antivirussuite removed?

De3rcr · July 7, 2010

I had Antivirus Suite and ran mbam which removed what it could the I ran an eset online scan and it found some more bad stuff, so then I downloaded DrWeb Cureit and it came up clean. I have attached the first mbam scan and the eset scan other logs are here.

first mbam log has a date of 04-24 becauce the date on the computer was set wrong

Gmer kept freezing let me know if it needs to be run

recent mbam scan

Malwarebytes' Anti-Malware 1.46

www.malwarebytes.org

Database version: 4288

Windows 5.1.2600 Service Pack 3

Internet Explorer 8.0.6001.18702

7/7/2010 10:15:28 AM

mbam-log-2010-07-07 (10-15-28).txt

Scan type: Quick scan

Objects scanned: 115301

Time elapsed: 13 minute(s), 24 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

(No malicious items detected)

DDS

DDS (Ver_10-03-17.01) - NTFSx86

Run by Ken at 10:24:32.01 on Wed 07/07/2010

Internet Explorer: 8.0.6001.18702

Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.510.193 [GMT -4:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch

svchost.exe

C:\WINDOWS\System32\svchost.exe -k netsvcs

svchost.exe

C:\Program Files\AVG\AVG9\avgchsvx.exe

C:\Program Files\AVG\AVG9\avgrsx.exe

C:\Program Files\AVG\AVG9\avgcsrvx.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\PROGRA~1\AVG\AVG9\avgtray.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Messenger\msmsgs.exe

svchost.exe

C:\Program Files\AVG\AVG9\avgwdsvc.exe

C:\Program Files\AVG\AVG9\avgemc.exe

C:\Program Files\AVG\AVG9\avgnsx.exe

C:\Program Files\AVG\AVG9\avgcsrvx.exe

C:\WINDOWS\System32\svchost.exe -k HTTPFilter

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Windows Defender\MSASCui.exe

C:\Program Files\Windows Defender\MsMpEng.exe

C:\Documents and Settings\Ken\Desktop\dds.scr

C:\Program Files\AVG\AVG9\avgcmgr.exe

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.yahoo.com/

uInternet Settings,ProxyServer = http=127.0.0.1:5577

uInternet Settings,ProxyOverride = <local>

BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg9\avgssie.dll

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll

BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

TB: Easy-WebPrint: {327c2873-e90d-4c37-aa9d-10ac9baba46c} - c:\program files\canon\easy-webprint\Toolband.dll

uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe

uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background

mRun: [AVG9_TRAY] c:\progra~1\avg\avg9\avgtray.exe

mRun: [Windows Defender] "c:\program files\windows defender\MSASCui.exe" -hide

mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

mRun: [sunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"

mRunOnce: [uninstall Adobe Download Manager] "c:\windows\system32\rundll32.exe" "c:\program files\nos\bin\getPlus_Helper.dll",Uninstall /IE2883E8F-472F-4fb0-9522-AC9BF37916A7 /Get1noarp

dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t

mPolicies-system: EnableLUA = 0 (0x0)

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe

DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1266420503578

DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg9\avgpp.dll

Notify: avgrsstarter - avgrsstx.dll

AppInit_DLLs: aIqYReoGq.dll

SEH: Microsoft AntiMalware ShellExecuteHook: {091eb208-39dd-417d-a5dd-7e2c2d8fb9cb} - c:\progra~1\window~4\MpShHook.dll

============= SERVICES / DRIVERS ===============

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2010-2-17 216200]

R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2010-2-17 29584]

R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2010-2-17 242896]

R2 avg9emc;AVG Free E-mail Scanner;c:\program files\avg\avg9\avgemc.exe [2000-1-1 916760]

R2 avg9wd;AVG Free WatchDog;c:\program files\avg\avg9\avgwdsvc.exe [2000-1-1 308064]

R2 WinDefend;Windows Defender;c:\program files\windows defender\MsMpEng.exe [2006-11-3 13592]

R3 FastNIC;SMC EZ Card 10/100 (SMC1244TX V2);c:\windows\system32\drivers\FastNIC.sys [2002-5-21 38528]

RUnknown DwProt;DwProt; [x]

=============== Created Last 30 ================

==================== Find3M ====================

2010-05-06 10:41:53 916480 ----a-w- c:\windows\system32\wininet.dll

2010-05-02 05:22:50 1851264 ----a-w- c:\windows\system32\win32k.sys

2010-04-20 05:30:08 285696 ----a-w- c:\windows\system32\atmfd.dll

============= FINISH: 10:25:17.51 ===============

Attach.txt

mbam_log_2000_04_24__23_01_28_.txt

eset.txt

Elise · July 7, 2010

Hello ,

And My name is Elise and I'll be glad to help you with your computer problems.

I will be working on your malware issues, this may or may not solve other issues you may have with your machine.

Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.

The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen.
Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic.
The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.
Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.

You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications.

-----------------------------------------------------------

COMBOFIX

---------------

Please download ComboFix from one of these locations:

Bleepingcomputer
ForoSpyware

Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. (Click on this link to see a list of programs that should be disabled. The list is not all inclusive.)
Double click on Combofix.exe and follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, or if you are running Vista, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.

De3rcr · July 7, 2010

Hi, thought eset got rid of those. Here is the combofix log

ComboFix 10-07-06.05 - Ken 07/07/2010 16:27:03.1.1 - x86

Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.510.218 [GMT -4:00]

Running from: c:\documents and settings\Ken\Desktop\ComboFix.exe

AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\windows\BSVmbhRme.dll

c:\windows\djgaXvgb.dll

c:\windows\dyeIO.dll

c:\windows\EcmNWkc.exe

c:\windows\FMbGoXEXN.dll

c:\windows\HUTpdja.dll

c:\windows\kgTScJbKt.dll

c:\windows\KWmPMfsl.exe

c:\windows\LbdTljiq.exe

c:\windows\mTafKqlX.exe

c:\windows\onELuPqq.exe

c:\windows\pwcQsmyGp.dll

c:\windows\RicuT.exe

c:\windows\system32\drivers\aMiOYX.dll

c:\windows\system32\drivers\AUsXbiu.exe

c:\windows\system32\drivers\DfydbaW.exe

c:\windows\system32\drivers\dXBBTaNg.exe

c:\windows\system32\drivers\eCiLllLR.dll

c:\windows\system32\drivers\fMbcsmEj.exe

c:\windows\system32\drivers\gTeJpKNSX.exe

c:\windows\system32\drivers\HerCOLj.dll

c:\windows\system32\drivers\HlysB.dll

c:\windows\system32\drivers\JakMGFmNJ.exe

c:\windows\system32\drivers\jEHRNrWv.exe

c:\windows\system32\drivers\JJsqDmaH.dll

c:\windows\system32\drivers\LhMhBGIRU.dll

c:\windows\system32\drivers\lQIpXQo.exe

c:\windows\system32\drivers\MOQQag.exe

c:\windows\system32\drivers\NslVBIpE.exe

c:\windows\system32\drivers\osyFWmDvX.dll

c:\windows\system32\drivers\qidSQPar.exe

c:\windows\system32\drivers\tvHkPkONn.exe

c:\windows\system32\drivers\vbjtm.exe

c:\windows\system32\drivers\VgpdqjDMk.exe

c:\windows\system32\drivers\WRmoOQV.dll

c:\windows\system32\emqjb.dll

c:\windows\system32\HcWWKiiA.dll

c:\windows\system32\HYRLD.exe

c:\windows\system32\IweJwGi.exe

c:\windows\system32\mABOncOV.exe

c:\windows\system32\nhHEDOtw.dll

c:\windows\system32\SmyTimKJ.exe

c:\windows\system32\SOtoQJ.dll

c:\windows\system32\tvUNkxXov.dll

c:\windows\system32\wYilDUfB.exe

c:\windows\uPlDhKQ.exe

c:\windows\vmnFXU.exe

c:\windows\wNsjFc.dll

c:\windows\xpfoao.exe

c:\windows\ygGIlgPPW.exe

.

((((((((((((((((((((((((( Files Created from 2010-06-07 to 2010-07-07 )))))))))))))))))))))))))))))))

.

2010-07-07 05:55 . 2010-07-07 05:55 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\PCHealth

2010-07-06 17:53 . 2010-07-06 17:53 -------- d-----w- c:\documents and settings\Ken\DoctorWeb

2010-07-06 17:51 . 2010-05-21 18:14 221568 ------w- c:\windows\system32\MpSigStub.exe

2010-07-06 17:32 . 2010-07-06 17:32 -------- d-----w- c:\program files\Common Files\Java

2010-07-06 17:32 . 2010-07-06 17:32 503808 ----a-w- c:\documents and settings\Ken\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-57024a4e-n\msvcp71.dll

2010-07-06 17:32 . 2010-07-06 17:32 499712 ----a-w- c:\documents and settings\Ken\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-57024a4e-n\jmc.dll

2010-07-06 17:32 . 2010-07-06 17:32 348160 ----a-w- c:\documents and settings\Ken\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-57024a4e-n\msvcr71.dll

2010-07-06 17:32 . 2010-07-06 17:32 61440 ----a-w- c:\documents and settings\Ken\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-443a75f1-n\decora-sse.dll

2010-07-06 17:32 . 2010-07-06 17:32 12800 ----a-w- c:\documents and settings\Ken\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-443a75f1-n\decora-d3d.dll

2010-07-06 17:31 . 2010-07-06 17:31 411368 ----a-w- c:\windows\system32\deployJava1.dll

2010-07-06 17:31 . 2010-07-06 17:31 -------- d-----w- c:\program files\Java

2010-07-06 16:21 . 2010-07-06 16:21 -------- d-----w- c:\program files\ESET

2010-07-06 15:47 . 2010-05-06 10:41 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2010-05-06 10:41 . 2006-02-28 12:00 916480 ----a-w- c:\windows\system32\wininet.dll

2010-05-02 05:22 . 2006-02-28 12:00 1851264 ----a-w- c:\windows\system32\win32k.sys

2010-04-29 19:39 . 2000-04-25 02:42 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2010-04-29 19:39 . 2000-04-25 02:42 20952 ----a-w- c:\windows\system32\drivers\mbam.sys

2010-04-20 05:30 . 2006-02-28 12:00 285696 ----a-w- c:\windows\system32\atmfd.dll

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"AVG9_TRAY"="c:\progra~1\AVG\AVG9\avgtray.exe" [2000-03-22 2065248]

"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2006-11-04 866584]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-03-13 39264]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]

2000-01-01 13:25 12464 ----a-w- c:\windows\system32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center]

"AntiVirusOverride"=dword:00000001

"FirewallOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]

"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"c:\\Program Files\\AVG\\AVG9\\avgemc.exe"=

"c:\\Program Files\\AVG\\AVG9\\avgupd.exe"=

"c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2/17/2010 10:28 AM 216200]

R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2/17/2010 10:28 AM 242896]

R2 avg9emc;AVG Free E-mail Scanner;c:\program files\AVG\AVG9\avgemc.exe [1/1/2000 9:24 AM 916760]

R2 avg9wd;AVG Free WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [1/1/2000 9:25 AM 308064]

R2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [11/3/2006 8:19 PM 13592]

R3 FastNIC;SMC EZ Card 10/100 (SMC1244TX V2);c:\windows\system32\drivers\FastNIC.sys [5/21/2002 1:40 PM 38528]

.

Contents of the 'Scheduled Tasks' folder

2010-07-07 c:\windows\Tasks\MP Scheduled Scan.job

- c:\program files\Windows Defender\MpCmdRun.exe [2006-11-04 00:20]

2010-07-07 c:\windows\Tasks\User_Feed_Synchronization-{22212A1E-4DBA-4CC4-BE97-36E5587E8313}.job

- c:\windows\system32\msfeedssync.exe [2009-03-08 09:31]

.

------- Supplementary Scan -------

.

uStart Page = hxxp://www.yahoo.com/

uInternet Settings,ProxyServer = http=127.0.0.1:5577

uInternet Settings,ProxyOverride = <local>

.

- - - - ORPHANS REMOVED - - - -

Toolbar-Locked - (no file)

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2010-07-07 16:33

Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully

hidden files: 0

**************************************************************************

.

--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

Completion time: 2010-07-07 16:37:14

ComboFix-quarantined-files.txt 2010-07-07 20:37

Pre-Run: 14,990,708,736 bytes free

Post-Run: 14,958,600,192 bytes free

WindowsXP-KB310994-SP2-Home-BootDisk-ENU.exe

[boot loader]

timeout=2

default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS

[operating systems]

c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect

- - End Of File - - EFDA5DC0C0E22386C94AE13F39C3B06B

Elise · July 8, 2010

Hello there,

Please let me know what problems you have still left after running the following script:

CF-SCRIPT

-------------

We need to execute a CF-script.

Close any open browsers.
Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
Click Start > Run and in the box that opens type notepad and press enter. Copy/paste the text in the codebox below into it:

DDS::
uInternet Settings,ProxyServer = http=127.0.0.1:5577
uInternet Settings,ProxyOverride = <local>

Save this as CFScript.txt, in the same location as ComboFix.exe

Refering to the picture above, drag CFScript into ComboFix.exe

When finished, it shall produce a log for you at C:\ComboFix.txt which I will require in your next reply.

De3rcr · July 8, 2010

Hi, Elise

Does combofix reset the default broswer? When I started IE it said it was not the default broswer, I chose yes to set it as the default

Combofix log

ComboFix 10-07-06.05 - Ken 07/08/2010 9:28.2.1 - x86

Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.510.224 [GMT -4:00]

Running from: c:\documents and settings\Ken\Desktop\ComboFix.exe

Command switches used :: c:\documents and settings\Ken\Desktop\CFScript.txt

AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

.

((((((((((((((((((((((((( Files Created from 2010-06-08 to 2010-07-08 )))))))))))))))))))))))))))))))