files\Common Files\Symantec Shared\COH\COH64.exe C:\Program Files\Common Files\Symantec Shared\COH\COHClean.dll C:\Program Files\Common Files\Symantec Shared\COH\sH0000.dll C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys C:\Program Files\Common Files\Symantec Shared\SPManifests\eraser.grd C:\Program Files\Common Files\Symantec Shared\SPManifests\eraser.sig C:\Program Files\Common Files\Symantec Shared\SPManifests\eraser.spm C:\Program Files\Common Files\Symantec Shared\SPManifests\symcleng.grd C:\Program Files\Common Files\Symantec Shared\SPManifests\symcleng.sig C:\Program Files\Common Files\Symantec Shared\SPManifests\symcleng.spm C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\CATALOG.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\CCERASER.DLL C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\ECBOOTIL.VXD C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\ECMSVR32.DLL C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\EECTRL.SYS C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\ERASER.GRD C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\ERASER.SIG C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\ERASER.SPM C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\ERASER.SYS C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\ESRDEF.BIN C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\HH C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\NAVENG.EXP C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\NAVENG.SYS C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\NAVENG.VXD C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\NAVENG32.DLL C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\NAVEX15.EXP C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\NAVEX15.SYS C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\NAVEX15.VXD C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\NAVEX32A.DLL C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\NCSACERT.TXT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\SCRAUTH.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\SYMAVENG.CAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\SYMAVENG.INF C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\SYMERASE.CAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\SYMERASE.INF C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\TCDEFS.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\TCSCAN7.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\TCSCAN8.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\TCSCAN9.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\TECHNOTE.TXT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\TINF.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\TINFIDX.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\TINFL.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\TSCAN1.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\TSCAN1HD.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\UPDATE.TXT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\V.GRD C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\V.SIG C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\VIRSCAN.INF C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\VIRSCAN1.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\VIRSCAN2.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\VIRSCAN3.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\VIRSCAN4.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\VIRSCAN5.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\VIRSCAN6.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\VIRSCAN7.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\VIRSCAN8.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\VIRSCAN9.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\VIRSCANT.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\WHATSNEW.TXT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070327.019\ZDONE.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\CATALOG.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\CCERASER.DLL C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\ECBOOTIL.VXD C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\ECMSVR32.DLL C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\EECTRL.SYS C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\ERASER.GRD C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\ERASER.SIG C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\ERASER.SPM C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\ERASER.SYS C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\ESRDEF.BIN C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\HH C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\NAVENG.EXP C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\NAVENG.SYS C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\NAVENG.VXD C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\NAVENG32.DLL C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\NAVEX15.EXP C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\NAVEX15.SYS C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\NAVEX15.VXD C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\NAVEX32A.DLL C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\NCSACERT.TXT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\SCRAUTH.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\SYMAVENG.CAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\SYMAVENG.INF C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\SYMERASE.CAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\SYMERASE.INF C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\TCDEFS.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\TCSCAN7.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\TCSCAN8.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\TCSCAN9.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\TECHNOTE.TXT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\TINF.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\TINFIDX.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\TINFL.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\TSCAN1.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\TSCAN1HD.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\UPDATE.TXT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\V.GRD C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\V.SIG C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\VIRSCAN.INF C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\VIRSCAN1.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\VIRSCAN2.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\VIRSCAN3.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\VIRSCAN4.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\VIRSCAN5.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\VIRSCAN6.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\VIRSCAN7.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\VIRSCAN8.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\VIRSCAN9.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\VIRSCANT.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\WHATSNEW.TXT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071029.008\ZDONE.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\CATALOG.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\CCERASER.DLL C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\ECBOOTIL.VXD C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\ECMSVR32.DLL C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\EECTRL.SYS C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\ERASER.GRD C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\ERASER.SIG C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\ERASER.SPM C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\ERASER.SYS C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\ESRDEF.BIN C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\HH C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\NAVENG.EXP C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\NAVENG.SYS C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\NAVENG.VXD C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\NAVENG32.DLL C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\NAVEX15.EXP C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\NAVEX15.SYS C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\NAVEX15.VXD C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\NAVEX32A.DLL C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\NCSACERT.TXT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\SCRAUTH.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\SYMAVENG.CAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\SYMAVENG.INF C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\SYMERASE.CAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\SYMERASE.INF C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\TCDEFS.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\TCSCAN7.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\TCSCAN8.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\TCSCAN9.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\TECHNOTE.TXT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\TINF.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\TINFIDX.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\TINFL.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\TSCAN1.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\TSCAN1HD.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\UPDATE.TXT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\V.GRD C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\V.SIG C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\VIRSCAN.INF C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\VIRSCAN1.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\VIRSCAN2.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\VIRSCAN3.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\VIRSCAN4.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\VIRSCAN5.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\VIRSCAN6.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\VIRSCAN7.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\VIRSCAN8.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\VIRSCAN9.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\VIRSCANT.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\vscanmsx.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\WHATSNEW.TXT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071102.016\ZDONE.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\CATALOG.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\CCERASER.DLL C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\ECBOOTIL.VXD C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\ECMSVR32.DLL C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\EECTRL.SYS C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\ERASER.GRD C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\ERASER.SIG C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\ERASER.SPM C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\ERASER.SYS C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\ESRDEF.BIN C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\HH C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\NAVENG.EXP C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\NAVENG.SYS C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\NAVENG.VXD C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\NAVENG32.DLL C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\NAVEX15.EXP C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\NAVEX15.SYS C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\NAVEX15.VXD C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\NAVEX32A.DLL C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\NCSACERT.TXT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\SCRAUTH.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\SYMAVENG.CAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\SYMAVENG.INF C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\SYMERASE.CAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\SYMERASE.INF C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\TCDEFS.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\TCSCAN7.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\TCSCAN8.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\TCSCAN9.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\TECHNOTE.TXT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\TINF.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\TINFIDX.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\TINFL.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\TSCAN1.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\TSCAN1HD.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\UPDATE.TXT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\V.GRD C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\V.SIG C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\VIRSCAN.INF C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\VIRSCAN1.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\VIRSCAN2.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\VIRSCAN3.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\VIRSCAN4.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\VIRSCAN5.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\VIRSCAN6.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\VIRSCAN7.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\VIRSCAN8.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\VIRSCAN9.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\VIRSCANT.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\WHATSNEW.TXT C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071103.005\ZDONE.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\catalog.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\cceraser.dll C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\ecbootil.vxd C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\ecmsvr32.dll C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\eeCtrl.sys C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\ERASER.grd C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\ERASER.sig C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\ERASER.spm C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\eraser.sys C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\esrdef.bin C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\hh C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\naveng.exp C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\naveng.sys C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\naveng.vxd C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\naveng32.dll C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\navex15.exp C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\navex15.sys C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\navex15.vxd C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\navex32a.dll C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\ncsacert.txt C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\scrauth.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\symaveng.cat C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\symaveng.inf C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\SymErase.cat C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\SymErase.inf C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\tcdefs.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\tcscan7.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\tcscan8.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\tcscan9.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\technote.txt C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\tinf.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\tinfidx.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\tinfl.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\tscan1.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\tscan1hd.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\v.grd C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\v.sig C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\virscan.inf C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\virscan1.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\virscan2.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\virscan3.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\virscan4.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\virscan5.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\virscan6.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\virscan7.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\virscan8.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\virscan9.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\VIRSCANT.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\whatsnew.txt C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\zdone.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\definfo.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\TextHub\virscant.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\CATALOG.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\CCERASER.DLL C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\cur.scr C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\ECBOOTIL.VXD C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\ECMSVR32.DLL C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\eeCtrl.sys C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\ERASER.grd C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\ERASER.sig C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\ERASER.spm C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\eraser.sys C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\ESRDEF.999 C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\ESRDEF.BIN C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\HH C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\hub.scr C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\NAVENG.998 C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\NAVENG.EXP C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\NAVENG.SYS C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\NAVENG.VXD C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\NAVENG32.DLL C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\NAVEX15.997 C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\NAVEX15.EXP C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\NAVEX15.SYS C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\NAVEX15.VXD C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\NAVEX32A.DLL C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\NCSACERT.TXT C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\SCRAUTH.996 C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\SCRAUTH.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\SYMAVENG.CAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\SYMAVENG.INF C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\SymErase.cat C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\SymErase.inf C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\TCDEFS.995 C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\TCDEFS.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\TCSCAN7.994 C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\TCSCAN7.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\TCSCAN8.993 C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\TCSCAN8.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\TCSCAN9.992 C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\TCSCAN9.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\TECHNOTE.TXT C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\TINF.991 C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\TINF.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\TINFIDX.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\TINFL.990 C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\TINFL.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\TSCAN1.989 C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\TSCAN1.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\TSCAN1HD.988 C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\TSCAN1HD.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\V.986 C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\V.987 C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\V.GRD C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\V.SIG C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\VIRSCAN.985 C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\VIRSCAN.INF C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\VIRSCAN1.984 C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\VIRSCAN1.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\VIRSCAN2.983 C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\VIRSCAN2.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\VIRSCAN3.982 C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\VIRSCAN3.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\VIRSCAN4.981 C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\VIRSCAN4.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\VIRSCAN5.980 C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\VIRSCAN5.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\VIRSCAN6.979 C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\VIRSCAN6.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\VIRSCAN7.978 C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\VIRSCAN7.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\VIRSCAN8.977 C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\VIRSCAN8.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\VIRSCAN9.976 C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\VIRSCAN9.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\VIRSCANT.975 C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\VIRSCANT.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\WHATSNEW.974 C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\WHATSNEW.TXT C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp163b.tmp\ZDONE.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\catalog.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\cceraser.dll C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\ecbootil.vxd C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\ecmsvr32.dll C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\eeCtrl.sys C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\ERASER.grd C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\ERASER.sig C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\ERASER.spm C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\eraser.sys C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\esrdef.bin C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\hh C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\naveng.exp C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\naveng.sys C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\naveng.vxd C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\naveng32.dll C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\navex15.exp C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\navex15.sys C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\navex15.vxd C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\navex32a.dll C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\ncsacert.txt C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\scrauth.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\symaveng.cat C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\symaveng.inf C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\SymErase.cat C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\SymErase.inf C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\tcdefs.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\tcscan7.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\tcscan8.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\tcscan9.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\technote.txt C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\tinf.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\tinfidx.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\tinfl.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\tscan1.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\tscan1hd.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\v.grd C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\v.sig C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\virscan1.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\virscan2.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\virscan3.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\virscan4.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\virscan5.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\virscan6.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\virscan7.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\virscan8.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\virscan9.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\VIRSCANT.DAT C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\whatsnew.txt C:\Program Files\Common Files\Symantec Shared\VirusDefs\tmp175e.tmp\zdone.dat C:\Program Files\Common Files\Symantec Shared\VirusDefs\usage.dat C:\Program Files\LimeWire C:\Program Files\LimeWire\COPYING C:\Program Files\LimeWire\data.ser C:\Program Files\LimeWire\hs_err_pid2124.log C:\Program Files\LimeWire\hs_err_pid3060.log C:\Program Files\LimeWire\hs_err_pid3580.log C:\Program Files\LimeWire\hs_err_pid4396.log C:\Program Files\LimeWire\hs_err_pid5884.log C:\Program Files\LimeWire\hs_err_pid9548.log C:\Program Files\LimeWire\hs_err_pid9976.log C:\Program Files\LimeWire\inspection.props C:\Program Files\LimeWire\install.log C:\Program Files\LimeWire\language.prop C:\Program Files\LimeWire\lib\aopalliance.jar C:\Program Files\LimeWire\lib\clink.jar C:\Program Files\LimeWire\lib\commons-codec-1.3.jar C:\Program Files\LimeWire\lib\commons-logging.jar C:\Program Files\LimeWire\lib\commons-net.jar C:\Program Files\LimeWire\lib\daap.jar C:\Program Files\LimeWire\lib\dnsjava.jar C:\Program Files\LimeWire\lib\forms.jar C:\Program Files\LimeWire\lib\foxtrot.jar C:\Program Files\LimeWire\lib\gettext-commons.jar C:\Program Files\LimeWire\lib\guice-1.0.jar C:\Program Files\LimeWire\lib\hashes C:\Program Files\LimeWire\lib\hsqldb.jar C:\Program Files\LimeWire\lib\httpclient-4.0-alpha5-20080522.192134-5.jar C:\Program Files\LimeWire\lib\httpcore-4.0-beta2-20080510.140437-10.jar C:\Program Files\LimeWire\lib\httpcore-nio-4.0-beta2-20080510.140437-10.jar C:\Program Files\LimeWire\lib\icu4j.jar C:\Program Files\LimeWire\lib\jaudiotagger.jar C:\Program Files\LimeWire\lib\jcraft.jar C:\Program Files\LimeWire\lib\jdic.dll C:\Program Files\LimeWire\lib\jdic.jar C:\Program Files\LimeWire\lib\jdic_stub.jar C:\Program Files\LimeWire\lib\jflac.jar C:\Program Files\LimeWire\lib\jl.jar C:\Program Files\LimeWire\lib\jmdns.jar C:\Program Files\LimeWire\lib\jogg.jar C:\Program Files\LimeWire\lib\jorbis.jar C:\Program Files\LimeWire\lib\LimeWire.ico C:\Program Files\LimeWire\lib\LimeWire.jar C:\Program Files\LimeWire\lib\log4j.jar C:\Program Files\LimeWire\lib\log4j.properties C:\Program Files\LimeWire\lib\looks.jar C:\Program Files\LimeWire\lib\messages.jar C:\Program Files\LimeWire\lib\mp3spi.jar C:\Program Files\LimeWire\lib\onion-common.jar C:\Program Files\LimeWire\lib\onion-fec.jar C:\Program Files\LimeWire\lib\ProgressTabs.jar C:\Program Files\LimeWire\lib\swt.jar C:\Program Files\LimeWire\lib\SystemUtilities.dll C:\Program Files\LimeWire\lib\SystemUtilitiesA.dll C:\Program Files\LimeWire\lib\themes.jar C:\Program Files\LimeWire\lib\tray.dll C:\Program Files\LimeWire\lib\tritonus.jar C:\Program Files\LimeWire\lib\vorbisspi.jar C:\Program Files\LimeWire\LimeWire On Startup.lnk C:\Program Files\LimeWire\LimeWire.exe C:\Program Files\LimeWire\LimeWire.ico C:\Program Files\LimeWire\pmf.ico C:\Program Files\LimeWire\root\magnet10\badge.img C:\Program Files\LimeWire\root\magnet10\canHandle.img C:\Program Files\LimeWire\root\magnet10\limewire.gif C:\Program Files\LimeWire\root\magnet10\options.js C:\Program Files\LimeWire\root\magnet10\silentdetect.js C:\Program Files\LimeWire\SOURCE C:\Program Files\LimeWire\spacer.gif C:\Program Files\LimeWire\uninstall.exe C:\WINDOWS\system32\actskn43.ocx C:\WINDOWS\system32\CAD8306DFB.sys C:\WINDOWS\system32\drivers\pavboot.sys C:\WINDOWS\system32\fbfarypy.dll C:\WINDOWS\system32\nsb139.tmp C:\WINDOWS\system32\nsy138.tmp C:\WINDOWS\system32\quvfuhea.dll C:\WINDOWS\system32\vrjksxav.dll C:\WINDOWS\system32\XceedCry.dll C:\WINDOWS\system32\XceedZip.dll C:\WINDOWS\system32\yrinapqx.dll . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_PAVBOOT -------\Service_pavboot -------\Legacy_eeCtrl -------\Service_eeCtrl ((((((((((((((((((((((((( Files Created from 2008-06-05 to 2008-07-05 ))))))))))))))))))))))))))))))) . 2008-07-05 12:57 . 2008-07-05 15:22 1,409 --a------ C:\WINDOWS\system32\Postin__.FOT 2008-07-05 00:28 . 2008-07-05 00:29 <DIR> d-------- C:\RecoveryCD 2008-07-04 23:58 . 2008-03-25 02:37 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl 2008-07-04 23:56 . 2008-07-04 23:58 <DIR> d-------- C:\Program Files\Java 2008-07-04 23:56 . 2008-07-04 23:56 <DIR> d-------- C:\Program Files\Common Files\Java 2008-07-04 16:41 . 2008-07-04 16:41 <DIR> d-------- C:\Program Files\Trend Micro 2008-07-04 16:40 . 2008-07-04 16:40 <DIR> d-------- C:\Program Files\Panda Security 2008-07-04 16:35 . 2008-07-04 16:35 <DIR> d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-07-04 16:35 . 2008-07-04 16:35 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-07-04 16:35 . 2008-07-04 16:35 <DIR> d-------- C:\Documents and Settings\AlexDong\Application Data\Malwarebytes 2008-07-04 16:35 . 2008-06-28 14:21 34,296 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys 2008-07-04 16:35 . 2008-06-28 14:21 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-07-04 15:34 . 2008-07-04 15:35 <DIR> d-------- C:\Program Files\Spybot - Search & Destroy 2008-06-30 22:13 . 2008-06-30 22:13 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\PC Tools 2008-06-18 13:52 . 2008-06-18 13:52 161,096 --a------ C:\WINDOWS\system32\DivXCodecVersionChecker.exe 2008-06-11 07:18 . 2008-06-13 09:10 272,128 --------- C:\WINDOWS\system32\drivers\bthport.sys 2008-06-11 07:18 . 2008-06-13 09:10 272,128 --------- C:\WINDOWS\system32\dllcache\bthport.sys 2008-06-10 20:07 . 2008-06-10 20:07 4,816 --a------ C:\WINDOWS\system32\divxsm.tlb 2008-06-10 20:04 . 2008-06-10 20:04 1,044,480 --a------ C:\WINDOWS\system32\libdivx.dll 2008-06-10 20:04 . 2008-06-10 20:04 200,704 --a------ C:\WINDOWS\system32\ssldivx.dll . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-07-04 23:21 --------- d-----w C:\Program Files\Warcraft III 2008-07-04 20:30 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2008-07-04 02:00 --------- d-----w C:\Program Files\Common Files\Real 2008-07-04 01:55 --------- d-----w C:\Program Files\Common Files\Sonic Shared 2008-07-04 01:49 --------- d-----w C:\Program Files\DivX 2008-07-03 14:41 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP 2008-05-22 22:18 12,288 ----a-w C:\WINDOWS\system32\DivXWMPExtType.dll 2008-05-17 03:00 --------- d-----w C:\Program Files\Linksys EasyLink Advisor 2008-05-14 00:47 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help 2008-05-08 12:28 202,752 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys 2008-05-08 12:28 202,752 ------w C:\WINDOWS\system32\dllcache\rmcast.sys 2008-05-07 05:18 1,287,680 ----a-w C:\WINDOWS\system32\quartz.dll 2008-05-07 05:18 1,287,680 ------w C:\WINDOWS\system32\dllcache\quartz.dll 2008-04-24 02:16 3,591,680 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll 2008-04-22 07:40 625,664 ------w C:\WINDOWS\system32\dllcache\iexplore.exe 2008-04-22 07:39 70,656 ------w C:\WINDOWS\system32\dllcache\ie4uinit.exe 2008-04-22 07:39 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe 2008-04-20 05:07 161,792 ------w C:\WINDOWS\system32\dllcache\ieakui.dll 2007-12-08 23:53 32 ----a-w C:\Documents and Settings\All Users\Application Data\ezsid.dat 2007-01-02 22:38 2,828 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys . ((((((((((((((((((((((((((((( snapshot@2008-07-05_ 1.21.45.37 ))))))))))))))))))))))))))))))))))))))))) . - 2008-07-05 05:16:45 2,048 --s-a-w C:\WINDOWS\bootstat.dat + 2008-07-05 19:19:22 2,048 --s-a-w C:\WINDOWS\bootstat.dat . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2006-11-12 06:48 157592] "Aim6"="C:\Program Files\AIM6\aim6.exe" [2008-01-03 12:15 50528] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 07:00 15360] "EasyLinkAdvisor"="C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe" [2007-03-15 18:16 454784] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Broadcom Wireless Manager UI"="C:\WINDOWS\system32\WLTRAY.exe" [2006-11-23 02:35 1392640] "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2006-03-08 20:48 761947] "ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 19:41 45056] "ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2006-03-20 18:34 86960] "googletalk"="C:\Program Files\Google\Google Talk\googletalk.exe" [2007-01-01 17:22 3739648] "IntelliPoint"="C:\Program Files\Microsoft IntelliPoint\ipoint.exe" [2006-11-21 18:09 842584] "GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 00:47 31016] "PWRISOVM.EXE"="C:\Program Files\PowerISO\PWRISOVM.EXE" [2007-08-06 20:05 200704] "ShStatEXE"="C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" [2006-11-30 09:50 112216] "McAfeeUpdaterUI"="C:\Program Files\McAfee\Common Framework\UdaterUI.exe" [2006-11-17 14:39 136768] "LogitechCommunicationsManager"="C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" [2007-07-25 17:02 563984] "LogitechQuickCamRibbon"="C:\Program Files\Logitech\QuickCam\Quickcam.exe" [2007-07-25 17:06 2027792] "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-01-10 16:27 385024] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-01-15 04:22 267048] "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe" [2008-03-25 04:28 144784] "SigmatelSysTrayApp"="stsystra.exe" [2006-03-25 01:30 282624 C:\WINDOWS\stsystra.exe] "Tweak UI"="TWEAKUI.CPL" [2003-03-25 06:49 106544 C:\WINDOWS\system32\tweakui.cpl] C:\Documents and Settings\AlexDong\Start Menu\Programs\Startup\ OneNote 2007 Screen Clipper and Launcher.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 20:24:54 98632] C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ AutoCAD Startup Accelerator.lnk - C:\Program Files\Common Files\Autodesk Shared\acstart16.exe [2006-09-23 09:21:54 10872] Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe [2006-12-26 13:32:26 24576] Post-itr Software Notes.lnk - C:\Program Files\3M\PSNotes\psn.exe [2003-10-10 15:53:20 675840] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "msacm.iac2"= C:\PROGRA~1\ACEMEG~1\SystemS\Intel\iac25_32.ax "msacm.sl_anet"= C:\PROGRA~1\ACEMEG~1\SystemS\sl_anet.acm "msacm.msaudio1"= C:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\msaud32.acm [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusDisableNotify"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "C:\\Program Files\\Google\\Google Talk\\googletalk.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "C:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"= "C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"= "C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"= "C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"= "C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"= "C:\\Program Files\\McAfee\\Common Framework\\FrameworkService.exe"= "C:\\Program Files\\AIM6\\aim6.exe"= "C:\\Program Files\\Steam\\steamapps\\azndevourer2417@yahoo.com\\counter-strike\\hl.exe"= "C:\\Program Files\\iTunes\\iTunes.exe"= S3 fd_dbus;FutureDial USB Composite Device driver (WDM);C:\WINDOWS\system32\DRIVERS\fd_dbus.sys [2005-01-17 21:46] S3 fd_dmdfl;FutureDial USB Modem Filter;C:\WINDOWS\system32\DRIVERS\fd_dmdfl.sys [2005-01-17 21:46] S3 fd_dmdm;FutureDial USB Modem Drivers;C:\WINDOWS\system32\DRIVERS\fd_dmdm.sys [2005-01-17 21:46] S3 lgatserd;LG CDMA USB Modem Diagnostic Serial Port Drivers (WDM);C:\WINDOWS\system32\DRIVERS\lgatserd.sys [2005-01-17 21:46] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4b2ed31e-c15e-11dc-b62d-0019b94d2f87}] \Shell\AutoRun\command - G:\LaunchU3.exe -a [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8e1da9f3-f19c-11db-b5a9-0019b94d2f87}] \Shell\AutoRun\command - G:\USBNB.exe . Contents of the 'Scheduled Tasks' folder "2008-07-03 23:15:04 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe "2008-06-11 09:00:01 C:\WINDOWS\Tasks\SpyHunter Scanner.job" - C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter3.exe . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-07-05 15:20:25 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . ------------------------ Other Running Processes ------------------------ . C:\WINDOWS\system32\ati2evxx.exe C:\WINDOWS\system32\WLTRYSVC.EXE C:\WINDOWS\system32\BCMWLTRY.EXE C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe C:\Program Files\McAfee\Common Framework\FrameworkService.exe C:\Program Files\McAfee\VirusScan Enterprise\mcshield.exe C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe C:\WINDOWS\system32\ati2evxx.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\McAfee\Common Framework\naPrdMgr.exe C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe C:\Program Files\McAfee\Common Framework\Mctray.exe C:\Program Files\3M\PSNotes\PSNGive.exe C:\Program Files\Common Files\AOL\Loader\aolload.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\Program Files\Common Files\LogiShrd\LQCVFX\COCIManager.exe C:\Program Files\AIM6\aolsoftware.exe . ************************************************************************** . Completion time: 2008-07-05 15:26:05 - machine was rebooted [AlexDong] ComboFix-quarantined-files.txt 2008-07-05 19:26:00 ComboFix2.txt 2008-07-05 05:22:00 Pre-Run: 42,571,423,744 bytes free Post-Run: 42,474,409,984 bytes free 2188 --- E O F --- 2008-06-21 01:04:01

4 C:\\ijji\ENGLISH\common\images\k6\k6007.gif C:\\ijji\ENGLISH\common\images\k6\k600b.gif C:\\ijji\ENGLISH\common\images\k6\k600c.gif C:\\ijji\ENGLISH\common\images\k6\k600d.gif C:\\ijji\ENGLISH\common\images\k6\k600e.gif C:\\ijji\ENGLISH\common\images\k9\k9001.gif C:\\ijji\ENGLISH\common\images\k9\k9002.gif C:\\ijji\ENGLISH\common\images\k9\k9003.gif C:\\ijji\ENGLISH\common\images\k9\k9004.gif C:\\ijji\ENGLISH\common\images\k9\k9005.gif C:\\ijji\ENGLISH\common\images\k9\k9007.gif C:\\ijji\ENGLISH\common\images\k9\k900b.gif C:\\ijji\ENGLISH\common\images\k9\k900c.gif C:\\ijji\ENGLISH\common\images\k9\k900e.gif C:\\ijji\ENGLISH\common\images\k9\k900g.gif C:\\ijji\ENGLISH\common\images\k9\k900i.gif C:\\ijji\ENGLISH\common\images\k9\k900j.gif C:\\ijji\ENGLISH\common\images\k9\k900k.gif C:\\ijji\ENGLISH\common\images\k9\k900m.gif C:\\ijji\ENGLISH\common\images\k9\k900n.gif C:\\ijji\ENGLISH\common\images\LastGame.hgs C:\\ijji\ENGLISH\common\images\LastGame.him C:\\ijji\ENGLISH\common\images\mkcount.him C:\\ijji\ENGLISH\common\images\mkdraw.him C:\\ijji\ENGLISH\common\images\mkendcount.him C:\\ijji\ENGLISH\common\images\mkundo.him C:\\ijji\ENGLISH\common\images\newhgb2005.ico C:\\ijji\ENGLISH\common\images\newhgc2005.ico C:\\ijji\ENGLISH\common\images\popup_background.him C:\\ijji\ENGLISH\common\images\popup_background_b.him C:\\ijji\ENGLISH\common\images\seedmoneyoption.him C:\\ijji\ENGLISH\common\images\table\StreakCount_01.him C:\\ijji\ENGLISH\common\images\table\StreakCount_02.him C:\\ijji\ENGLISH\common\images\table\StreakCount_03.him C:\\ijji\ENGLISH\common\images\table\StreakCount_04.him C:\\ijji\ENGLISH\common\images\table\StreakCount_05.him C:\\ijji\ENGLISH\common\images\table\StreakCount_06.him C:\\ijji\ENGLISH\common\images\table\StreakCount_07.him C:\\ijji\ENGLISH\common\images\table\StreakCount_08.him C:\\ijji\ENGLISH\common\images\table\StreakCount_09.him C:\\ijji\ENGLISH\common\images\table\StreakCount_10.him C:\\ijji\ENGLISH\common\images\table\StreakCount_11.him C:\\ijji\ENGLISH\common\images\table\StreakCount_12.him C:\\ijji\ENGLISH\common\images\table\StreakCount_13.him C:\\ijji\ENGLISH\common\images\table\StreakCount_14.him C:\\ijji\ENGLISH\common\images\table\StreakCount_15.him C:\\ijji\ENGLISH\common\images\table\StreakCount_16.him C:\\ijji\ENGLISH\common\images\table\StreakCount_17.him C:\\ijji\ENGLISH\common\images\table\StreakCount_18.him C:\\ijji\ENGLISH\common\images\table\StreakCount_19.him C:\\ijji\ENGLISH\common\images\table\StreakCount_20.him C:\\ijji\ENGLISH\common\images\table\StreakCount_21.him C:\\ijji\ENGLISH\common\images\table\StreakCount_22.him C:\\ijji\ENGLISH\common\images\table\StreakCount_23.him C:\\ijji\ENGLISH\common\images\table\StreakCount_24.him C:\\ijji\ENGLISH\common\images\table\StreakCount_25.him C:\\ijji\ENGLISH\common\images\table\StreakCount_26.him C:\\ijji\ENGLISH\common\images\table\StreakCount_27.him C:\\ijji\ENGLISH\common\images\table\StreakCount_28.him C:\\ijji\ENGLISH\common\images\table\StreakCount_29.him C:\\ijji\ENGLISH\common\images\table\StreakCount_30.him C:\\ijji\ENGLISH\common\images\table\StreakCount_31.him C:\\ijji\ENGLISH\common\images\table\StreakCount_32.him C:\\ijji\ENGLISH\common\images\table\StreakCount_33.him C:\\ijji\ENGLISH\common\images\table\StreakCount_34.him C:\\ijji\ENGLISH\common\images\table\StreakCount_35.him C:\\ijji\ENGLISH\common\images\table\StreakCount_36.him C:\\ijji\ENGLISH\common\images\table\StreakCount_37.him C:\\ijji\ENGLISH\common\images\table\StreakCount_38.him C:\\ijji\ENGLISH\common\images\table\StreakCount_39.him C:\\ijji\ENGLISH\common\images\table\StreakCount_40.him C:\\ijji\ENGLISH\common\images\table\StreakCount_41.him C:\\ijji\ENGLISH\common\images\table\StreakCount_42.him C:\\ijji\ENGLISH\common\images\table\StreakCount_43.him C:\\ijji\ENGLISH\common\images\table\StreakCount_44.him C:\\ijji\ENGLISH\common\images\table\StreakCount_45.him C:\\ijji\ENGLISH\common\images\table\StreakCount_46.him C:\\ijji\ENGLISH\common\images\table\StreakCount_47.him C:\\ijji\ENGLISH\common\images\table\StreakCount_48.him C:\\ijji\ENGLISH\common\images\table\StreakCount_49.him C:\\ijji\ENGLISH\common\images\table\StreakCount_50.him C:\\ijji\ENGLISH\common\images\table\StreakCount_51.him C:\\ijji\ENGLISH\common\images\table\StreakCount_52.him C:\\ijji\ENGLISH\common\images\table\StreakCount_53.him C:\\ijji\ENGLISH\common\images\table\StreakCount_54.him C:\\ijji\ENGLISH\common\images\table\StreakCount_55.him C:\\ijji\ENGLISH\common\images\table\StreakCount_56.him C:\\ijji\ENGLISH\common\images\table\StreakCount_57.him C:\\ijji\ENGLISH\common\images\table\StreakCount_58.him C:\\ijji\ENGLISH\common\images\table\StreakCount_59.him C:\\ijji\ENGLISH\common\images\table\StreakCount_60.him C:\\ijji\ENGLISH\common\images\table\StreakCount_61.him C:\\ijji\ENGLISH\common\images\table\StreakCount_62.him C:\\ijji\ENGLISH\common\images\table\StreakCount_63.him C:\\ijji\ENGLISH\common\images\table\StreakCount_64.him C:\\ijji\ENGLISH\common\images\table\StreakCount_65.him C:\\ijji\ENGLISH\common\images\table\StreakCount_66.him C:\\ijji\ENGLISH\common\images\table\StreakCount_67.him C:\\ijji\ENGLISH\common\images\table\StreakCount_68.him C:\\ijji\ENGLISH\common\images\table\StreakCount_69.him C:\\ijji\ENGLISH\common\images\table\StreakCount_70.him C:\\ijji\ENGLISH\common\images\table\StreakCount_71.him C:\\ijji\ENGLISH\common\images\table\StreakCount_72.him C:\\ijji\ENGLISH\common\images\table\StreakCount_73.him C:\\ijji\ENGLISH\common\images\table\StreakCount_74.him C:\\ijji\ENGLISH\common\images\table\StreakCount_75.him C:\\ijji\ENGLISH\common\images\table\StreakCount_76.him C:\\ijji\ENGLISH\common\images\table\StreakCount_77.him C:\\ijji\ENGLISH\common\images\table\StreakCount_78.him C:\\ijji\ENGLISH\common\images\table\StreakCount_79.him C:\\ijji\ENGLISH\common\images\table\StreakCount_80.him C:\\ijji\ENGLISH\common\images\table\StreakCount_81.him C:\\ijji\ENGLISH\common\images\table\StreakCount_82.him C:\\ijji\ENGLISH\common\images\table\StreakCount_83.him C:\\ijji\ENGLISH\common\images\table\StreakCount_84.him C:\\ijji\ENGLISH\common\images\table\StreakCount_85.him C:\\ijji\ENGLISH\common\images\table\StreakCount_86.him C:\\ijji\ENGLISH\common\images\table\StreakCount_87.him C:\\ijji\ENGLISH\common\images\table\StreakCount_88.him C:\\ijji\ENGLISH\common\images\table\StreakCount_89.him C:\\ijji\ENGLISH\common\images\table\StreakCount_90.him C:\\ijji\ENGLISH\common\images\table\StreakCount_91.him C:\\ijji\ENGLISH\common\images\table\StreakCount_92.him C:\\ijji\ENGLISH\common\images\table\StreakCount_93.him C:\\ijji\ENGLISH\common\images\table\StreakCount_94.him C:\\ijji\ENGLISH\common\images\table\StreakCount_95.him C:\\ijji\ENGLISH\common\images\table\StreakCount_96.him C:\\ijji\ENGLISH\common\images\table\StreakCount_97.him C:\\ijji\ENGLISH\common\images\table\StreakCount_98.him C:\\ijji\ENGLISH\common\images\table\StreakCount_99.him C:\\ijji\ENGLISH\common\images\Table_back.him C:\\ijji\ENGLISH\common\images\Table_bg.him C:\\ijji\ENGLISH\common\images\Table_btn_TeamGreen.him C:\\ijji\ENGLISH\common\images\Table_btn_TeamYellow.him C:\\ijji\ENGLISH\common\images\Table_btnChatSend.him C:\\ijji\ENGLISH\common\images\Table_btnexit.him C:\\ijji\ENGLISH\common\images\Table_btninvite.him C:\\ijji\ENGLISH\common\images\Table_btnpractice.him C:\\ijji\ENGLISH\common\images\Table_btnReady.him C:\\ijji\ENGLISH\common\images\Table_btnstart.hgs C:\\ijji\ENGLISH\common\images\Table_btnstart.him C:\\ijji\ENGLISH\common\images\Table_btnstartcancel.him C:\\ijji\ENGLISH\common\images\Table_CharacterClear.hgs C:\\ijji\ENGLISH\common\images\Table_ChatBalloon.him C:\\ijji\ENGLISH\common\images\Table_Gemble_arrow.him C:\\ijji\ENGLISH\common\images\Table_Gemble_back.him C:\\ijji\ENGLISH\common\images\Table_Individual_host.him C:\\ijji\ENGLISH\common\images\Table_Individual_MyBack.him C:\\ijji\ENGLISH\common\images\Table_Individual_playerback.him C:\\ijji\ENGLISH\common\images\Table_Individual_Title.him C:\\ijji\ENGLISH\common\images\Table_JackpotNumber.him C:\\ijji\ENGLISH\common\images\Table_JackpotWinner_my.him C:\\ijji\ENGLISH\common\images\Table_JackpotWinner_peer.him C:\\ijji\ENGLISH\common\images\Table_LevelUp.him C:\\ijji\ENGLISH\common\images\Table_MyAvtrBack.him C:\\ijji\ENGLISH\common\images\Table_PlayerInfoBack.him C:\\ijji\ENGLISH\common\images\Table_playerNumber.him C:\\ijji\ENGLISH\common\images\Table_Ready.him C:\\ijji\ENGLISH\common\images\Table_RoomInfo_back.him C:\\ijji\ENGLISH\common\images\Table_RoomNumber_back.him C:\\ijji\ENGLISH\common\images\Table_Streak_Back.him C:\\ijji\ENGLISH\common\images\Table_tbtnMax.him C:\\ijji\ENGLISH\common\images\Table_tbtnRestore.him C:\\ijji\ENGLISH\common\images\Table_Team_backgreen.him C:\\ijji\ENGLISH\common\images\Table_Team_backyellow.him C:\\ijji\ENGLISH\common\images\Table_Team_host.him C:\\ijji\ENGLISH\common\images\Table_Team_MyBack.him C:\\ijji\ENGLISH\common\images\Table_Team_playerback.him C:\\ijji\ENGLISH\common\images\Table_Team_RoomInfo_back.him C:\\ijji\ENGLISH\common\images\Table_Team_RoomNumber_back.him C:\\ijji\ENGLISH\common\images\Table_Team_Title.him C:\\ijji\ENGLISH\common\images\Table_Team_vs.him C:\\ijji\ENGLISH\common\images\Table_TeamPlayerInfoBack.him C:\\ijji\ENGLISH\common\images\Table_Winner.him C:\\ijji\ENGLISH\common\images\TableScrollBar.him C:\\ijji\ENGLISH\common\images\TableScrollDn.him C:\\ijji\ENGLISH\common\images\TableScrollUp.him C:\\ijji\ENGLISH\common\images\wf\wfa0061.gif C:\\ijji\ENGLISH\common\images\wf\wfa0062.gif C:\\ijji\ENGLISH\common\images\wf\wfa00f1.gif C:\\ijji\ENGLISH\common\images\wf\wfa00f2.gif C:\\ijji\ENGLISH\common\images\wf\wfa01f1.gif C:\\ijji\ENGLISH\common\images\wf\wfa01f2.gif C:\\ijji\ENGLISH\common\images\wf\wfa01h1.gif C:\\ijji\ENGLISH\common\images\wf\wfa01h2.gif C:\\ijji\ENGLISH\common\images\wf\wfa0251.gif C:\\ijji\ENGLISH\common\images\wf\wfa0252.gif C:\\ijji\ENGLISH\common\images\wf\wfa0291.gif C:\\ijji\ENGLISH\common\images\wf\wfa0292.gif C:\\ijji\ENGLISH\common\images\wf\wfa02w1.gif C:\\ijji\ENGLISH\common\images\wf\wfa02w2.gif C:\\ijji\ENGLISH\common\images\wf\wfa0341.gif C:\\ijji\ENGLISH\common\images\wf\wfa0342.gif C:\\ijji\ENGLISH\common\images\wf\wfa03o1.gif C:\\ijji\ENGLISH\common\images\wf\wfa03o2.gif C:\\ijji\ENGLISH\common\images\wf\wfb00e1.gif C:\\ijji\ENGLISH\common\images\wf\wfb00e2.gif C:\\ijji\ENGLISH\common\images\wf\wfb00f1.gif C:\\ijji\ENGLISH\common\images\wf\wfb00f2.gif C:\\ijji\ENGLISH\common\images\wf\wfb00q1.gif C:\\ijji\ENGLISH\common\images\wf\wfb00q2.gif C:\\ijji\ENGLISH\common\images\wf\wfb01i1.gif C:\\ijji\ENGLISH\common\images\wf\wfb01i2.gif C:\\ijji\ENGLISH\common\images\wf\wfb01l1.gif C:\\ijji\ENGLISH\common\images\wf\wfb01l2.gif C:\\ijji\ENGLISH\common\images\wf\wfb01v1.gif C:\\ijji\ENGLISH\common\images\wf\wfb01v2.gif C:\\ijji\ENGLISH\common\images\wf\wfb01z1.gif C:\\ijji\ENGLISH\common\images\wf\wfb01z2.gif C:\\ijji\ENGLISH\common\images\wf\wfb0221.gif C:\\ijji\ENGLISH\common\images\wf\wfb0222.gif C:\\ijji\ENGLISH\common\images\wf\wfb0241.gif C:\\ijji\ENGLISH\common\images\wf\wfb0341.gif C:\\ijji\ENGLISH\common\images\wf\wfb0342.gif C:\\ijji\ENGLISH\common\images\wf\wfc0061.gif C:\\ijji\ENGLISH\common\images\wf\wfc0062.gif C:\\ijji\ENGLISH\common\images\wf\wfc00q1.gif C:\\ijji\ENGLISH\common\images\wf\wfc00q2.gif C:\\ijji\ENGLISH\common\images\wf\wfc0191.gif C:\\ijji\ENGLISH\common\images\wf\wfc0192.gif C:\\ijji\ENGLISH\common\images\wf\wfc01d1.gif C:\\ijji\ENGLISH\common\images\wf\wfc01d2.gif C:\\ijji\ENGLISH\common\images\wf\wfc01f1.gif C:\\ijji\ENGLISH\common\images\wf\wfc01f2.gif C:\\ijji\ENGLISH\common\images\wf\wfc0281.gif C:\\ijji\ENGLISH\common\images\wf\wfc0282.gif C:\\ijji\ENGLISH\common\images\wf\wfd01l1.gif C:\\ijji\ENGLISH\common\images\wf\wfd01l2.gif C:\\ijji\ENGLISH\common\images\wf\wfd01q1.gif C:\\ijji\ENGLISH\common\images\wf\wfd01q2.gif C:\\ijji\ENGLISH\common\images\wf\wfd0201.gif C:\\ijji\ENGLISH\common\images\wf\wfd0202.gif C:\\ijji\ENGLISH\common\images\wm\wma0131.gif C:\\ijji\ENGLISH\common\images\wm\wma0132.gif C:\\ijji\ENGLISH\common\images\wm\wma01e1.gif C:\\ijji\ENGLISH\common\images\wm\wma01e2.gif C:\\ijji\ENGLISH\common\images\wm\wma01g1.gif C:\\ijji\ENGLISH\common\images\wm\wma01g2.gif C:\\ijji\ENGLISH\common\images\wm\wma01i1.gif C:\\ijji\ENGLISH\common\images\wm\wma01i2.gif C:\\ijji\ENGLISH\common\images\wm\wma01k1.gif C:\\ijji\ENGLISH\common\images\wm\wma01k2.gif C:\\ijji\ENGLISH\common\images\wm\wma01l1.gif C:\\ijji\ENGLISH\common\images\wm\wma01l2.gif C:\\ijji\ENGLISH\common\images\wm\wma01y1.gif C:\\ijji\ENGLISH\common\images\wm\wma01y2.gif C:\\ijji\ENGLISH\common\images\wm\wma02b1.gif C:\\ijji\ENGLISH\common\images\wm\wma02b2.gif C:\\ijji\ENGLISH\common\images\wm\wma02j1.gif C:\\ijji\ENGLISH\common\images\wm\wma02j2.gif C:\\ijji\ENGLISH\common\images\wm\wma02u1.gif C:\\ijji\ENGLISH\common\images\wm\wma02u2.gif C:\\ijji\ENGLISH\common\images\wm\wma0321.gif C:\\ijji\ENGLISH\common\images\wm\wma0322.gif C:\\ijji\ENGLISH\common\images\wm\wma0361.gif C:\\ijji\ENGLISH\common\images\wm\wma0362.gif C:\\ijji\ENGLISH\common\images\wm\wma0371.gif C:\\ijji\ENGLISH\common\images\wm\wma0372.gif C:\\ijji\ENGLISH\common\images\wm\wma0391.gif C:\\ijji\ENGLISH\common\images\wm\wma0392.gif C:\\ijji\ENGLISH\common\images\wm\wmb0071.gif C:\\ijji\ENGLISH\common\images\wm\wmb0072.gif C:\\ijji\ENGLISH\common\images\wm\wmb00j1.gif C:\\ijji\ENGLISH\common\images\wm\wmb00j2.gif C:\\ijji\ENGLISH\common\images\wm\wmb00x1.gif C:\\ijji\ENGLISH\common\images\wm\wmb00x2.gif C:\\ijji\ENGLISH\common\images\wm\wmb0101.gif C:\\ijji\ENGLISH\common\images\wm\wmb0102.gif C:\\ijji\ENGLISH\common\images\wm\wmb0111.gif C:\\ijji\ENGLISH\common\images\wm\wmb0112.gif C:\\ijji\ENGLISH\common\images\wm\wmb0121.gif C:\\ijji\ENGLISH\common\images\wm\wmb0122.gif C:\\ijji\ENGLISH\common\images\wm\wmb01b1.gif C:\\ijji\ENGLISH\common\images\wm\wmb01b2.gif C:\\ijji\ENGLISH\common\images\wm\wmb01g1.gif C:\\ijji\ENGLISH\common\images\wm\wmb01g2.gif C:\\ijji\ENGLISH\common\images\wm\wmb01j1.gif C:\\ijji\ENGLISH\common\images\wm\wmb01j2.gif C:\\ijji\ENGLISH\common\images\wm\wmb01l1.gif C:\\ijji\ENGLISH\common\images\wm\wmb01l2.gif C:\\ijji\ENGLISH\common\images\wm\wmb01m1.gif C:\\ijji\ENGLISH\common\images\wm\wmb01m2.gif C:\\ijji\ENGLISH\common\images\wm\wmb01r1.gif C:\\ijji\ENGLISH\common\images\wm\wmb01r2.gif C:\\ijji\ENGLISH\common\images\wm\wmb01v1.gif C:\\ijji\ENGLISH\common\images\wm\wmb01v2.gif C:\\ijji\ENGLISH\common\images\wm\wmb0231.gif C:\\ijji\ENGLISH\common\images\wm\wmb0232.gif C:\\ijji\ENGLISH\common\images\wm\wmb0261.gif C:\\ijji\ENGLISH\common\images\wm\wmb0262.gif C:\\ijji\ENGLISH\common\images\wm\wmb0271.gif C:\\ijji\ENGLISH\common\images\wm\wmb0272.gif C:\\ijji\ENGLISH\common\images\wm\wmb02a1.gif C:\\ijji\ENGLISH\common\images\wm\wmb02a2.gif C:\\ijji\ENGLISH\common\images\wm\wmb02i1.gif C:\\ijji\ENGLISH\common\images\wm\wmb02i2.gif C:\\ijji\ENGLISH\common\images\wm\wmb02z1.gif C:\\ijji\ENGLISH\common\images\wm\wmb02z2.gif C:\\ijji\ENGLISH\common\images\wm\wmb0321.gif C:\\ijji\ENGLISH\common\images\wm\wmb0322.gif C:\\ijji\ENGLISH\common\images\wm\wmb0361.gif C:\\ijji\ENGLISH\common\images\wm\wmb0362.gif C:\\ijji\ENGLISH\common\images\wm\wmc0071.gif C:\\ijji\ENGLISH\common\images\wm\wmc0072.gif C:\\ijji\ENGLISH\common\images\wm\wmc00h1.gif C:\\ijji\ENGLISH\common\images\wm\wmc00h2.gif C:\\ijji\ENGLISH\common\images\wm\wmc00s1.gif C:\\ijji\ENGLISH\common\images\wm\wmc00s2.gif C:\\ijji\ENGLISH\common\images\wm\wmc0101.gif C:\\ijji\ENGLISH\common\images\wm\wmc0102.gif C:\\ijji\ENGLISH\common\images\wm\wmc0161.gif C:\\ijji\ENGLISH\common\images\wm\wmc01d1.gif C:\\ijji\ENGLISH\common\images\wm\wmc01d2.gif C:\\ijji\ENGLISH\common\images\wm\wmc01e1.gif C:\\ijji\ENGLISH\common\images\wm\wmc01e2.gif C:\\ijji\ENGLISH\common\images\wm\wmc01m1.gif C:\\ijji\ENGLISH\common\images\wm\wmc01m2.gif C:\\ijji\ENGLISH\common\images\wm\wmc01v1.gif C:\\ijji\ENGLISH\common\images\wm\wmc01v2.gif C:\\ijji\ENGLISH\common\images\wm\wmc0201.gif C:\\ijji\ENGLISH\common\images\wm\wmc0202.gif C:\\ijji\ENGLISH\common\images\wm\wmc02g1.gif C:\\ijji\ENGLISH\common\images\wm\wmc02g2.gif C:\\ijji\ENGLISH\common\images\wm\wmc02h1.gif C:\\ijji\ENGLISH\common\images\wm\wmc02h2.gif C:\\ijji\ENGLISH\common\images\wm\wmc02y1.gif C:\\ijji\ENGLISH\common\images\wm\wmc02y2.gif C:\\ijji\ENGLISH\common\images\wm\wmc0361.gif C:\\ijji\ENGLISH\common\images\wm\wmc0362.gif C:\\ijji\ENGLISH\common\images\wm\wmc0391.gif C:\\ijji\ENGLISH\common\images\wm\wmc0392.gif C:\\ijji\ENGLISH\common\images\wm\wmd0051.gif C:\\ijji\ENGLISH\common\images\wm\wmd0052.gif C:\\ijji\ENGLISH\common\images\wm\wmd0111.gif C:\\ijji\ENGLISH\common\images\wm\wmd0112.gif C:\\ijji\ENGLISH\common\images\wm\wmd0121.gif C:\\ijji\ENGLISH\common\images\wm\wmd0122.gif C:\\ijji\ENGLISH\common\images\wm\wmd0161.gif C:\\ijji\ENGLISH\common\images\wm\wmd0162.gif C:\\ijji\ENGLISH\common\images\wm\wmd01e1.gif C:\\ijji\ENGLISH\common\images\wm\wmd01e2.gif C:\\ijji\ENGLISH\common\images\wm\wmd01j1.gif C:\\ijji\ENGLISH\common\images\wm\wmd01j2.gif C:\\ijji\ENGLISH\common\images\wm\wmd01m1.gif C:\\ijji\ENGLISH\common\images\wm\wmd01m2.gif C:\\ijji\ENGLISH\common\images\wm\wmd01z1.gif C:\\ijji\ENGLISH\common\images\wm\wmd01z2.gif C:\\ijji\ENGLISH\common\images\wm\wmd0241.gif C:\\ijji\ENGLISH\common\images\wm\wmd0242.gif C:\\ijji\ENGLISH\common\images\wm\wmd02g1.gif C:\\ijji\ENGLISH\common\images\wm\wmd02g2.gif C:\\ijji\ENGLISH\common\sounds\base_jiksaw_n.hso C:\\ijji\ENGLISH\common\sounds\base_jiksaw_s.hso C:\\ijji\ENGLISH\common\sounds\prv0f.hso C:\\ijji\ENGLISH\common\sounds\prv0m.hso C:\\ijji\ENGLISH\common\sounds\prv1f.hso C:\\ijji\ENGLISH\common\sounds\prv1m.hso C:\\ijji\ENGLISH\common\sounds\prv2f.hso C:\\ijji\ENGLISH\common\sounds\prv2m.hso C:\\ijji\ENGLISH\common\sounds\prv3f.hso C:\\ijji\ENGLISH\common\sounds\prv3m.hso C:\\ijji\ENGLISH\common\sounds\prv4f.hso C:\\ijji\ENGLISH\common\sounds\prv4m.hso C:\\ijji\ENGLISH\common\sounds\prv5f.hso C:\\ijji\ENGLISH\common\sounds\prv5m.hso C:\\ijji\ENGLISH\common\sounds\prv6f.hso C:\\ijji\ENGLISH\common\sounds\prv6m.hso C:\\ijji\ENGLISH\common\sounds\prv7f.hso C:\\ijji\ENGLISH\common\sounds\prv7m.hso C:\\ijji\ENGLISH\dbghelp.dll C:\\ijji\ENGLISH\DFEngine.dll C:\\ijji\ENGLISH\dsound.dll C:\\ijji\ENGLISH\fmod.dll C:\\ijji\ENGLISH\GameGuard.des C:\\ijji\ENGLISH\GdiPlus.dll C:\\ijji\ENGLISH\Gunbound Revolution\GameGuard\GameGuard.des C:\\ijji\ENGLISH\Gunbound Revolution\GameGuard\GameGuard.ver C:\\ijji\ENGLISH\Gunbound Revolution\GameGuard\GameMon.des C:\\ijji\ENGLISH\Gunbound Revolution\GameGuard\ggscan.des C:\\ijji\ENGLISH\Gunbound Revolution\GameGuard\GunBoundUS.ini C:\\ijji\ENGLISH\Gunbound Revolution\GameGuard\npgg.erl C:\\ijji\ENGLISH\Gunbound Revolution\GameGuard\npgg9x.des C:\\ijji\ENGLISH\Gunbound Revolution\GameGuard\npggNT.des C:\\ijji\ENGLISH\Gunbound Revolution\GameGuard\npgl.erl C:\\ijji\ENGLISH\Gunbound Revolution\GameGuard\npgm.erl C:\\ijji\ENGLISH\Gunbound Revolution\GameGuard\npgmup.des C:\\ijji\ENGLISH\Gunbound Revolution\GameGuard\npgmup.des.new C:\\ijji\ENGLISH\Gunbound Revolution\GameGuard\npgmup.erl C:\\ijji\ENGLISH\Gunbound Revolution\GameGuard\npsc.des C:\\ijji\ENGLISH\Gunbound Revolution\GameGuard\npsc.erl C:\\ijji\ENGLISH\Gunbound Revolution\GameGuard\NPSCAN.DES C:\\ijji\ENGLISH\Gunbound Revolution\Gunbound.erl C:\\ijji\ENGLISH\Gunbound Revolution\GunBound.log C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000001.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000002.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000003.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000004.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000005.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000006.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000007.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000008.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000009.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000010.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000011.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000012.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000013.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000014.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000015.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000016.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000017.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000018.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000019.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000020.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000021.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000022.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000023.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000024.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000025.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000026.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000027.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000028.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000029.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000030.bmp C:\\ijji\ENGLISH\Gunbound Revolution\GunBound0000031.bmp C:\\ijji\ENGLISH\Gunbound Revolution\HanAuthForClient.dll C:\\ijji\ENGLISH\Gunbound Revolution\HanPollForClient.dll C:\\ijji\ENGLISH\Gunbound Revolution\Img\Thumbs.db C:\\ijji\ENGLISH\Gunbound Revolution\msvcr71.dll C:\\ijji\ENGLISH\Gunbound Revolution\NyxLauncher.exe C:\\ijji\ENGLISH\HanAuthForClient.dll C:\\ijji\ENGLISH\HanReportForClient.dll C:\\ijji\ENGLISH\HanUninstall.ini C:\\ijji\ENGLISH\HgAniGm3.dll C:\\ijji\ENGLISH\HgAniGm3_16Bit.dll C:\\ijji\ENGLISH\HgAvatar2006.dll C:\\ijji\ENGLISH\HgAvtr3.dll C:\\ijji\ENGLISH\HgBoard3.dll C:\\ijji\ENGLISH\HgClientConfig.xml C:\\ijji\ENGLISH\HgCom3.dll C:\\ijji\ENGLISH\HgCtr3.dll C:\\ijji\ENGLISH\HgDlg3.dll C:\\ijji\ENGLISH\HgDoubleFusion.dll C:\\ijji\ENGLISH\HgEng3.dll C:\\ijji\ENGLISH\HgFrm3.dll C:\\ijji\ENGLISH\HgModel3.dll C:\\ijji\ENGLISH\HgSC.dll C:\\ijji\ENGLISH\HgSock3.dll

3 C:\\ijji\ENGLISH\common\images\f2\f2b00v.gif C:\\ijji\ENGLISH\common\images\f2\f2b00y.gif C:\\ijji\ENGLISH\common\images\f2\f2b013.gif C:\\ijji\ENGLISH\common\images\f2\f2b01b.gif C:\\ijji\ENGLISH\common\images\f2\f2b01c.gif C:\\ijji\ENGLISH\common\images\f2\f2b01d.gif C:\\ijji\ENGLISH\common\images\f2\f2b01f.gif C:\\ijji\ENGLISH\common\images\f2\f2b01g.gif C:\\ijji\ENGLISH\common\images\f2\f2c001.gif C:\\ijji\ENGLISH\common\images\f2\f2c002.gif C:\\ijji\ENGLISH\common\images\f2\f2c005.gif C:\\ijji\ENGLISH\common\images\f2\f2c00b.gif C:\\ijji\ENGLISH\common\images\f2\f2c00d.gif C:\\ijji\ENGLISH\common\images\f2\f2c00j.gif C:\\ijji\ENGLISH\common\images\f2\f2c00k.gif C:\\ijji\ENGLISH\common\images\f2\f2c00l.gif C:\\ijji\ENGLISH\common\images\f2\f2c00r.gif C:\\ijji\ENGLISH\common\images\f2\f2c00t.gif C:\\ijji\ENGLISH\common\images\f2\f2c00v.gif C:\\ijji\ENGLISH\common\images\f2\f2c00y.gif C:\\ijji\ENGLISH\common\images\f2\f2c011.gif C:\\ijji\ENGLISH\common\images\f2\f2c014.gif C:\\ijji\ENGLISH\common\images\f2\f2c01b.gif C:\\ijji\ENGLISH\common\images\f2\f2c01c.gif C:\\ijji\ENGLISH\common\images\f2\f2c01d.gif C:\\ijji\ENGLISH\common\images\f2\f2d007.gif C:\\ijji\ENGLISH\common\images\f2\f2d00b.gif C:\\ijji\ENGLISH\common\images\f2\f2d00g.gif C:\\ijji\ENGLISH\common\images\f2\f2d00h.gif C:\\ijji\ENGLISH\common\images\f2\f2d00l.gif C:\\ijji\ENGLISH\common\images\f2\f2d00v.gif C:\\ijji\ENGLISH\common\images\f2\f2d01b.gif C:\\ijji\ENGLISH\common\images\f2\f2d01c.gif C:\\ijji\ENGLISH\common\images\f2\f2d01f.gif C:\\ijji\ENGLISH\common\images\f2\f2d01g.gif C:\\ijji\ENGLISH\common\images\f3\f3a009.gif C:\\ijji\ENGLISH\common\images\f3\f3a00f.gif C:\\ijji\ENGLISH\common\images\f3\f3a00g.gif C:\\ijji\ENGLISH\common\images\f3\f3a00h.gif C:\\ijji\ENGLISH\common\images\f3\f3a00q.gif C:\\ijji\ENGLISH\common\images\f3\f3a00r.gif C:\\ijji\ENGLISH\common\images\f3\f3a011.gif C:\\ijji\ENGLISH\common\images\f3\f3a013.gif C:\\ijji\ENGLISH\common\images\f3\f3a01f.gif C:\\ijji\ENGLISH\common\images\f3\f3a01t.gif C:\\ijji\ENGLISH\common\images\f3\f3a02a.gif C:\\ijji\ENGLISH\common\images\f3\f3a02b.gif C:\\ijji\ENGLISH\common\images\f3\f3a02j.gif C:\\ijji\ENGLISH\common\images\f3\f3a02m.gif C:\\ijji\ENGLISH\common\images\f3\f3a02w.gif C:\\ijji\ENGLISH\common\images\f3\f3a03j.gif C:\\ijji\ENGLISH\common\images\f3\f3b009.gif C:\\ijji\ENGLISH\common\images\f3\f3b00f.gif C:\\ijji\ENGLISH\common\images\f3\f3b00g.gif C:\\ijji\ENGLISH\common\images\f3\f3b00h.gif C:\\ijji\ENGLISH\common\images\f3\f3b00p.gif C:\\ijji\ENGLISH\common\images\f3\f3b00r.gif C:\\ijji\ENGLISH\common\images\f3\f3b00u.gif C:\\ijji\ENGLISH\common\images\f3\f3b00z.gif C:\\ijji\ENGLISH\common\images\f3\f3b013.gif C:\\ijji\ENGLISH\common\images\f3\f3b01f.gif C:\\ijji\ENGLISH\common\images\f3\f3b01t.gif C:\\ijji\ENGLISH\common\images\f3\f3b01x.gif C:\\ijji\ENGLISH\common\images\f3\f3b020.gif C:\\ijji\ENGLISH\common\images\f3\f3b025.gif C:\\ijji\ENGLISH\common\images\f3\f3b026.gif C:\\ijji\ENGLISH\common\images\f3\f3b02b.gif C:\\ijji\ENGLISH\common\images\f3\f3b02e.gif C:\\ijji\ENGLISH\common\images\f3\f3b02m.gif C:\\ijji\ENGLISH\common\images\f3\f3b02o.gif C:\\ijji\ENGLISH\common\images\f3\f3b02p.gif C:\\ijji\ENGLISH\common\images\f3\f3b02w.gif C:\\ijji\ENGLISH\common\images\f3\f3b039.gif C:\\ijji\ENGLISH\common\images\f3\f3c009.gif C:\\ijji\ENGLISH\common\images\f3\f3c00a.gif C:\\ijji\ENGLISH\common\images\f3\f3c00e.gif C:\\ijji\ENGLISH\common\images\f3\f3c00i.gif C:\\ijji\ENGLISH\common\images\f3\f3c00m.gif C:\\ijji\ENGLISH\common\images\f3\f3c00p.gif C:\\ijji\ENGLISH\common\images\f3\f3c00y.gif C:\\ijji\ENGLISH\common\images\f3\f3c00z.gif C:\\ijji\ENGLISH\common\images\f3\f3c011.gif C:\\ijji\ENGLISH\common\images\f3\f3c01f.gif C:\\ijji\ENGLISH\common\images\f3\f3c01s.gif C:\\ijji\ENGLISH\common\images\f3\f3c01t.gif C:\\ijji\ENGLISH\common\images\f3\f3c020.gif C:\\ijji\ENGLISH\common\images\f3\f3c025.gif C:\\ijji\ENGLISH\common\images\f3\f3c02a.gif C:\\ijji\ENGLISH\common\images\f3\f3c02c.gif C:\\ijji\ENGLISH\common\images\f3\f3c02m.gif C:\\ijji\ENGLISH\common\images\f3\f3d009.gif C:\\ijji\ENGLISH\common\images\f3\f3d00i.gif C:\\ijji\ENGLISH\common\images\f3\f3d00x.gif C:\\ijji\ENGLISH\common\images\f3\f3d010.gif C:\\ijji\ENGLISH\common\images\f3\f3d013.gif C:\\ijji\ENGLISH\common\images\f3\f3d016.gif C:\\ijji\ENGLISH\common\images\f3\f3d01t.gif C:\\ijji\ENGLISH\common\images\f3\f3d029.gif C:\\ijji\ENGLISH\common\images\f3\f3d02a.gif C:\\ijji\ENGLISH\common\images\f3\f3d02m.gif C:\\ijji\ENGLISH\common\images\f3\f3d02t.gif C:\\ijji\ENGLISH\common\images\f4\f4a002.gif C:\\ijji\ENGLISH\common\images\f4\f4a005.gif C:\\ijji\ENGLISH\common\images\f4\f4a006.gif C:\\ijji\ENGLISH\common\images\f4\f4a00j.gif C:\\ijji\ENGLISH\common\images\f4\f4a00w.gif C:\\ijji\ENGLISH\common\images\f4\f4a014.gif C:\\ijji\ENGLISH\common\images\f4\f4a01k.gif C:\\ijji\ENGLISH\common\images\f4\f4a01z.gif C:\\ijji\ENGLISH\common\images\f4\f4a023.gif C:\\ijji\ENGLISH\common\images\f4\f4a02g.gif C:\\ijji\ENGLISH\common\images\f4\f4a02j.gif C:\\ijji\ENGLISH\common\images\f4\f4a02l.gif C:\\ijji\ENGLISH\common\images\f4\f4b003.gif C:\\ijji\ENGLISH\common\images\f4\f4b005.gif C:\\ijji\ENGLISH\common\images\f4\f4b00j.gif C:\\ijji\ENGLISH\common\images\f4\f4b00o.gif C:\\ijji\ENGLISH\common\images\f4\f4b00p.gif C:\\ijji\ENGLISH\common\images\f4\f4b00v.gif C:\\ijji\ENGLISH\common\images\f4\f4b00z.gif C:\\ijji\ENGLISH\common\images\f4\f4b013.gif C:\\ijji\ENGLISH\common\images\f4\f4b014.gif C:\\ijji\ENGLISH\common\images\f4\f4b017.gif C:\\ijji\ENGLISH\common\images\f4\f4b01c.gif C:\\ijji\ENGLISH\common\images\f4\f4b01u.gif C:\\ijji\ENGLISH\common\images\f4\f4b01z.gif C:\\ijji\ENGLISH\common\images\f4\f4b023.gif C:\\ijji\ENGLISH\common\images\f4\f4b02i.gif C:\\ijji\ENGLISH\common\images\f4\f4b02j.gif C:\\ijji\ENGLISH\common\images\f4\f4b02l.gif C:\\ijji\ENGLISH\common\images\f4\f4b02m.gif C:\\ijji\ENGLISH\common\images\f4\f4b02n.gif C:\\ijji\ENGLISH\common\images\f4\f4c002.gif C:\\ijji\ENGLISH\common\images\f4\f4c003.gif C:\\ijji\ENGLISH\common\images\f4\f4c005.gif C:\\ijji\ENGLISH\common\images\f4\f4c006.gif C:\\ijji\ENGLISH\common\images\f4\f4c00e.gif C:\\ijji\ENGLISH\common\images\f4\f4c00j.gif C:\\ijji\ENGLISH\common\images\f4\f4c00n.gif C:\\ijji\ENGLISH\common\images\f4\f4c00o.gif C:\\ijji\ENGLISH\common\images\f4\f4c014.gif C:\\ijji\ENGLISH\common\images\f4\f4c017.gif C:\\ijji\ENGLISH\common\images\f4\f4c01a.gif C:\\ijji\ENGLISH\common\images\f4\f4c01t.gif C:\\ijji\ENGLISH\common\images\f4\f4c01u.gif C:\\ijji\ENGLISH\common\images\f4\f4c01w.gif C:\\ijji\ENGLISH\common\images\f4\f4c01y.gif C:\\ijji\ENGLISH\common\images\f4\f4c02j.gif C:\\ijji\ENGLISH\common\images\f4\f4c03j.gif C:\\ijji\ENGLISH\common\images\f4\f4d00j.gif C:\\ijji\ENGLISH\common\images\f4\f4d00z.gif C:\\ijji\ENGLISH\common\images\f4\f4d014.gif C:\\ijji\ENGLISH\common\images\f4\f4d01a.gif C:\\ijji\ENGLISH\common\images\f4\f4d01l.gif C:\\ijji\ENGLISH\common\images\f4\f4d01v.gif C:\\ijji\ENGLISH\common\images\f4\f4d01y.gif C:\\ijji\ENGLISH\common\images\f5\f5a00c.gif C:\\ijji\ENGLISH\common\images\f5\f5a014.gif C:\\ijji\ENGLISH\common\images\f5\f5a02a.gif C:\\ijji\ENGLISH\common\images\f5\f5b00j.gif C:\\ijji\ENGLISH\common\images\f6\f6a00e.gif C:\\ijji\ENGLISH\common\images\f6\f6a00n.gif C:\\ijji\ENGLISH\common\images\f6\f6a014.gif C:\\ijji\ENGLISH\common\images\f6\f6a01l.gif C:\\ijji\ENGLISH\common\images\f6\f6a01y.gif C:\\ijji\ENGLISH\common\images\f6\f6b003.gif C:\\ijji\ENGLISH\common\images\f6\f6b00z.gif C:\\ijji\ENGLISH\common\images\f6\f6b013.gif C:\\ijji\ENGLISH\common\images\f6\f6b014.gif C:\\ijji\ENGLISH\common\images\f6\f6b01k.gif C:\\ijji\ENGLISH\common\images\f6\f6b020.gif C:\\ijji\ENGLISH\common\images\f6\f6c02j.gif C:\\ijji\ENGLISH\common\images\f6\f6d00e.gif C:\\ijji\ENGLISH\common\images\f6\f6d01k.gif C:\\ijji\ENGLISH\common\images\f6\f6d01m.gif C:\\ijji\ENGLISH\common\images\f6\f6d02m.gif C:\\ijji\ENGLISH\common\images\f7\f7a021.gif C:\\ijji\ENGLISH\common\images\f7\f7b01i.gif C:\\ijji\ENGLISH\common\images\f7\f7c00f.gif C:\\ijji\ENGLISH\common\images\f7\f7d00j.gif C:\\ijji\ENGLISH\common\images\f7\f7d015.gif C:\\ijji\ENGLISH\common\images\gf\gfa00b.gif C:\\ijji\ENGLISH\common\images\gf\gfa01b.gif C:\\ijji\ENGLISH\common\images\gf\gfb004.gif C:\\ijji\ENGLISH\common\images\gf\gfb006.gif C:\\ijji\ENGLISH\common\images\gf\gfc005.gif C:\\ijji\ENGLISH\common\images\gf\gfc00b.gif C:\\ijji\ENGLISH\common\images\gm\gma004.gif C:\\ijji\ENGLISH\common\images\gm\gma006.gif C:\\ijji\ENGLISH\common\images\gm\gma00p.gif C:\\ijji\ENGLISH\common\images\gm\gmb006.gif C:\\ijji\ENGLISH\common\images\gm\gmb00e.gif C:\\ijji\ENGLISH\common\images\gm\gmb00p.gif C:\\ijji\ENGLISH\common\images\gm\gmb01j.gif C:\\ijji\ENGLISH\common\images\gm\gmc01b.gif C:\\ijji\ENGLISH\common\images\h1\h100c1.gif C:\\ijji\ENGLISH\common\images\h1\h100c2.gif C:\\ijji\ENGLISH\common\images\h1\h100d1.gif C:\\ijji\ENGLISH\common\images\h1\h100d2.gif C:\\ijji\ENGLISH\common\images\h1\h100e1.gif C:\\ijji\ENGLISH\common\images\h1\h100e2.gif C:\\ijji\ENGLISH\common\images\h1\h100f1.gif C:\\ijji\ENGLISH\common\images\h1\h100f2.gif C:\\ijji\ENGLISH\common\images\h1\h100h1.gif C:\\ijji\ENGLISH\common\images\h1\h100h2.gif C:\\ijji\ENGLISH\common\images\h1\h100m1.gif C:\\ijji\ENGLISH\common\images\h1\h100m2.gif C:\\ijji\ENGLISH\common\images\h1\h100n1.gif C:\\ijji\ENGLISH\common\images\h1\h100n2.gif C:\\ijji\ENGLISH\common\images\h1\h100o1.gif C:\\ijji\ENGLISH\common\images\h1\h100o2.gif C:\\ijji\ENGLISH\common\images\h1\h100u1.gif C:\\ijji\ENGLISH\common\images\h1\h100u2.gif C:\\ijji\ENGLISH\common\images\h1\h100v1.gif C:\\ijji\ENGLISH\common\images\h1\h100v2.gif C:\\ijji\ENGLISH\common\images\h1\h100w1.gif C:\\ijji\ENGLISH\common\images\h1\h100w2.gif C:\\ijji\ENGLISH\common\images\h1\h100y1.gif C:\\ijji\ENGLISH\common\images\h1\h100y2.gif C:\\ijji\ENGLISH\common\images\h1\h10101.gif C:\\ijji\ENGLISH\common\images\h1\h10102.gif C:\\ijji\ENGLISH\common\images\h1\h10121.gif C:\\ijji\ENGLISH\common\images\h1\h10122.gif C:\\ijji\ENGLISH\common\images\h1\h101o1.gif C:\\ijji\ENGLISH\common\images\h1\h101o2.gif C:\\ijji\ENGLISH\common\images\h1\h101p1.gif C:\\ijji\ENGLISH\common\images\h1\h101p2.gif C:\\ijji\ENGLISH\common\images\h1\h101r1.gif C:\\ijji\ENGLISH\common\images\h1\h101r2.gif C:\\ijji\ENGLISH\common\images\h1\h101s1.gif C:\\ijji\ENGLISH\common\images\h1\h101s2.gif C:\\ijji\ENGLISH\common\images\h1\h101y1.gif C:\\ijji\ENGLISH\common\images\h1\h101y2.gif C:\\ijji\ENGLISH\common\images\h1\h101z1.gif C:\\ijji\ENGLISH\common\images\h1\h101z2.gif C:\\ijji\ENGLISH\common\images\h1\h10221.gif C:\\ijji\ENGLISH\common\images\h1\h10222.gif C:\\ijji\ENGLISH\common\images\h1\h10241.gif C:\\ijji\ENGLISH\common\images\h1\h10242.gif C:\\ijji\ENGLISH\common\images\h1\h10251.gif C:\\ijji\ENGLISH\common\images\h1\h10252.gif C:\\ijji\ENGLISH\common\images\h1\h10261.gif C:\\ijji\ENGLISH\common\images\h1\h10262.gif C:\\ijji\ENGLISH\common\images\h1\h10271.gif C:\\ijji\ENGLISH\common\images\h1\h10272.gif C:\\ijji\ENGLISH\common\images\h1\h10291.gif C:\\ijji\ENGLISH\common\images\h1\h10292.gif C:\\ijji\ENGLISH\common\images\h1\h102e1.gif C:\\ijji\ENGLISH\common\images\h1\h102e2.gif C:\\ijji\ENGLISH\common\images\h1\h102i1.gif C:\\ijji\ENGLISH\common\images\h1\h102i2.gif C:\\ijji\ENGLISH\common\images\h1\h102k1.gif C:\\ijji\ENGLISH\common\images\h1\h102k2.gif C:\\ijji\ENGLISH\common\images\h1\h102u1.gif C:\\ijji\ENGLISH\common\images\h1\h102u2.gif C:\\ijji\ENGLISH\common\images\h1\h102y1.gif C:\\ijji\ENGLISH\common\images\h1\h102y2.gif C:\\ijji\ENGLISH\common\images\h1\h103c1.gif C:\\ijji\ENGLISH\common\images\h1\h103c2.gif C:\\ijji\ENGLISH\common\images\h1\h103g1.gif C:\\ijji\ENGLISH\common\images\h1\h103g2.gif C:\\ijji\ENGLISH\common\images\h1\h103o1.gif C:\\ijji\ENGLISH\common\images\h1\h103o2.gif C:\\ijji\ENGLISH\common\images\h1\h103p1.gif C:\\ijji\ENGLISH\common\images\h1\h103p2.gif C:\\ijji\ENGLISH\common\images\h1\h103v1.gif C:\\ijji\ENGLISH\common\images\h1\h103v2.gif C:\\ijji\ENGLISH\common\images\h1\h104c1.gif C:\\ijji\ENGLISH\common\images\h1\h104c2.gif C:\\ijji\ENGLISH\common\images\h1\h104q1.gif C:\\ijji\ENGLISH\common\images\h1\h104q2.gif C:\\ijji\ENGLISH\common\images\h1\h104w1.gif C:\\ijji\ENGLISH\common\images\h1\h104w2.gif C:\\ijji\ENGLISH\common\images\h1\h104x1.gif C:\\ijji\ENGLISH\common\images\h1\h104x2.gif C:\\ijji\ENGLISH\common\images\h1\h105f1.gif C:\\ijji\ENGLISH\common\images\h1\h105f2.gif C:\\ijji\ENGLISH\common\images\h2\h20061.gif C:\\ijji\ENGLISH\common\images\h2\h20062.gif C:\\ijji\ENGLISH\common\images\h2\h200v1.gif C:\\ijji\ENGLISH\common\images\h2\h200v2.gif C:\\ijji\ENGLISH\common\images\h2\h200x1.gif C:\\ijji\ENGLISH\common\images\h2\h200x2.gif C:\\ijji\ENGLISH\common\images\h2\h20131.gif C:\\ijji\ENGLISH\common\images\h2\h20132.gif C:\\ijji\ENGLISH\common\images\h2\h201r1.gif C:\\ijji\ENGLISH\common\images\h2\h201r2.gif C:\\ijji\ENGLISH\common\images\h2\h202b1.gif C:\\ijji\ENGLISH\common\images\h2\h202b2.gif C:\\ijji\ENGLISH\common\images\h2\h202d1.gif C:\\ijji\ENGLISH\common\images\h2\h202d2.gif C:\\ijji\ENGLISH\common\images\h2\h203m1.gif C:\\ijji\ENGLISH\common\images\h2\h203m2.gif C:\\ijji\ENGLISH\common\images\h2\h203o1.gif C:\\ijji\ENGLISH\common\images\h2\h203o2.gif C:\\ijji\ENGLISH\common\images\h2\h203s1.gif C:\\ijji\ENGLISH\common\images\h2\h203s2.gif C:\\ijji\ENGLISH\common\images\h2\h203x1.gif C:\\ijji\ENGLISH\common\images\h2\h203x2.gif C:\\ijji\ENGLISH\common\images\h2\h204f1.gif C:\\ijji\ENGLISH\common\images\h2\h204f2.gif C:\\ijji\ENGLISH\common\images\h3\h300j1.gif C:\\ijji\ENGLISH\common\images\h3\h300j2.gif C:\\ijji\ENGLISH\common\images\h3\h300l1.gif C:\\ijji\ENGLISH\common\images\h3\h300l2.gif C:\\ijji\ENGLISH\common\images\h4\h40021.gif C:\\ijji\ENGLISH\common\images\h4\h40022.gif C:\\ijji\ENGLISH\common\images\h4\h400c1.gif C:\\ijji\ENGLISH\common\images\h4\h400c2.gif C:\\ijji\ENGLISH\common\images\h4\h400f1.gif C:\\ijji\ENGLISH\common\images\h4\h400f2.gif C:\\ijji\ENGLISH\common\images\h4\h400g1.gif C:\\ijji\ENGLISH\common\images\h4\h400g2.gif C:\\ijji\ENGLISH\common\images\h4\h400h1.gif C:\\ijji\ENGLISH\common\images\h4\h400h2.gif C:\\ijji\ENGLISH\common\images\h4\h400j1.gif C:\\ijji\ENGLISH\common\images\h4\h400j2.gif C:\\ijji\ENGLISH\common\images\h4\h400s1.gif C:\\ijji\ENGLISH\common\images\h4\h400s2.gif C:\\ijji\ENGLISH\common\images\h4\h400v1.gif C:\\ijji\ENGLISH\common\images\h4\h400v2.gif C:\\ijji\ENGLISH\common\images\h4\h400w1.gif C:\\ijji\ENGLISH\common\images\h4\h400w2.gif C:\\ijji\ENGLISH\common\images\h4\h401s1.gif C:\\ijji\ENGLISH\common\images\h4\h401s2.gif C:\\ijji\ENGLISH\common\images\h4\h40291.gif C:\\ijji\ENGLISH\common\images\h4\h40292.gif C:\\ijji\ENGLISH\common\images\h4\h402j1.gif C:\\ijji\ENGLISH\common\images\h4\h402j2.gif C:\\ijji\ENGLISH\common\images\h4\h402w1.gif C:\\ijji\ENGLISH\common\images\h4\h402w2.gif C:\\ijji\ENGLISH\common\images\h4\h40311.gif C:\\ijji\ENGLISH\common\images\h4\h40312.gif C:\\ijji\ENGLISH\common\images\h4\h40371.gif C:\\ijji\ENGLISH\common\images\h4\h40372.gif C:\\ijji\ENGLISH\common\images\h4\h403g1.gif C:\\ijji\ENGLISH\common\images\h4\h403g2.gif C:\\ijji\ENGLISH\common\images\h4\h403o1.gif C:\\ijji\ENGLISH\common\images\h4\h403o2.gif C:\\ijji\ENGLISH\common\images\h4\h405f1.gif C:\\ijji\ENGLISH\common\images\h4\h405f2.gif C:\\ijji\ENGLISH\common\images\hgb2008.ico C:\\ijji\ENGLISH\common\images\hgc2008.ico C:\\ijji\ENGLISH\common\images\hostmark.him C:\\ijji\ENGLISH\common\images\img_channel_seedmoney.him C:\\ijji\ENGLISH\common\images\JackpotScoreBoardNumber.him C:\\ijji\ENGLISH\common\images\jiksocheckbtn.him C:\\ijji\ENGLISH\common\images\k2\k2001.gif C:\\ijji\ENGLISH\common\images\k2\k2002.gif C:\\ijji\ENGLISH\common\images\k2\k2003.gif C:\\ijji\ENGLISH\common\images\k3\k3003.gif C:\\ijji\ENGLISH\common\images\k3\k3007.gif C:\\ijji\ENGLISH\common\images\k4\k4005.gif C:\\ijji\ENGLISH\common\images\k5\k5002.gif C:\\ijji\ENGLISH\common\images\k5\k5003.gif C:\\ijji\ENGLISH\common\images\k5\k5006.gif C:\\ijji\ENGLISH\common\images\k5\k500c.gif C:\\ijji\ENGLISH\common\images\k5\k500d.gif C:\\ijji\ENGLISH\common\images\k5\k500e.gif C:\\ijji\ENGLISH\common\images\k5\k500f.gif C:\\ijji\ENGLISH\common\images\k5\k500g.gif C:\\ijji\ENGLISH\common\images\k5\k500h.gif C:\\ijji\ENGLISH\common\images\k5\k500j.gif C:\\ijji\ENGLISH\common\images\k5\k500k.gif C:\\ijji\ENGLISH\common\images\k5\k500l.gif C:\\ijji\ENGLISH\common\images\k6\k6001.gif C:\\ijji\ENGLISH\common\images\k6\k6002.gif C:\\ijji\ENGLISH\common\images\k6\k6004.gif C:\\ijji\ENGLISH\common\images\k6\k6006.gif

part 2 C:\\ijji\ENGLISH\common\images\a1\a1001.gif C:\\ijji\ENGLISH\common\images\a1\a1002.gif C:\\ijji\ENGLISH\common\images\a1\a1003.gif C:\\ijji\ENGLISH\common\images\a1\a1005.gif C:\\ijji\ENGLISH\common\images\a1\a1006.gif C:\\ijji\ENGLISH\common\images\a1\a1008.gif C:\\ijji\ENGLISH\common\images\a1\a1009.gif C:\\ijji\ENGLISH\common\images\a1\a100a.gif C:\\ijji\ENGLISH\common\images\a2\a2002.gif C:\\ijji\ENGLISH\common\images\a2\a2003.gif C:\\ijji\ENGLISH\common\images\a3\a3004.gif C:\\ijji\ENGLISH\common\images\a3\a3006.gif C:\\ijji\ENGLISH\common\images\a4\a4002.gif C:\\ijji\ENGLISH\common\images\arrow_gray.him C:\\ijji\ENGLISH\common\images\bar_line.him C:\\ijji\ENGLISH\common\images\btn_kickuser.him C:\\ijji\ENGLISH\common\images\btn_opengdiary.him C:\\ijji\ENGLISH\common\images\btn_reportabuse.him C:\\ijji\ENGLISH\common\images\btnchance.him C:\\ijji\ENGLISH\common\images\c1\c1002.gif C:\\ijji\ENGLISH\common\images\c1\c1009.gif C:\\ijji\ENGLISH\common\images\c1\c100a.gif C:\\ijji\ENGLISH\common\images\c1\c100e.gif C:\\ijji\ENGLISH\common\images\c1\c100g.gif C:\\ijji\ENGLISH\common\images\c1\c100h.gif C:\\ijji\ENGLISH\common\images\c1\c100i.gif C:\\ijji\ENGLISH\common\images\c2\c2004.gif C:\\ijji\ENGLISH\common\images\c2\c2009.gif C:\\ijji\ENGLISH\common\images\c2\c200c.gif C:\\ijji\ENGLISH\common\images\c2\c200k.gif C:\\ijji\ENGLISH\common\images\c2\c200n.gif C:\\ijji\ENGLISH\common\images\c3\c3001.gif C:\\ijji\ENGLISH\common\images\c3\c3004.gif C:\\ijji\ENGLISH\common\images\c3\c3006.gif C:\\ijji\ENGLISH\common\images\c3\c300b.gif C:\\ijji\ENGLISH\common\images\c3\c300d.gif C:\\ijji\ENGLISH\common\images\c3\c300i.gif C:\\ijji\ENGLISH\common\images\c3\c300k.gif C:\\ijji\ENGLISH\common\images\c3\c300n.gif C:\\ijji\ENGLISH\common\images\com\0\ABFA00-H101R_WF01L_F100I_F201F_F301F_F4017_D2001_K9002 C:\\ijji\ENGLISH\common\images\com\0\ABFA00-H102E_WF01V_F100C_F201F_F300R_F4017 C:\\ijji\ENGLISH\common\images\com\0\ABFA00-H203O_WF00E_F1001_F201F_F300R_F402N C:\\ijji\ENGLISH\common\images\com\0\ABMA00-H100V_WM02A_F1001_F2002_F300Z_F400J_D4006_K500J C:\\ijji\ENGLISH\common\images\com\0\ABMA00-H100V_WM02A_F100J_F200L_F300Z_F4005 C:\\ijji\ENGLISH\common\images\com\0\ABMA00-H102I_WM023_F1005_F2005_F3009_F4003 C:\\ijji\ENGLISH\common\images\com\0\ACMA00-H104C_WM036_F1002_F2002_F302M_F401U C:\\ijji\ENGLISH\common\images\com\0\AUUA00-C100G_C200C_C300D_K5003 C:\\ijji\ENGLISH\common\images\com\1\AAMA00-H1027_WM013_F100C_F201F_F3013_F600E_D2001_K6002_K900C C:\\ijji\ENGLISH\common\images\com\1\ABFA00-H100O_WF01L_F100S_F201F_F3009_F401C C:\\ijji\ENGLISH\common\images\com\1\ABMA00-H100V_WM01V_F100F_F200K_F3025_F400J C:\\ijji\ENGLISH\common\images\com\1\ABMA00-H1022_WM01B_F1001_F2002_F302B_F401U_K500D C:\\ijji\ENGLISH\common\images\com\1\ABMA00-H200V_WM01M_F100C_F2002_F3039_F4005 C:\\ijji\ENGLISH\common\images\com\1\AUUA00-C1009_C200N_C300N C:\\ijji\ENGLISH\common\images\com\10\ABFA00-A1009_H103C_WF00F_F100S_F201G_F300R_F400P_D400F_K500L_K6007_K9007 C:\\ijji\ENGLISH\common\images\com\10\ACFA00-H100H_WF01F_F100S_F201B_F300I_F401A_D400C_K500J C:\\ijji\ENGLISH\common\images\com\11\AAFA00-GF00B_K500F_K9004 C:\\ijji\ENGLISH\common\images\com\11\AAFA00-H101O_WF006_F1001_F201E_F300G_F502A_K6004 C:\\ijji\ENGLISH\common\images\com\11\ABMA00-H203M_WM012_F100J_F2013_F3013_F500J C:\\ijji\ENGLISH\common\images\com\12\AAMA00-A1002_H102Y_WM02U_F100C_F2001_F3011_F402L C:\\ijji\ENGLISH\common\images\com\12\ABMA00-H400C_WM02Z_F100I_F201F_F302P_F4014_D2002_K900E C:\\ijji\ENGLISH\common\images\com\12\ACMA00-H400W_WM02H_F1005_F2014_F3020_F403J_D400C C:\\ijji\ENGLISH\common\images\com\13\AAMA00-H104X_WM01E_F1001_F201B_F303J_F400J_D400E_K6007_K9003 C:\\ijji\ENGLISH\common\images\com\13\ACMA00-H100V_WM016_F1002_F2002_F301F_F4014_D2002 C:\\ijji\ENGLISH\common\images\com\13\ACMA00-H202D_WM01V_F100C_F2001_F3011_F401W C:\\ijji\ENGLISH\common\images\com\13\ADMA00-H103V_WM024_F100C_F200H_F3013_F401L C:\\ijji\ENGLISH\common\images\com\14\ABFA00-GF004 C:\\ijji\ENGLISH\common\images\com\14\ACFA00-H200X_WF028_F100C_F200Y_F300M_F700F C:\\ijji\ENGLISH\common\images\com\14\ADFA00-H403O_WF01L_F100C_F201B_F3010_F602M C:\\ijji\ENGLISH\common\images\com\15\AAFA00-A1005_H101R_WF01H_F100I_F201F_F300R_F4014_D400E_K500C_K6002_K9002 C:\\ijji\ENGLISH\common\images\com\15\AAMA00-H2006_WM01G_F100C_F2001_F302A_F7021 C:\\ijji\ENGLISH\common\images\com\15\AAMA00-H202B_WM01I_F100J_F201C_F3013_F601L C:\\ijji\ENGLISH\common\images\com\15\ABFA00-H1012_WF01V_F1001_F201B_F300F_F4023 C:\\ijji\ENGLISH\common\images\com\15\ABFA00-H1025_WF022_F100B_F200Y_F302W_F4013 C:\\ijji\ENGLISH\common\images\com\15\ABMA00-A1003_H100D_WM027_F1002_F2013_F301F_F400J_D400F_K2001_K500D_K9003 C:\\ijji\ENGLISH\common\images\com\15\ABMA00-H101Z_WM010_F1001_F201F_F300R_F4014_D2001 C:\\ijji\ENGLISH\common\images\com\15\ABMA00-H101Z_WM01G_F1001_F2002_F300P_F400V_K5006_K600C_K900J C:\\ijji\ENGLISH\common\images\com\15\ABMA00-H1022_WM01J_F100J_F201F_F300Z_F4005 C:\\ijji\ENGLISH\common\images\com\15\ABMA00-H400S_WM00X_F100C_F201B_F301X_F402J_D2001 C:\\ijji\ENGLISH\common\images\com\15\ADFA00-H401S_WF020_F100C_F201B_F300I_F7015 C:\\ijji\ENGLISH\common\images\com\15\AUUA00-C100E_C200C_C300D_K500J C:\\ijji\ENGLISH\common\images\com\16\AAFA00-H101R_WF02W_F1002_F201B_F300R_F4006_K5003 C:\\ijji\ENGLISH\common\images\com\16\AAMA00-A100A_H300J_WM032_F1001_F200C_F302J_F4005_K9004 C:\\ijji\ENGLISH\common\images\com\16\ABFA00-GF006 C:\\ijji\ENGLISH\common\images\com\16\ABMA00-H101Z_WM026_F1001_F2002_F300P_F400Z C:\\ijji\ENGLISH\common\images\com\16\ACFA00-GF005 C:\\ijji\ENGLISH\common\images\com\16\ACMA00-H4031_WM010_F1002_F201D_F300Y_F401U_K5003_K9004 C:\\ijji\ENGLISH\common\images\com\17\AAMA00-H400S_WM01K_F100C_F201B_F300H_F402J C:\\ijji\ENGLISH\common\images\com\17\ABMA00-H202D_WM01L_F100J_F200V_F3026_F6003 C:\\ijji\ENGLISH\common\images\com\17\AUUA00-C100I_C2009_C300I_K6002 C:\\ijji\ENGLISH\common\images\com\18\AAFA00-H400H_WF034_F100C_F201G_F3009_F5014_K500H C:\\ijji\ENGLISH\common\images\com\18\AAMA00-H100W_WM02J_F100C_F200G_F3011_F500C C:\\ijji\ENGLISH\common\images\com\18\AAMA00-H300J_WM01Y_F100J_F200F_F301T_F401K C:\\ijji\ENGLISH\common\images\com\18\ABMA00-H100E_WM011_F100J_F201B_F302M_F400O C:\\ijji\ENGLISH\common\images\com\18\ACFA00-H100M_WF006_F1001_F200J_F300E_F4017 C:\\ijji\ENGLISH\common\images\com\18\ACMA00-GM01B C:\\ijji\ENGLISH\common\images\com\18\ACMA00-H1024_WM00S_F100C_F200K_F301T_F4005 C:\\ijji\ENGLISH\common\images\com\18\ACMA00-H400V_WM02G_F1002_F200D_F300Z_F4014_D2001 C:\\ijji\ENGLISH\common\images\com\19\ACMA00-H400J_WM01E_F1002_F201B_F301T_F400J_D2001_K500H C:\\ijji\ENGLISH\common\images\com\19\AUUA00-C100A_C200K_C3001_K500C C:\\ijji\ENGLISH\common\images\com\2\AAFA00-H103O_WF00F_F100S_F201B_F300R_F4014 C:\\ijji\ENGLISH\common\images\com\2\ABFA00-H104Q_WF024_F1001_F201D_F301F_F4017 C:\\ijji\ENGLISH\common\images\com\2\ABMA00-H102Y_WM036_F1002_F200B_F3009_F400O_D2003_K500G C:\\ijji\ENGLISH\common\images\com\2\ADFA00-H101S_WF01Q_F100S_F201G_F300I_F401A C:\\ijji\ENGLISH\common\images\com\2\ADMA00-H4029_WM01J_F1005_F2007_F3029_F401Y C:\\ijji\ENGLISH\common\images\com\3\ABFA00-A1006_A2002_H1010_WF01I_F100B_F201G_F300R_F402L_D4003_K600C_K900K C:\\ijji\ENGLISH\common\images\com\3\ACMA00-H300L_WM00H_F100C_F200R_F300Z_F401T C:\\ijji\ENGLISH\common\images\com\3\ADMA00-H1029_WM005_F1002_F201C_F302M_F4014_D400E_K5002_K9005 C:\\ijji\ENGLISH\common\images\com\3\ADMA00-H4002_WM012_F100F_F201F_F3016_F400Z_K2001_K500E_K6002 C:\\ijji\ENGLISH\common\images\com\4\ABMA00-A2003_H100C_WM00J_F1005_F201B_F3009_F4017_D2001_K5002_K6002 C:\\ijji\ENGLISH\common\images\com\5\AAFA00-H400G_WF03O_F100N_F200J_F300R_F4002 C:\\ijji\ENGLISH\common\images\com\5\AAMA00-GM006_K500C C:\\ijji\ENGLISH\common\images\com\5\ABMA00-GM01J C:\\ijji\ENGLISH\common\images\com\5\ABMA00-H100F_WM01L_F1001_F201F_F302M_F4014 C:\\ijji\ENGLISH\common\images\com\5\ADMA00-H1025_WM011_F100C_F200V_F301T_F601M C:\\ijji\ENGLISH\common\images\com\6\AAMA00-H403G_WM039_F1001_F201B_F300F_F402G_K6001 C:\\ijji\ENGLISH\common\images\com\6\ABMA00-A1003_GM00P_K2002_K900E C:\\ijji\ENGLISH\common\images\com\6\ACMA00-H100V_WM00H_F1001_F200D_F3009_F400J_D2002_K500E C:\\ijji\ENGLISH\common\images\com\6\ACMA00-H400C_WM01M_F100C_F2005_F300P_F4003 C:\\ijji\ENGLISH\common\images\com\6\AUUA00-C1002_C2009_C3006_K5002 C:\\ijji\ENGLISH\common\images\com\7\AAFA00-H101R_WF025_F100C_F201B_F300R_F402L_D4003_K500H_K600E_K9005 C:\\ijji\ENGLISH\common\images\com\7\AAMA00-A1003_H400F_WM01L_F1002_F200B_F3009_F400J_K5002_K9001 C:\\ijji\ENGLISH\common\images\com\7\AAMA00-GM004 C:\\ijji\ENGLISH\common\images\com\7\AAMA00-H100V_WM02B_F100C_F200V_F300Q_F601Y C:\\ijji\ENGLISH\common\images\com\7\ABFA00-A1006_A2002_H102E_WF01V_F100B_F200D_F300G_F701I_K500L_K9002 C:\\ijji\ENGLISH\common\images\com\7\ACFA00-H102K_WF019_F100S_F200T_F301S_F4006 C:\\ijji\ENGLISH\common\images\com\7\AUUA00-A1008_A3004_C1002_C2009_C300K_K2003_K3007_K500K_K600D_K900I C:\\ijji\ENGLISH\common\images\com\7\AUUA00-C100H_C200C_C300D_K500H_K6007 C:\\ijji\ENGLISH\common\images\com\8\AAFA00-GF01B C:\\ijji\ENGLISH\common\images\com\8\AAFA00-H102K_WF029_F100C_F201G_F302W_F4023 C:\\ijji\ENGLISH\common\images\com\8\ADMA00-H403G_WM02G_F100C_F200G_F302T_F601K C:\\ijji\ENGLISH\common\images\com\9\AAMA00-GM00P C:\\ijji\ENGLISH\common\images\com\9\ABFA00-H203X_WF00Q_F100B_F200Y_F302W_F4013 C:\\ijji\ENGLISH\common\images\com\9\ABMA00-H102Y_WM007_F1001_F201C_F300U_F6014 C:\\ijji\ENGLISH\common\images\com\9\ABMA00-H105F_WM011_F1002_F201F_F3009_F400J C:\\ijji\ENGLISH\common\images\com\9\ACFA00-GF00B C:\\ijji\ENGLISH\common\images\com\9\ACFA00-H101P_WF01D_F100T_F201B_F300A_F4002 C:\\ijji\ENGLISH\common\images\com\a\ABFA00-H102E_WF01V_F100C_F200Y_F3020_F6013 C:\\ijji\ENGLISH\common\images\com\a\ABMA00-A1003_H402W_WM032_F1001_F200C_F300P_F402J_D2003_K4005_K500C_K600B C:\\ijji\ENGLISH\common\images\com\a\ABMA00-GM006 C:\\ijji\ENGLISH\common\images\com\a\ABMA00-H104W_WM007_F1005_F201B_F302P_F4017 C:\\ijji\ENGLISH\common\images\com\a\ACFA00-H100F_WF00Q_F100S_F200V_F300I_F4002 C:\\ijji\ENGLISH\common\images\com\b\ABMA00-A1008_GM00E_K3003_K900N C:\\ijji\ENGLISH\common\images\com\b\ACMA00-A4002_H402J_WM007_F1006_F201C_F301F_F402J_K500D_K900M C:\\ijji\ENGLISH\common\images\com\c\AAMA00-H100U_WM02J_F1001_F201F_F301F_F6014 C:\\ijji\ENGLISH\common\images\com\c\ABFA00-A1001_H204F_WF034_F100C_F201F_F300R_F402L_D400C_K3003_K6006 C:\\ijji\ENGLISH\common\images\com\c\ABFA00-A1002_H201R_WF01Z_F100Q_F201G_F302O_F600Z_K6002 C:\\ijji\ENGLISH\common\images\com\c\ADMA00-H100V_WM01M_F100I_F200B_F3009_F700J_D400F_K900E C:\\ijji\ENGLISH\common\images\com\c\ADMA00-H100Y_WM01Z_F100C_F200V_F3013_F600E C:\\ijji\ENGLISH\common\images\com\d\AAFA00-H203S_WF01F_F100C_F201G_F300G_F600N C:\\ijji\ENGLISH\common\images\com\d\ABMA00-H101Y_WM02I_F100J_F200G_F302E_F6020 C:\\ijji\ENGLISH\common\images\com\d\ACMA00-H100U_WM01M_F1006_F201C_F300M_F400E_D4006 C:\\ijji\ENGLISH\common\images\com\d\ADMA00-H101Y_WM01E_F100C_F201C_F300X_F400J C:\\ijji\ENGLISH\common\images\com\d\ADMA00-H2013_WM016_F100C_F200L_F302A_F401V C:\\ijji\ENGLISH\common\images\com\d\AUUA00-C1002_C200C_C3004_K900G C:\\ijji\ENGLISH\common\images\com\e\AAMA00-A1002_H100N_WM037_F1001_F201B_F302M_F400W C:\\ijji\ENGLISH\common\images\com\e\AAMA00-H405F_WM036_F1005_F201B_F3009_F402J_K500C_K900B C:\\ijji\ENGLISH\common\images\com\e\ABMA00-H400F_WM012_F100I_F201B_F302M_F401Z C:\\ijji\ENGLISH\common\images\com\e\ACMA00-A1003_A3006_H1026_WM039_F1005_F200B_F302M_F400N_K900C C:\\ijji\ENGLISH\common\images\com\e\ACMA00-H102U_WM01D_F1006_F2011_F302C_F602J C:\\ijji\ENGLISH\common\images\com\e\ACMA00-H103P_WM020_F1006_F200K_F3025_F401Y C:\\ijji\ENGLISH\common\images\com\e\ACMA00-H400F_WM02Y_F100I_F200L_F302A_F400O C:\\ijji\ENGLISH\common\images\com\e\AUUA00-A2003_C1002_C2004_C300B_K5002_K6002_K900E C:\\ijji\ENGLISH\common\images\com\f\ABMA00-H100C_WM010_F100C_F200D_F300R_F601K_D2002_K500J C:\\ijji\ENGLISH\common\images\com\f\ABMA00-H103G_WM01R_F100J_F200F_F301T_F402I C:\\ijji\ENGLISH\common\images\com\f\ABMA00-H4037_WM010_F100J_F200V_F300H_F402M_D400C C:\\ijji\ENGLISH\common\images\d2\d2001.gif C:\\ijji\ENGLISH\common\images\d2\d2002.gif C:\\ijji\ENGLISH\common\images\d2\d2003.gif C:\\ijji\ENGLISH\common\images\d4\d4003.gif C:\\ijji\ENGLISH\common\images\d4\d4006.gif C:\\ijji\ENGLISH\common\images\d4\d400c.gif C:\\ijji\ENGLISH\common\images\d4\d400e.gif C:\\ijji\ENGLISH\common\images\d4\d400f.gif C:\\ijji\ENGLISH\common\images\evtGemToWinPrize.him C:\\ijji\ENGLISH\common\images\f1\f1a001.gif C:\\ijji\ENGLISH\common\images\f1\f1a002.gif C:\\ijji\ENGLISH\common\images\f1\f1a005.gif C:\\ijji\ENGLISH\common\images\f1\f1a00c.gif C:\\ijji\ENGLISH\common\images\f1\f1a00i.gif C:\\ijji\ENGLISH\common\images\f1\f1a00j.gif C:\\ijji\ENGLISH\common\images\f1\f1a00n.gif C:\\ijji\ENGLISH\common\images\f1\f1a00s.gif C:\\ijji\ENGLISH\common\images\f1\f1b001.gif C:\\ijji\ENGLISH\common\images\f1\f1b002.gif C:\\ijji\ENGLISH\common\images\f1\f1b005.gif C:\\ijji\ENGLISH\common\images\f1\f1b00b.gif C:\\ijji\ENGLISH\common\images\f1\f1b00c.gif C:\\ijji\ENGLISH\common\images\f1\f1b00f.gif C:\\ijji\ENGLISH\common\images\f1\f1b00i.gif C:\\ijji\ENGLISH\common\images\f1\f1b00j.gif C:\\ijji\ENGLISH\common\images\f1\f1b00q.gif C:\\ijji\ENGLISH\common\images\f1\f1b00s.gif C:\\ijji\ENGLISH\common\images\f1\f1c001.gif C:\\ijji\ENGLISH\common\images\f1\f1c002.gif C:\\ijji\ENGLISH\common\images\f1\f1c005.gif C:\\ijji\ENGLISH\common\images\f1\f1c006.gif C:\\ijji\ENGLISH\common\images\f1\f1c00c.gif C:\\ijji\ENGLISH\common\images\f1\f1c00i.gif C:\\ijji\ENGLISH\common\images\f1\f1c00s.gif C:\\ijji\ENGLISH\common\images\f1\f1c00t.gif C:\\ijji\ENGLISH\common\images\f1\f1d002.gif C:\\ijji\ENGLISH\common\images\f1\f1d005.gif C:\\ijji\ENGLISH\common\images\f1\f1d00c.gif C:\\ijji\ENGLISH\common\images\f1\f1d00f.gif C:\\ijji\ENGLISH\common\images\f1\f1d00i.gif C:\\ijji\ENGLISH\common\images\f1\f1d00s.gif C:\\ijji\ENGLISH\common\images\f2\f2a001.gif C:\\ijji\ENGLISH\common\images\f2\f2a00b.gif C:\\ijji\ENGLISH\common\images\f2\f2a00c.gif C:\\ijji\ENGLISH\common\images\f2\f2a00f.gif C:\\ijji\ENGLISH\common\images\f2\f2a00g.gif C:\\ijji\ENGLISH\common\images\f2\f2a00j.gif C:\\ijji\ENGLISH\common\images\f2\f2a00v.gif C:\\ijji\ENGLISH\common\images\f2\f2a01b.gif C:\\ijji\ENGLISH\common\images\f2\f2a01c.gif C:\\ijji\ENGLISH\common\images\f2\f2a01e.gif C:\\ijji\ENGLISH\common\images\f2\f2a01f.gif C:\\ijji\ENGLISH\common\images\f2\f2a01g.gif C:\\ijji\ENGLISH\common\images\f2\f2b002.gif C:\\ijji\ENGLISH\common\images\f2\f2b005.gif C:\\ijji\ENGLISH\common\images\f2\f2b00b.gif C:\\ijji\ENGLISH\common\images\f2\f2b00c.gif C:\\ijji\ENGLISH\common\images\f2\f2b00d.gif C:\\ijji\ENGLISH\common\images\f2\f2b00f.gif C:\\ijji\ENGLISH\common\images\f2\f2b00g.gif C:\\ijji\ENGLISH\common\images\f2\f2b00k.gif C:\\ijji\ENGLISH\common\images\f2\f2b00l.gif

Part 1 of the Combofix log ComboFix 08-07-04.6 - AlexDong 2008-07-05 14:39:17.3 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.1373 [GMT -4:00] Running from: C:\Documents and Settings\AlexDong\Desktop\ComboFix.exe Command switches used :: C:\Documents and Settings\AlexDong\Desktop\CFScript.txt * Created a new restore point * Resident AV is active FILE :: C:\WINDOWS\system32\actskn43.ocx C:\WINDOWS\system32\CAD8306DFB.sys C:\WINDOWS\system32\drivers\pavboot.sys C:\WINDOWS\system32\fbfarypy.dll C:\WINDOWS\system32\nsb139.tmp C:\WINDOWS\system32\nsy138.tmp C:\WINDOWS\system32\quvfuhea.dll C:\WINDOWS\system32\vrjksxav.dll C:\WINDOWS\system32\XceedCry.dll C:\WINDOWS\system32\XceedZip.dll C:\WINDOWS\system32\yrinapqx.dll . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\\ijji\ENGLISH\binkw32.dll C:\\ijji\ENGLISH\capture\ROUNDERS_wackpdp_145845.jpg C:\\ijji\ENGLISH\common\Channel.hml C:\\ijji\ENGLISH\common\GameWarpInfo.ini C:\\ijji\ENGLISH\common\hgaud.hdc C:\\ijji\ENGLISH\common\images\_AdLogo1.bmp C:\\ijji\ENGLISH\common\images\_AdLogo2.bmp C:\\ijji\ENGLISH\common\images\_AdLogo3.bmp C:\\ijji\ENGLISH\common\images\_AdLogo4.bmp C:\\ijji\ENGLISH\common\images\_ChangeChannelBtn.him C:\\ijji\ENGLISH\common\images\_ChangeViewBtn.him C:\\ijji\ENGLISH\common\images\_ChannelInfo.him C:\\ijji\ENGLISH\common\images\_ChannelInfoBg.him C:\\ijji\ENGLISH\common\images\_ChannelInfoBgL.him C:\\ijji\ENGLISH\common\images\_ChannelListCtrlBg.him C:\\ijji\ENGLISH\common\images\_ChannelListCtrlBtn.him C:\\ijji\ENGLISH\common\images\_ChnlGrl_AdBg1.him C:\\ijji\ENGLISH\common\images\_ChnlGrl_AdBg2.him C:\\ijji\ENGLISH\common\images\_ChnlGrl_AdBg3.him C:\\ijji\ENGLISH\common\images\_ChnlGrl_AdBg4.him C:\\ijji\ENGLISH\common\images\_ChnlGrp_ChannelListCtrlBg.him C:\\ijji\ENGLISH\common\images\_ChnlGrp_InfoBg.him C:\\ijji\ENGLISH\common\images\_ChnlGrp_JoinBtn.him C:\\ijji\ENGLISH\common\images\_ChnlGrp_ListCtrlBg.him C:\\ijji\ENGLISH\common\images\_ChnlGrp_RefreshBtn.him C:\\ijji\ENGLISH\common\images\_ChnlGrp_RoomGrpTitle.him C:\\ijji\ENGLISH\common\images\_ChnlGrp_RoomListTitle.him C:\\ijji\ENGLISH\common\images\_ChnlGrp_ShowEmptyChnlBtn.him C:\\ijji\ENGLISH\common\images\_ChnlGrp_SortBtn.him C:\\ijji\ENGLISH\common\images\_ChnlGrp_TextInfoBg.him C:\\ijji\ENGLISH\common\images\_ChnlGrp_ViewRoomLstBtn.him C:\\ijji\ENGLISH\common\images\_ChnlGrpListCornerBottom.him C:\\ijji\ENGLISH\common\images\_ChnlGrpListCornerTop.him C:\\ijji\ENGLISH\common\images\_ChnlGrpListCtrlBg.him C:\\ijji\ENGLISH\common\images\_Chnlst_ChnlGrpListCornerBottom.him C:\\ijji\ENGLISH\common\images\_Chnlst_ChnlGrpListCornerTop.him C:\\ijji\ENGLISH\common\images\_ChnnelJackpotScoreBoardBG.him C:\\ijji\ENGLISH\common\images\_ComboboxArrowBtn.him C:\\ijji\ENGLISH\common\images\_CreateATableBtn.him C:\\ijji\ENGLISH\common\images\_CreateRoomBtn.him C:\\ijji\ENGLISH\common\images\_DefaultAvatar.him C:\\ijji\ENGLISH\common\images\_DirectStartBtn.him C:\\ijji\ENGLISH\common\images\_DummyTabBtn.him C:\\ijji\ENGLISH\common\images\_EnterChannelBtn.him C:\\ijji\ENGLISH\common\images\_ExitBtn.him C:\\ijji\ENGLISH\common\images\_GameWndFullBtn.him C:\\ijji\ENGLISH\common\images\_GameWndRstBtn.him C:\\ijji\ENGLISH\common\images\_GemPrize_BtnWhatisThis.him C:\\ijji\ENGLISH\common\images\_GemPrize_GaugeBar.him C:\\ijji\ENGLISH\common\images\_GemPrize_GemIcon.him C:\\ijji\ENGLISH\common\images\_GemPrize_GuageBg.him C:\\ijji\ENGLISH\common\images\_GemPrize_GuageSide.him C:\\ijji\ENGLISH\common\images\_GemPrize_Play7Matches.him C:\\ijji\ENGLISH\common\images\_GemPrize_Play7Matches_.him C:\\ijji\ENGLISH\common\images\_GemPrize_PlayDescription.him C:\\ijji\ENGLISH\common\images\_GemPrize_PlayDescription_.him C:\\ijji\ENGLISH\common\images\_GemPrize_PopupDlg_Bg.him C:\\ijji\ENGLISH\common\images\_GemPrize_PopupDlg_Bg_.him C:\\ijji\ENGLISH\common\images\_GemPrize_PopupDlg_CloseBtn.him C:\\ijji\ENGLISH\common\images\_GemPrizeBg.him C:\\ijji\ENGLISH\common\images\_GemPrizeEndDlg_Bg.him C:\\ijji\ENGLISH\common\images\_GemPrizeEndDlgExitBtn.him C:\\ijji\ENGLISH\common\images\_GemPrizeEndDlgGotoGemBtn.him C:\\ijji\ENGLISH\common\images\_GemPrizeGetGemBg.him C:\\ijji\ENGLISH\common\images\_GemPrizeGotExtraGems.him C:\\ijji\ENGLISH\common\images\_GemPrizeGotExtraGems_.him C:\\ijji\ENGLISH\common\images\_GemPrizeGotGems7Matches.him C:\\ijji\ENGLISH\common\images\_GemPrizeGotGems7Matches_.him C:\\ijji\ENGLISH\common\images\_GemPrizeMark.him C:\\ijji\ENGLISH\common\images\_GemPrizeMenuBtn.him C:\\ijji\ENGLISH\common\images\_GemPrizeWhatIsJackPotBg.him C:\\ijji\ENGLISH\common\images\_GemPrizeWIJMouseOver.him C:\\ijji\ENGLISH\common\images\_GMark.him C:\\ijji\ENGLISH\common\images\_GuildMark.him C:\\ijji\ENGLISH\common\images\_Hanchat_Emoticon.him C:\\ijji\ENGLISH\common\images\_HideHanChatBtn.him C:\\ijji\ENGLISH\common\images\_HowToPlayBtn.him C:\\ijji\ENGLISH\common\images\_LevelStarMark.him C:\\ijji\ENGLISH\common\images\_MainFrameAccuseBtn.him C:\\ijji\ENGLISH\common\images\_MainframeBorderBottom.him C:\\ijji\ENGLISH\common\images\_MainframeBorderSide.him C:\\ijji\ENGLISH\common\images\_MainframeCaption.him C:\\ijji\ENGLISH\common\images\_MainFrameCornerBottom.him C:\\ijji\ENGLISH\common\images\_MainframeExitBtn.him C:\\ijji\ENGLISH\common\images\_MainframeGemPrizeBtn.him C:\\ijji\ENGLISH\common\images\_MainFrameInviteBtn.him C:\\ijji\ENGLISH\common\images\_MainframeListenMusicBtn.him C:\\ijji\ENGLISH\common\images\_MainframeLogo.him C:\\ijji\ENGLISH\common\images\_MainFrameMaximizeBtn.him C:\\ijji\ENGLISH\common\images\_MainFrameMinimizeBtn.him C:\\ijji\ENGLISH\common\images\_MainFrameOptionBtn.him C:\\ijji\ENGLISH\common\images\_MainframeSlogan.him C:\\ijji\ENGLISH\common\images\_MemberListTab_SortBtn.him C:\\ijji\ENGLISH\common\images\_MiniChnl_SortBtn.him C:\\ijji\ENGLISH\common\images\_MiniChnl_ViewRoomLstBtn.him C:\\ijji\ENGLISH\common\images\_MsgBoxIcon.him C:\\ijji\ENGLISH\common\images\_MyInfo_BuyBtn.him C:\\ijji\ENGLISH\common\images\_MyInfo_Guild.him C:\\ijji\ENGLISH\common\images\_MyInfo_ItemBtn.him C:\\ijji\ENGLISH\common\images\_MyInfo_LevelGuageBar.him C:\\ijji\ENGLISH\common\images\_MyInfo_LevelGuageBg.him C:\\ijji\ENGLISH\common\images\_MyInfo_LevelGuageSide.him C:\\ijji\ENGLISH\common\images\_MyInfo_MyHomeBtn.him C:\\ijji\ENGLISH\common\images\_MyInfo_ViewProfileBtn.him C:\\ijji\ENGLISH\common\images\_MyInfoBg.him C:\\ijji\ENGLISH\common\images\_Notice.him C:\\ijji\ENGLISH\common\images\_NoticeIcon.him C:\\ijji\ENGLISH\common\images\_Player_Class_14.him C:\\ijji\ENGLISH\common\images\_Player_Class_16.him C:\\ijji\ENGLISH\common\images\_Player_Gem.him C:\\ijji\ENGLISH\common\images\_Player_Level_14.him C:\\ijji\ENGLISH\common\images\_Player_Level_16.him C:\\ijji\ENGLISH\common\images\_Player_Level_24.him C:\\ijji\ENGLISH\common\images\_Player_Level_32.him C:\\ijji\ENGLISH\common\images\_PlayNowBtn.him C:\\ijji\ENGLISH\common\images\_PlayNowBtn_HoverAni.him C:\\ijji\ENGLISH\common\images\_Popup_AcceptBtn.him C:\\ijji\ENGLISH\common\images\_Popup_AccuseBtn.him C:\\ijji\ENGLISH\common\images\_Popup_AccuseIcon.him C:\\ijji\ENGLISH\common\images\_Popup_AddFriendBtn.him C:\\ijji\ENGLISH\common\images\_Popup_AlbumBtn.him C:\\ijji\ENGLISH\common\images\_Popup_ApplyBtn.him C:\\ijji\ENGLISH\common\images\_Popup_BanishBtn.him C:\\ijji\ENGLISH\common\images\_Popup_BorderBottom.him C:\\ijji\ENGLISH\common\images\_Popup_BorderSide.him C:\\ijji\ENGLISH\common\images\_Popup_BorderTop.him C:\\ijji\ENGLISH\common\images\_Popup_BuyAvatarBtn.him C:\\ijji\ENGLISH\common\images\_Popup_CancelBtn.him C:\\ijji\ENGLISH\common\images\_Popup_CaptionIcon.him C:\\ijji\ENGLISH\common\images\_Popup_ChallengeBtn.him C:\\ijji\ENGLISH\common\images\_Popup_CheckBtn.him C:\\ijji\ENGLISH\common\images\_Popup_CornerBottom.him C:\\ijji\ENGLISH\common\images\_Popup_CornerTop.him C:\\ijji\ENGLISH\common\images\_Popup_DetailInfoBtn.him C:\\ijji\ENGLISH\common\images\_Popup_GembleWarning_MoreInfoBtn.him C:\\ijji\ENGLISH\common\images\_Popup_GembleWarning_OKBtn.him C:\\ijji\ENGLISH\common\images\_Popup_InviteBtn.him C:\\ijji\ENGLISH\common\images\_Popup_OKBtn.him C:\\ijji\ENGLISH\common\images\_Popup_ProgressBar.him C:\\ijji\ENGLISH\common\images\_Popup_ProgressBg.him C:\\ijji\ENGLISH\common\images\_Popup_ProgressSide.him C:\\ijji\ENGLISH\common\images\_Popup_RadioBtn.him C:\\ijji\ENGLISH\common\images\_Popup_RejectBtn.him C:\\ijji\ENGLISH\common\images\_Popup_ReportBtn.him C:\\ijji\ENGLISH\common\images\_Popup_ReportCancelBtn.him C:\\ijji\ENGLISH\common\images\_Popup_SendMemoBtn.him C:\\ijji\ENGLISH\common\images\_Popup_TabStatic.him C:\\ijji\ENGLISH\common\images\_PracticeBtn.him C:\\ijji\ENGLISH\common\images\_RecommendedGameBtn.him C:\\ijji\ENGLISH\common\images\_RefreshBtn.him C:\\ijji\ENGLISH\common\images\_RoomColumnSelectArrrow.him C:\\ijji\ENGLISH\common\images\_RoomCtrlBtn.him C:\\ijji\ENGLISH\common\images\_RoomCtrlBtn_2.him C:\\ijji\ENGLISH\common\images\_RoomImg_A.him C:\\ijji\ENGLISH\common\images\_RoomImg_B.him C:\\ijji\ENGLISH\common\images\_RoomImg_C.him C:\\ijji\ENGLISH\common\images\_RoomJoinBtn.him C:\\ijji\ENGLISH\common\images\_RoomKey.him C:\\ijji\ENGLISH\common\images\_RoomListCornerBottom.him C:\\ijji\ENGLISH\common\images\_RoomListCornerTop.him C:\\ijji\ENGLISH\common\images\_RoomState.him C:\\ijji\ENGLISH\common\images\_SearchRoomBtn.him C:\\ijji\ENGLISH\common\images\_ShowEmptyChnlBtn.him C:\\ijji\ENGLISH\common\images\_ShowEmptyRoomBtn.him C:\\ijji\ENGLISH\common\images\_ShowRoomNumOrderBtn.him C:\\ijji\ENGLISH\common\images\_Splash_Bg.him C:\\ijji\ENGLISH\common\images\_Splash_bg_small.him C:\\ijji\ENGLISH\common\images\_SplashWnd_CancelBtn.him C:\\ijji\ENGLISH\common\images\_SupRoomImg_A.him C:\\ijji\ENGLISH\common\images\_SupRoomImg_B.him C:\\ijji\ENGLISH\common\images\_SupRoomImg_C.him C:\\ijji\ENGLISH\common\images\_TabBtnAll.him C:\\ijji\ENGLISH\common\images\_TabBtnFriend.him C:\\ijji\ENGLISH\common\images\_TabBtnGuild.him C:\\ijji\ENGLISH\common\images\_TabBtnMyBuddy.him C:\\ijji\ENGLISH\common\images\_TabBtnPlayers.him C:\\ijji\ENGLISH\common\images\_TabCtrlLeftBorder.him C:\\ijji\ENGLISH\common\images\_TabCtrlRightBorder.him C:\\ijji\ENGLISH\common\images\_Table_LevelGuageBar.him C:\\ijji\ENGLISH\common\images\_TableImage_A.him C:\\ijji\ENGLISH\common\images\_TableImage_AA.him C:\\ijji\ENGLISH\common\images\_TooltipBtnExit.him C:\\ijji\ENGLISH\common\images\_TooltipCornerBottom.him C:\\ijji\ENGLISH\common\images\_TooltipCornerTop.him C:\\ijji\ENGLISH\common\images\_TooltipSelectArrow.him C:\\ijji\ENGLISH\common\images\_VScrollArrow.him C:\\ijji\ENGLISH\common\images\_VScrollPage.him C:\\ijji\ENGLISH\common\images\_VScrollThumb_Long.him C:\\ijji\ENGLISH\common\images\_VScrollThumb_Member.him C:\\ijji\ENGLISH\common\images\_VScrollThumb_Room.him C:\\ijji\ENGLISH\common\images\_VScrollThumb_Small.him

heres the Hijackthis log Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 3:29:51 PM, on 7/5/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16674) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\WLTRYSVC.EXE C:\WINDOWS\System32\bcmwltry.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe C:\Program Files\McAfee\Common Framework\FrameworkService.exe C:\Program Files\McAfee\VirusScan Enterprise\mcshield.exe C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe C:\WINDOWS\system32\Ati2evxx.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\system32\svchost.exe C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe C:\WINDOWS\system32\WLTRAY.exe C:\WINDOWS\stsystra.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\Google\Google Talk\googletalk.exe C:\Program Files\Microsoft IntelliPoint\ipoint.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Program Files\PowerISO\PWRISOVM.EXE C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE C:\Program Files\McAfee\Common Framework\UdaterUI.exe C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe C:\Program Files\Logitech\QuickCam\Quickcam.exe C:\Program Files\McAfee\Common Framework\McTray.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe C:\Program Files\DAEMON Tools\daemon.exe C:\Program Files\AIM6\aim6.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe C:\Program Files\Digital Line Detect\DLG.exe C:\Program Files\3M\PSNotes\psn.exe C:\PROGRA~1\3M\PSNotes\PSNGive.exe C:\Program Files\Common Files\AOL\Loader\aolload.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe C:\Program Files\AIM6\aolsoftware.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\WINDOWS\explorer.exe C:\WINDOWS\system32\notepad.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk-rel&channel=us&ibd=4061226 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://desktop.google.com/uninstall-feedback.html?hl=en O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll O4 - HKLM\..\Run: [broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe O4 - HKLM\..\Run: [sigmatelSysTrayApp] stsystra.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp O4 - HKLM\..\Run: [intelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe" O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE O4 - HKLM\..\Run: [shStatEXE] "C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\McAfee\Common Framework\UdaterUI.exe" /StartedFromRunKey O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe" O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [EasyLinkAdvisor] "C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe" /startup O4 - S-1-5-18 Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'SYSTEM') O4 - .DEFAULT Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'Default user') O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart16.exe O4 - Global Startup: Digital Line Detect.lnk = ? O4 - Global Startup: Post-it

I'm having some difficulty with the CFScript.txt file and the combofix, when I place the text file onto the combofix, i get an error saying that it cannot access the file because it is already in use.

I finished both the scans, Combofix ComboFix 08-07-04.2 - AlexDong 2008-07-05 1:10:58.2 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.1445 [GMT -4:00] Running from: C:\Documents and Settings\AlexDong\Desktop\ComboFix.exe * Resident AV is active . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\BM5b979e79.xml . ---- Previous Run ------- . C:\WINDOWS\BM5b979e79.txt C:\WINDOWS\system32\anxunexy.dll C:\WINDOWS\system32\bhgzzj.dll C:\WINDOWS\system32\gvhbafkd.dll C:\WINDOWS\system32\ncfdygyg.ini C:\WINDOWS\system32\pilrcons.ini C:\WINDOWS\system32\pordxrjp.dll C:\WINDOWS\system32\psuDKUvw.ini C:\WINDOWS\system32\psuDKUvw.ini2 C:\WINDOWS\system32\sbcfiqoc.dll C:\WINDOWS\system32\tdocwm.dll . ((((((((((((((((((((((((( Files Created from 2008-06-05 to 2008-07-05 ))))))))))))))))))))))))))))))) . 2008-07-05 00:28 . 2008-07-05 00:29 <DIR> d-------- C:\RecoveryCD 2008-07-04 23:58 . 2008-03-25 02:37 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl 2008-07-04 23:56 . 2008-07-04 23:58 <DIR> d-------- C:\Program Files\Java 2008-07-04 23:56 . 2008-07-04 23:56 <DIR> d-------- C:\Program Files\Common Files\Java 2008-07-04 16:41 . 2008-07-04 16:41 <DIR> d-------- C:\Program Files\Trend Micro 2008-07-04 16:41 . 2008-06-19 17:24 28,544 --a------ C:\WINDOWS\system32\drivers\pavboot.sys 2008-07-04 16:40 . 2008-07-04 16:40 <DIR> d-------- C:\Program Files\Panda Security 2008-07-04 16:35 . 2008-07-04 16:35 <DIR> d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-07-04 16:35 . 2008-07-04 16:35 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-07-04 16:35 . 2008-07-04 16:35 <DIR> d-------- C:\Documents and Settings\AlexDong\Application Data\Malwarebytes 2008-07-04 16:35 . 2008-06-28 14:21 34,296 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys 2008-07-04 16:35 . 2008-06-28 14:21 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-07-04 15:34 . 2008-07-04 15:35 <DIR> d-------- C:\Program Files\Spybot - Search & Destroy 2008-07-03 10:50 . 2006-09-11 10:56 526,184 --a------ C:\WINDOWS\system32\XceedCry.dll 2008-07-03 10:50 . 2006-12-21 14:18 497,496 --a------ C:\WINDOWS\system32\XceedZip.dll 2008-07-03 10:50 . 2003-05-14 21:07 389,120 --a------ C:\WINDOWS\system32\actskn43.ocx 2008-07-02 23:15 . 2008-07-02 23:15 1,972 --a------ C:\WINDOWS\system32\quvfuhea.dll 2008-07-02 22:12 . 2008-07-02 22:12 1,972 --a------ C:\WINDOWS\system32\fbfarypy.dll 2008-07-01 14:42 . 2008-07-01 14:42 1,972 --a------ C:\WINDOWS\system32\yrinapqx.dll 2008-07-01 00:28 . 2008-07-01 00:28 1,972 --a------ C:\WINDOWS\system32\vrjksxav.dll 2008-06-30 22:13 . 2008-06-30 22:13 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\PC Tools 2008-06-18 13:52 . 2008-06-18 13:52 161,096 --a------ C:\WINDOWS\system32\DivXCodecVersionChecker.exe 2008-06-11 07:18 . 2008-06-13 09:10 272,128 --------- C:\WINDOWS\system32\drivers\bthport.sys 2008-06-11 07:18 . 2008-06-13 09:10 272,128 --------- C:\WINDOWS\system32\dllcache\bthport.sys 2008-06-10 20:07 . 2008-06-10 20:07 3,596,288 --a------ C:\WINDOWS\system32\nsy138.tmp 2008-06-10 20:07 . 2008-06-10 20:07 524,288 --a------ C:\WINDOWS\system32\nsb139.tmp 2008-06-10 20:07 . 2008-06-10 20:07 4,816 --a------ C:\WINDOWS\system32\divxsm.tlb 2008-06-10 20:04 . 2008-06-10 20:04 1,044,480 --a------ C:\WINDOWS\system32\libdivx.dll 2008-06-10 20:04 . 2008-06-10 20:04 200,704 --a------ C:\WINDOWS\system32\ssldivx.dll . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-07-05 02:41 --------- d-----w C:\Program Files\Common Files\Symantec Shared 2008-07-05 02:41 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec 2008-07-04 23:21 --------- d-----w C:\Program Files\Warcraft III 2008-07-04 20:30 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2008-07-04 20:29 --------- d-----w C:\Program Files\Enigma Software Group 2008-07-04 02:00 --------- d-----w C:\Program Files\Common Files\Real 2008-07-04 01:55 --------- d-----w C:\Program Files\Common Files\Sonic Shared 2008-07-04 01:49 --------- d-----w C:\Program Files\DivX 2008-07-03 14:41 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP 2008-07-01 02:35 --------- d-----w C:\Program Files\LimeWire 2008-06-18 21:57 --------- d-----w C:\Documents and Settings\AlexDong\Application Data\dvdcss 2008-05-17 03:00 --------- d-----w C:\Program Files\Linksys EasyLink Advisor 2008-05-14 00:47 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help 2008-05-08 12:28 202,752 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys 2007-12-08 23:53 32 ----a-w C:\Documents and Settings\All Users\Application Data\ezsid.dat 2007-01-02 22:38 88 --sh--r C:\WINDOWS\system32\CAD8306DFB.sys 2007-01-02 22:38 2,828 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2006-11-12 06:48 157592] "Aim6"="C:\Program Files\AIM6\aim6.exe" [2008-01-03 12:15 50528] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 07:00 15360] "EasyLinkAdvisor"="C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe" [2007-03-15 18:16 454784] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Broadcom Wireless Manager UI"="C:\WINDOWS\system32\WLTRAY.exe" [2006-11-23 02:35 1392640] "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2006-03-08 20:48 761947] "ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 19:41 45056] "ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2006-03-20 18:34 86960] "googletalk"="C:\Program Files\Google\Google Talk\googletalk.exe" [2007-01-01 17:22 3739648] "IntelliPoint"="C:\Program Files\Microsoft IntelliPoint\ipoint.exe" [2006-11-21 18:09 842584] "GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 00:47 31016] "PWRISOVM.EXE"="C:\Program Files\PowerISO\PWRISOVM.EXE" [2007-08-06 20:05 200704] "ShStatEXE"="C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" [2006-11-30 09:50 112216] "McAfeeUpdaterUI"="C:\Program Files\McAfee\Common Framework\UdaterUI.exe" [2006-11-17 14:39 136768] "LogitechCommunicationsManager"="C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" [2007-07-25 17:02 563984] "LogitechQuickCamRibbon"="C:\Program Files\Logitech\QuickCam\Quickcam.exe" [2007-07-25 17:06 2027792] "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-01-10 16:27 385024] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-01-15 04:22 267048] "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe" [2008-03-25 04:28 144784] "SigmatelSysTrayApp"="stsystra.exe" [2006-03-25 01:30 282624 C:\WINDOWS\stsystra.exe] "Tweak UI"="TWEAKUI.CPL" [2003-03-25 06:49 106544 C:\WINDOWS\system32\tweakui.cpl] C:\Documents and Settings\AlexDong\Start Menu\Programs\Startup\ OneNote 2007 Screen Clipper and Launcher.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 20:24:54 98632] C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ AutoCAD Startup Accelerator.lnk - C:\Program Files\Common Files\Autodesk Shared\acstart16.exe [2006-09-23 09:21:54 10872] Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe [2006-12-26 13:32:26 24576] Post-itr Software Notes.lnk - C:\Program Files\3M\PSNotes\psn.exe [2003-10-10 15:53:20 675840] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "msacm.iac2"= C:\PROGRA~1\ACEMEG~1\SystemS\Intel\iac25_32.ax "msacm.sl_anet"= C:\PROGRA~1\ACEMEG~1\SystemS\sl_anet.acm "msacm.msaudio1"= C:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\msaud32.acm [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusDisableNotify"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "C:\\Program Files\\Google\\Google Talk\\googletalk.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "C:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"= "C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"= "C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"= "C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"= "C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"= "C:\\Program Files\\McAfee\\Common Framework\\FrameworkService.exe"= "C:\\Program Files\\BitTornado\\btdownloadgui.exe"= "C:\\Program Files\\DC++\\DCPlusPlus.exe"= "C:\\Program Files\\AIM6\\aim6.exe"= "C:\\ijji\\ENGLISH\\u_gbound.exe"= "C:\\Program Files\\LimeWire\\LimeWire.exe"= "C:\\Program Files\\Steam\\steamapps\\azndevourer2417@yahoo.com\\counter-strike\\hl.exe"= "C:\\ijji\\ENGLISH\\u_skid.exe"= "C:\\Program Files\\iTunes\\iTunes.exe"= R0 pavboot;pavboot;C:\WINDOWS\system32\drivers\pavboot.sys [2008-06-19 17:24] S3 fd_dbus;FutureDial USB Composite Device driver (WDM);C:\WINDOWS\system32\DRIVERS\fd_dbus.sys [2005-01-17 21:46] S3 fd_dmdfl;FutureDial USB Modem Filter;C:\WINDOWS\system32\DRIVERS\fd_dmdfl.sys [2005-01-17 21:46] S3 fd_dmdm;FutureDial USB Modem Drivers;C:\WINDOWS\system32\DRIVERS\fd_dmdm.sys [2005-01-17 21:46] S3 lgatserd;LG CDMA USB Modem Diagnostic Serial Port Drivers (WDM);C:\WINDOWS\system32\DRIVERS\lgatserd.sys [2005-01-17 21:46] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4b2ed31e-c15e-11dc-b62d-0019b94d2f87}] \Shell\AutoRun\command - G:\LaunchU3.exe -a [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8e1da9f3-f19c-11db-b5a9-0019b94d2f87}] \Shell\AutoRun\command - G:\USBNB.exe . Contents of the 'Scheduled Tasks' folder "2008-07-03 23:15:04 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe "2008-06-11 09:00:01 C:\WINDOWS\Tasks\SpyHunter Scanner.job" - C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter3.exe . - - - - ORPHANS REMOVED - - - - HKCU-Run-msnmsgr - C:\Program Files\MSN Messenger\msnmsgr.exe HKCU-Run-Uniblue RegistryBooster 2 - C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe HKCU-Run-Steam - (no file) HKLM-Run-ISUSPM Startup - C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe HKLM-Run-ISUSPM - C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe HKLM-Run-Spyhunter Security Suite - C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter3.exe Notify-urqQgETK - urqQgETK.dll ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-07-05 01:17:12 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... C:\WINDOWS\system32\Postin__.FOT 1409 bytes scan completed successfully hidden files: 1 ************************************************************************** . ------------------------ Other Running Processes ------------------------ . C:\WINDOWS\system32\ati2evxx.exe C:\WINDOWS\system32\WLTRYSVC.EXE C:\WINDOWS\system32\BCMWLTRY.EXE C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe C:\Program Files\McAfee\Common Framework\FrameworkService.exe C:\WINDOWS\system32\ati2evxx.exe C:\Program Files\McAfee\VirusScan Enterprise\mcshield.exe C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\McAfee\Common Framework\naPrdMgr.exe C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe C:\Program Files\McAfee\Common Framework\Mctray.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Common Files\AOL\Loader\aolload.exe C:\Program Files\3M\PSNotes\PSNGive.exe C:\Program Files\Common Files\LogiShrd\LQCVFX\COCIManager.exe C:\Program Files\AIM6\aolsoftware.exe . ************************************************************************** . Completion time: 2008-07-05 1:21:59 - machine was rebooted [AlexDong] ComboFix-quarantined-files.txt 2008-07-05 05:21:55 Pre-Run: 42,315,546,624 bytes free Post-Run: 42,349,211,648 bytes free 205 --- E O F --- 2008-06-21 01:04:01 HijackThis Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 1:23:00 AM, on 7/5/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16674) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\WLTRYSVC.EXE C:\WINDOWS\System32\bcmwltry.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe C:\Program Files\McAfee\Common Framework\FrameworkService.exe C:\WINDOWS\system32\Ati2evxx.exe C:\Program Files\McAfee\VirusScan Enterprise\mcshield.exe C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\system32\svchost.exe C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\system32\WLTRAY.exe C:\WINDOWS\stsystra.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\Google\Google Talk\googletalk.exe C:\Program Files\Microsoft IntelliPoint\ipoint.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Program Files\PowerISO\PWRISOVM.EXE C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE C:\Program Files\McAfee\Common Framework\UdaterUI.exe C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\McAfee\Common Framework\McTray.exe C:\Program Files\Logitech\QuickCam\Quickcam.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe C:\Program Files\DAEMON Tools\daemon.exe C:\Program Files\AIM6\aim6.exe C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Common Files\AOL\Loader\aolload.exe C:\Program Files\Digital Line Detect\DLG.exe C:\Program Files\3M\PSNotes\psn.exe C:\PROGRA~1\3M\PSNotes\PSNGive.exe C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe C:\Program Files\AIM6\aolsoftware.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\WINDOWS\explorer.exe C:\WINDOWS\system32\notepad.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk-rel&channel=us&ibd=4061226 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://desktop.google.com/uninstall-feedback.html?hl=en O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll O3 - Toolbar: ZoneAlarm Spy Blocker - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL (file missing) O4 - HKLM\..\Run: [broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe O4 - HKLM\..\Run: [sigmatelSysTrayApp] stsystra.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp O4 - HKLM\..\Run: [intelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe" O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE O4 - HKLM\..\Run: [shStatEXE] "C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\McAfee\Common Framework\UdaterUI.exe" /StartedFromRunKey O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe" O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [EasyLinkAdvisor] "C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe" /startup O4 - S-1-5-18 Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'SYSTEM') O4 - .DEFAULT Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'Default user') O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart16.exe O4 - Global Startup: Digital Line Detect.lnk = ? O4 - Global Startup: Post-it

Nevermind I uninstalled it, I feel stupid And still working on the rest

For my symantec file, it only contains the Live Update folder within it, I had uninstalled it long ago and when I tried to Uninstall it now it didnt work. Any suggestions? Thanks

Hi, I'm new to this forum and I have been having trouble with accessing some sites. I followed the Pre-HJT post and and scanned everything. After scanning the MBAM, the sites previously not working have began to work again, I just wanted to post the logs to see what else I can do about the rest of the things found on Activescan. Here are the logs: From Active Scan ;******************************************************************************* ******************************************************************************** * ******************* ANALYSIS: 2008-07-04 17:44:03 PROTECTIONS: 1 MALWARE: 11 SUSPECTS: 1 ;******************************************************************************* ******************************************************************************** * ******************* PROTECTIONS Description Version Active Updated ;=============================================================================== ================================================================================ = =================== McAfee VirusScan Enterprise 8.5.0.781 No Yes ;=============================================================================== ================================================================================ = =================== MALWARE Id Description Type Active Severity Disinfectable Disinfected Location ;=============================================================================== ================================================================================ = =================== 00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\AlexDong\Cookies\alexdong@atdmt[1].txt 00167642 Cookie/Com.com TrackingCookie No 0 Yes No C:\Documents and Settings\AlexDong\Cookies\alexdong@com[1].txt 00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\AlexDong\Cookies\alexdong@advertising[2].txt 00286738 Cookie/Cgi-bin TrackingCookie No 0 Yes No C:\Documents and Settings\AlexDong\Cookies\alexdong@www1.addfreestats[1].txt 02235691 Generic Malware Virus/Trojan No 0 Yes No C:\WINDOWS\Downloaded Program Files\HGStart9USA.exe 03184554 Generic Trojan Virus/Trojan No 0 Yes No C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP574\A0109733.dll 03194486 Trj/Monder.T Virus/Trojan No 0 Yes No C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP574\A0109735.dll 03194486 Trj/Monder.T Virus/Trojan No 0 Yes No C:\Documents and Settings\AlexDong\Local Settings\Temporary Internet Files\Content.IE5\0726U0JK\kb671231[1] 03194486 Trj/Monder.T Virus/Trojan No 0 Yes No C:\WINDOWS\system32\gvhbafkd.dll 03204797 Adware/IntCodec Adware No 0 Yes No C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP562\A0105129.dll 03204986 Spyware/Virtumonde Spyware No 1 Yes No C:\Documents and Settings\AlexDong\Local Settings\Temporary Internet Files\Content.IE5\SGQBO6ZZ\kb767887[1] 03204986 Spyware/Virtumonde Spyware No 1 Yes No C:\WINDOWS\system32\anxunexy.dll 03205080 Spyware/Virtumonde Spyware No 1 Yes No C:\WINDOWS\system32\bhgzzj.dll 03205080 Spyware/Virtumonde Spyware No 1 Yes No C:\WINDOWS\system32\tdocwm.dll 03205080 Spyware/Virtumonde Spyware No 1 Yes No C:\Documents and Settings\AlexDong\Local Settings\Temporary Internet Files\Content.IE5\P9L7GPGJ\kb767887[1] 03205080 Spyware/Virtumonde Spyware No 1 Yes No C:\WINDOWS\system32\pordxrjp.dll 03205080 Spyware/Virtumonde Spyware No 1 Yes No C:\WINDOWS\system32\sbcfiqoc.dll 03205136 Spyware/Virtumonde Spyware No 1 Yes No C:\Documents and Settings\AlexDong\Local Settings\Temporary Internet Files\Content.IE5\SGQBO6ZZ\kb456456[1] ;=============================================================================== ================================================================================ = =================== SUSPECTS Sent Location $ ;=============================================================================== ================================================================================ = =================== No C:\Documents and Settings\AlexDong\Local Settings\Temp\Div12D.tmp\DivXInstaller.exe[