Page 1 of 3 123 LastLast
Results 1 to 10 of 22
  1. #1
    Member stokie's Avatar
    Join Date
    Apr 2005
    Posts
    74
    Points
    3

    Default submission as directed

    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 09:48:12, on 31/07/2011
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Windows Defender\MsMpEng.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Program Files\Logitech\SetPointP\SetPoint.exe
    C:\WINDOWS\system\HsMgr.exe
    C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
    C:\Program Files\ASUS Xonar DS Audio\Customapp\Program\ASUSAUDIOCENTER.EXE
    C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
    C:\Program Files\ASUS Xonar DS Audio\Customapp\Program\MXMon.exe
    C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
    C:\Program Files\Windows Media Player\WMPNSCFG.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\Microsoft LifeCam\MSCamS32.exe
    C:\Program Files\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe
    C:\Program Files\CDBurnerXP\NMSAccessU.exe
    C:\Program Files\Norton PC Checkup\Engine\2.0.2.543\SymcPCCULaunchSvc.exe
    C:\Program Files\Norton PC Checkup\Engine\2.0.2.543\ccSvcHst.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
    C:\Program Files\Norton PC Checkup\Engine\2.0.2.543\ccSvcHst.exe
    C:\Program Files\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    C:\Program Files\Trend Micro\HijackThis\HiJackThis.exe
    C:\WINDOWS\System32\dllhost.exe
    C:\WINDOWS\System32\dllhost.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, Free Online News, Sport, Music, Movies, Money and Cars from MSN UK
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
    O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\18.6.0.29\coIEPlg.dll
    O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\18.6.0.29\IPS\IPSBHO.DLL
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\18.6.0.29\coIEPlg.dll
    O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
    O4 - HKLM\..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
    O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
    O4 - HKLM\..\Run: [Cmaudio8788] RunDll32 cmicnfgp.cpl,CMICtrlWnd
    O4 - HKLM\..\Run: [Cmaudio8788GX] C:\WINDOWS\system\HsMgr.exe Envoke
    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    O4 - HKLM\..\Run: [WinFastDTV] C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
    O4 - HKLM\..\Run: [WinFast Schedule] C:\Program Files\WinFast\WFDTV\WFWIZ.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
    O8 - Extra context menu item: Free YouTube Download - C:\Documents and Settings\DAD\Application Data\DVDVideoSoftIEHelpers\freeyoutubedownload.htm
    O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\Microsoft Office\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanage...ex-2.2.5.0.cab
    O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} (Creative Software AutoUpdate Support Package 2) - http://ccfiles.creative.com/Web/soft...3/CTPIDPDE.cab
    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} - http://ccfiles.creative.com/Web/soft...5116/CTPID.cab
    O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
    O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
    O23 - Service: ArcSoft Connect Daemon (ACDaemon) - - (no file)
    O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
    O23 - Service: Adobe Active File Monitor V8 (AdobeActiveFileMonitor8.0) - Adobe Systems Incorporated - C:\Program Files\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
    O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
    O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
    O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe
    O23 - Service: NMSAccess - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
    O23 - Service: Norton PC Checkup Application Launcher - Symantec Corporation - C:\Program Files\Norton PC Checkup\Engine\2.0.2.543\SymcPCCULaunchSvc.exe
    O23 - Service: NPVR Recording Service - Unknown owner - C:\Program Files\NPVR\NRecord.exe (file missing)
    O23 - Service: PACSPTISVR - Unknown owner - (no file)
    O23 - Service: Common Client Job Manager Service (PCCUJobMgr) - Symantec Corporation - C:\Program Files\Norton PC Checkup\Engine\2.0.2.543\ccSvcHst.exe
    O23 - Service: SonicStage Back-End Service - Analog Devices, Inc. - (no file)
    O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

    --
    End of file - 10983 bytes
    Malwarebytes' Anti-Malware 1.46
    Malwarebytes : Free anti-malware, anti-virus and spyware removal download

    Database version: 4421

    Windows 5.1.2600 Service Pack 3
    Internet Explorer 8.0.6001.18702

    19/08/2010 20:09:13
    mbam-log-2010-08-19 (20-09-13).txt

    Scan type: Quick scan
    Objects scanned: 1
    Time elapsed: 8 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    (No malicious items detected)

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    (No malicious items detected)
    SUPERAntiSpyware Scan Log
    SUPERAntiSpyware.com | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!

    Generated 12/31/2009 at 07:18 PM

    Application Version : 4.32.1000

    Core Rules Database Version : 4432
    Trace Rules Database Version: 2258

    Scan type : Quick Scan
    Total Scan Time : 00:15:50

    Memory items scanned : 593
    Memory threats detected : 0
    Registry items scanned : 538
    Registry threats detected : 0
    File items scanned : 7106
    File threats detected : 0

  2. #2
    Member Spyware Fighter
    Join Date
    Jun 2010
    Location
    Bement,Ill USA
    Posts
    1,340
    Points
    146

    Default

    Hello and welcome to Help2Go

    We apologize for the delay in responding to your request for help. Here at Help2Go we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

    Please take note:

    1. If you have since resolved the original problem you were having, we would appreciate you letting us know.
    2. If you are unable to create a log because your computer cannot start up successfully please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system.
      • If you are unsure about any of these characteristics just post what you can and we will guide you.
    3. Please tell us if you have your original Windows CD/DVD available.
    4. If you are unable to perform the steps we have recommended please try one more time and if unsuccessful alert us of such and we will design an alternate means of obtaining the necessary information.
    5. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.
    6. Upon completing the steps below another staff member will review your topic an do their best to resolve your issues.
    7. If you have already posted a DDS log, please do so again, as your situation may have changed.
    8. Use the 'Add Reply' and add the new log to this thread.


    We need to see some information about what is happening in your machine. Please perform the following scan again:

    • Download DDS by sUBs from one of the following links if you no longer have it available. Save it to your desktop.
    • Double click on the DDS icon, allow it to run.
    • A small box will open, with an explanation about the tool. No input is needed, the scan is running.
    • Notepad will open with the results.
    • Follow the instructions that pop up for posting the results.
    • Close the program window, and delete the program from your desktop.
    Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.

    Information on A/V control HERE


    We also need a new log from the GMER anti-rootkit Scanner.

    Please note that if you are running a 64-bit version of Windows you will not be able to run GMER and you may skip this step. Then proceed to run aswMbr.exe as noted below.

    Please first disable any CD emulation programs using the steps found in this topic:

    Then create another GMER log and post it as an attachment to the reply where you post your new DDS log. Instructions on how to properly create a GMER log can be found here:


    Note:
    If you are unable to run a Gmer scan due the fact you are running a 64bit machine please run the following tool and post its log.

    Please download aswMBR ( 511KB ) to your desktop.
    • Double click the aswMBR.exe icon to run it
    • Click the Scan button to start the scan
    • On completion of the scan, click the save log button, save it to your desktop and post it in your next reply.




    Thanks and again sorry for the delay.
    " Extinguishing Malware from the world"

    The Spware Help forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.
    HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
    Thanks-




  3. #3
    Member stokie's Avatar
    Join Date
    Apr 2005
    Posts
    74
    Points
    3

    Default

    Hello and thanks for your reply.
    Here are the logs as requested -
    .
    DDS (Ver_2011-06-23.01) - NTFSx86
    Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_23
    Run by DAD at 9:45:21 on 2011-08-01
    Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1271.366 [GMT 1:00]
    .
    AV: Norton Internet Security *Disabled/Updated* {E10A9785-9598-4754-B552-92431C1C35F8}
    FW: Norton Internet Security *Enabled*
    .
    ============== Running Processes ===============
    .
    C:\WINDOWS\system32\svchost -k DcomLaunch
    svchost.exe
    C:\Program Files\Windows Defender\MsMpEng.exe
    C:\WINDOWS\System32\svchost.exe -k netsvcs
    C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
    svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Program Files\Logitech\SetPointP\SetPoint.exe
    C:\WINDOWS\system\HsMgr.exe
    C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\ASUS Xonar DS Audio\Customapp\Program\ASUSAUDIOCENTER.EXE
    C:\Program Files\Windows Media Player\WMPNSCFG.exe
    C:\Program Files\ASUS Xonar DS Audio\Customapp\Program\MXMon.exe
    C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
    C:\Program Files\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\Microsoft LifeCam\MSCamS32.exe
    C:\Program Files\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe
    C:\Program Files\CDBurnerXP\NMSAccessU.exe
    C:\Program Files\Norton PC Checkup\Engine\2.0.2.543\SymcPCCULaunchSvc.exe
    C:\Program Files\Norton PC Checkup\Engine\2.0.2.543\ccSvcHst.exe
    svchost.exe
    C:\WINDOWS\system32\svchost.exe -k imgsvc
    C:\Program Files\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe
    C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
    C:\WINDOWS\System32\vssvc.exe
    C:\Program Files\Norton PC Checkup\Engine\2.0.2.543\ccSvcHst.exe
    C:\WINDOWS\System32\svchost.exe -k HTTPFilter
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Mozilla Firefox\plugin-container.exe
    C:\Program Files\Brownie\brstswnd.exe
    C:\WINDOWS\system32\wscntfy.exe
    .
    ============== Pseudo HJT Report ===============
    .
    uSearch Page = hxxp://www.google.com
    uStart Page = hxxp://www.google.co.uk/
    uDefault_Search_URL = hxxp://www.google.com/ie
    uInternet Settings,ProxyOverride = *.local
    uSearchAssistant = hxxp://www.google.com/ie
    uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
    BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
    BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll
    BHO: Symantec NCO BHO: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - c:\program files\norton internet security\engine\18.6.0.29\coIEPlg.dll
    BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\program files\norton internet security\engine\18.6.0.29\ips\IPSBHO.DLL
    BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
    BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
    BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
    BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll
    BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll
    TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - c:\program files\norton internet security\engine\18.6.0.29\coIEPlg.dll
    uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
    uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
    mRun: [Windows Defender] "c:\program files\windows defender\MSASCui.exe" -hide
    mRun: [EvtMgr6] c:\program files\logitech\setpointp\SetPoint.exe /launchGaming
    mRun: [LifeCam] "c:\program files\microsoft lifecam\LifeExp.exe"
    mRun: [Cmaudio8788] RunDll32 cmicnfgp.cpl,CMICtrlWnd
    mRun: [Cmaudio8788GX] c:\windows\system\HsMgr.exe Envoke
    mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
    dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
    dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t
    dRunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe
    IE: E&xport to Microsoft Excel
    IE: Free YouTube Download - c:\documents and settings\dad\application data\dvdvideosoftiehelpers\freeyoutubedownload.htm
    IE: Send to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie_ctx.htm
    IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
    IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\microsoft office\office11\REFIEBAR.DLL
    DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} - hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.0.cab
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
    DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} - hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
    DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} - hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15116/CTPID.cab
    Handler: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - c:\program files\belarc\advisor\system\BAVoilaX.dll
    Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
    Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.dll
    Notify: LBTWlgn - c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll
    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
    SEH: Microsoft AntiMalware ShellExecuteHook: {091eb208-39dd-417d-a5dd-7e2c2d8fb9cb} - c:\progra~1\wifd1f~1\MpShHook.dll
    SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
    .
    ================= FIREFOX ===================
    .
    FF - ProfilePath - c:\documents and settings\dad\application data\mozilla\firefox\profiles\43j3ymf3.default\
    FF - prefs.js: browser.search.selectedEngine - Yahoo! Search
    FF - prefs.js: browser.startup.homepage - hxxp://google.co.uk
    FF - prefs.js: network.proxy.type - 0
    FF - component: c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_18.5.0.125\coffplgn\components\coFFPlgn.dll
    FF - component: c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_18.5.0.125\ipsffplgn\components\IPSFFPl.dll
    FF - component: c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\firefox\ext\components\nprpffbrowserrecordext.dll
    FF - component: c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\firefox\ext\components\nprpffbrowserrecordlegacyext.dll
    FF - component: c:\program files\mozilla firefox\extensions\{82af8dca-6de9-405d-bd5e-43525bdad38a}\components\SkypeFfComponent.dll
    FF - plugin: c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\mozillaplugins\nprpchromebrowserrecordext.dll
    FF - plugin: c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\mozillaplugins\nprphtml5videoshim.dll
    FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll
    FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
    FF - plugin: c:\program files\microsoft silverlight\4.0.60531.0\npctrlui.dll
    FF - plugin: c:\program files\microsoft\office live\npOLW.dll
    FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
    .
    ============= SERVICES / DRIVERS ===============
    .
    R0 SymDS;Symantec Data Store;c:\windows\system32\drivers\nis\1206000.01d\symds.sys [2011-5-10 340088]
    R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\nis\1206000.01d\symefa.sys [2011-5-10 744568]
    R1 BHDrvx86;BHDrvx86;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_18.5.0.125\definitions\bashdefs\20110723.001\BHDrvx86.sys [2011-7-23 815736]
    R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2010-2-17 12872]
    R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-5-10 67656]
    R1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\nis\1206000.01d\ironx86.sys [2011-5-10 136312]
    R2 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;c:\program files\adobe\elements organizer 8.0\PhotoshopElementsFileAgent.exe [2009-9-18 169312]
    R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [2010-12-18 54760]
    R2 LBeepKE;Logitech Beep Suppression Driver;c:\windows\system32\drivers\LBeepKE.sys [2010-10-5 10448]
    R2 NIS;Norton Internet Security;c:\program files\norton internet security\engine\18.6.0.29\ccsvchst.exe [2011-5-10 130008]
    R2 Norton PC Checkup Application Launcher;Norton PC Checkup Application Launcher;c:\program files\norton pc checkup\engine\2.0.2.543\SymcPCCULaunchSvc.exe [2010-2-21 120248]
    R2 PCCUJobMgr;Common Client Job Manager Service;c:\program files\norton pc checkup\engine\2.0.2.543\ccSvcHst.exe [2010-2-21 126392]
    R2 WFCXVCAP;WinFast TV Video Capture Driver;c:\windows\system32\drivers\wfcxvcap.sys [2007-8-20 167296]
    R2 WinDefend;Windows Defender;c:\program files\windows defender\MsMpEng.exe [2006-11-3 13592]
    R3 cmudaxp;ASUS Xonar DS Audio Interface;c:\windows\system32\drivers\cmudaxp.sys [2011-6-23 1498624]
    R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2011-7-28 105592]
    R3 IDSxpx86;IDSxpx86;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_18.5.0.125\definitions\ipsdefs\20110729.030\IDSXpx86.sys [2011-7-30 355256]
    R3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver;c:\windows\system32\drivers\nx6000.sys [2011-3-12 30576]
    R3 NAVENG;NAVENG;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_18.5.0.125\definitions\virusdefs\20110731.003\NAVENG.SYS [2011-7-31 86008]
    R3 NAVEX15;NAVEX15;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_18.5.0.125\definitions\virusdefs\20110731.003\NAVEX15.SYS [2011-7-31 1542392]
    R3 wfcxdtun;WinFast DTV BDA Tuner/Demod Driver;c:\windows\system32\drivers\wfcxdtun.sys [2007-8-20 21248]
    R3 wfcxtcap;WinFast DTV BDA Transport Stream Capture Driver;c:\windows\system32\drivers\wfcxtcap.sys [2007-8-20 15872]
    R3 wfcxxbar;WinFast TV Crossbar Driver;c:\windows\system32\drivers\wfcxxbar.sys [2007-8-20 10368]
    S0 Lbd;Lbd;c:\windows\system32\drivers\lbd.sys --> c:\windows\system32\drivers\Lbd.sys [?]
    S2 NPVR Recording Service;NPVR Recording Service;"c:\program files\npvr\nrecord.exe" --> c:\program files\npvr\NRecord.exe [?]
    S3 cpuz132;cpuz132;\??\c:\docume~1\dad\locals~1\temp\cpuz132\cpuz132_x32.sys --> c:\docume~1\dad\locals~1\temp\cpuz132\cpuz132_x32.sys [?]
    S3 CrucialSMBusScan;CrucialSMBusScan;\??\c:\windows\system32\drivers\crucialsmbusscan.sys --> c:\windows\system32\drivers\CrucialSMBusScan.sys [?]
    S3 fsssvc;Windows Live Family Safety Service;c:\program files\windows live\family safety\fsssvc.exe [2010-4-28 704872]
    S3 Lavasoft Kernexplorer;Lavasoft helper driver;\??\c:\program files\lavasoft\ad-aware\kernexplorer.sys --> c:\program files\lavasoft\ad-aware\KernExplorer.sys [?]
    S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [2003-7-16 14336]
    .
    =============== File Associations ===============
    .
    JSEFile=NOTEPAD.EXE %1
    VBEFile=NOTEPAD.EXE %1
    VBSFile=NOTEPAD.EXE %1
    .
    =============== Created Last 30 ================
    .
    2011-07-31 20:26:16 -------- d-----w- c:\documents and settings\dad\local settings\application data\ArcSoft
    2011-07-31 20:22:35 -------- d-----w- c:\documents and settings\all users\application data\ArcSoft
    2011-07-31 15:11:38 -------- d-----w- c:\documents and settings\all users\application data\iolo
    2011-07-29 15:12:47 6881616 ----a-w- c:\documents and settings\all users\application data\microsoft\windows defender\definition updates\{7ed85db1-7285-4c94-8a8f-6411b0c248c2}\mpengine.dll
    .
    ==================== Find3M ====================
    .
    2011-07-31 20:37:46 2 -c--a-w- c:\windows\system32\Dvbpws.dll
    2011-07-30 21:52:53 16400 ----a-w- c:\windows\system32\drivers\LNonPnP.sys
    2011-07-06 18:52:42 41272 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2011-07-06 18:52:42 22712 ----a-w- c:\windows\system32\drivers\mbam.sys
    2011-06-23 16:55:48 413696 ----a-w- c:\windows\system32\wrap_oal.dll
    2011-06-23 16:55:45 102400 ----a-w- c:\windows\system32\OpenAL32.dll
    2011-06-21 08:37:24 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
    2011-06-02 14:02:05 1858944 ----a-w- c:\windows\system32\win32k.sys
    2011-05-31 15:49:02 348160 ----a-w- c:\windows\system32\msvcr71.dll
    2011-05-31 15:49:01 499712 ----a-w- c:\windows\system32\msvcp71.dll
    2011-05-24 18:14:10 222080 -c----w- c:\windows\system32\MpSigStub.exe
    2011-05-10 07:58:10 60872 ----a-w- c:\windows\system32\S32EVNT1.DLL
    2011-05-10 07:58:10 126584 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS
    .
    ============= FINISH: 9:46:29.40 ===============
    GMER 1.0.15.15641 - GMER - Rootkit Detector and Remover
    Rootkit scan 2011-08-01 13:48:40
    Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 Maxtor_6E040L0 rev.NAR61590
    Running: ew4i63e6.exe; Driver: C:\DOCUME~1\DAD\LOCALS~1\Temp\pxtdipow.sys


    ---- System - GMER 1.0.15 ----

    SSDT 8A35A2F8 ZwAlertResumeThread
    SSDT 8A35A3B8 ZwAlertThread
    SSDT 8A0C0878 ZwAllocateVirtualMemory
    SSDT 89FD5CD0 ZwAssignProcessToJobObject
    SSDT 8A0C1320 ZwConnectPort
    SSDT \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS (Symantec Event Library/Symantec Corporation) ZwCreateKey [0xAF11F710]
    SSDT 89A1B768 ZwCreateMutant
    SSDT 89A5B860 ZwCreateSymbolicLinkObject
    SSDT 89A1F268 ZwCreateThread
    SSDT 89FD5DB0 ZwDebugActiveProcess
    SSDT \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS (Symantec Event Library/Symantec Corporation) ZwDeleteKey [0xAF11F990]
    SSDT \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS (Symantec Event Library/Symantec Corporation) ZwDeleteValueKey [0xAF11FEF0]
    SSDT 8A0C4A40 ZwDuplicateObject
    SSDT 8A0C2F80 ZwFreeVirtualMemory
    SSDT 8A63F9C0 ZwImpersonateAnonymousToken
    SSDT 8A35A258 ZwImpersonateThread
    SSDT 8A35C710 ZwLoadDriver
    SSDT 8A0C2E80 ZwMapViewOfSection
    SSDT 89A1B688 ZwOpenEvent
    SSDT 8A1F1570 ZwOpenProcess
    SSDT 8A0C21F8 ZwOpenProcessToken
    SSDT 89A391B0 ZwOpenSection
    SSDT 8A0C4B10 ZwOpenThread
    SSDT 89A5B950 ZwProtectVirtualMemory
    SSDT 8A3F8130 ZwResumeThread
    SSDT 8A3B10C8 ZwSetContextThread
    SSDT 8A3B1008 ZwSetInformationProcess
    SSDT 8A0B4B60 ZwSetSystemInformation
    SSDT \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS (Symantec Event Library/Symantec Corporation) ZwSetValueKey [0xAF120140]
    SSDT 89A39290 ZwSuspendProcess
    SSDT 8A3E5090 ZwSuspendThread
    SSDT 8A0C45C8 ZwTerminateProcess
    SSDT 8A3E5170 ZwTerminateThread
    SSDT 8A354D98 ZwUnmapViewOfSection
    SSDT 8A0C07A8 ZwWriteVirtualMemory

    ---- Kernel code sections - GMER 1.0.15 ----

    ? SYMDS.SYS The system cannot find the file specified. !
    ? SYMEFA.SYS The system cannot find the file specified. !
    ? C:\DOCUME~1\DAD\LOCALS~1\Temp\mbr.sys The system cannot find the file specified. !

    ---- User code sections - GMER 1.0.15 ----

    .text C:\WINDOWS\Explorer.EXE[584] ole32.dll!CoCreateInstanceEx 774FF154 5 Bytes JMP 10009000 C:\WINDOWS\system\HsSrv.dll (HsSrv Dynamic Link Library/C-Media Electronics Inc.)
    .text C:\WINDOWS\Explorer.EXE[584] ole32.dll!CoCreateInstance 774FF1AC 5 Bytes JMP 10008F20 C:\WINDOWS\system\HsSrv.dll (HsSrv Dynamic Link Library/C-Media Electronics Inc.)
    .text C:\Program Files\Logitech\SetPointP\SetPoint.exe[768] ole32.dll!CoCreateInstanceEx 774FF154 5 Bytes JMP 017B9000 C:\WINDOWS\system\HsSrv.dll (HsSrv Dynamic Link Library/C-Media Electronics Inc.)
    .text C:\Program Files\Logitech\SetPointP\SetPoint.exe[768] ole32.dll!CoCreateInstance 774FF1AC 5 Bytes JMP 017B8F20 C:\WINDOWS\system\HsSrv.dll (HsSrv Dynamic Link Library/C-Media Electronics Inc.)
    .text C:\WINDOWS\system\HsMgr.exe[796] ole32.dll!CoCreateInstanceEx 774FF154 5 Bytes JMP 10009000 C:\WINDOWS\system\HsSrv.dll (HsSrv Dynamic Link Library/C-Media Electronics Inc.)
    .text C:\WINDOWS\system\HsMgr.exe[796] ole32.dll!CoCreateInstance 774FF1AC 5 Bytes JMP 10008F20 C:\WINDOWS\system\HsSrv.dll (HsSrv Dynamic Link Library/C-Media Electronics Inc.)
    .text C:\Program Files\ASUS Xonar DS Audio\Customapp\Program\MXMon.exe[1456] ole32.dll!CoCreateInstanceEx 774FF154 5 Bytes JMP 00CC9000 C:\WINDOWS\system\HsSrv.dll (HsSrv Dynamic Link Library/C-Media Electronics Inc.)
    .text C:\Program Files\ASUS Xonar DS Audio\Customapp\Program\MXMon.exe[1456] ole32.dll!CoCreateInstance 774FF1AC 5 Bytes JMP 00CC8F20 C:\WINDOWS\system\HsSrv.dll (HsSrv Dynamic Link Library/C-Media Electronics Inc.)
    .text C:\Program Files\Mozilla Firefox\plugin-container.exe[1844] USER32.dll!SetWindowLongA 7E42C29D 5 Bytes JMP 10699777 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
    .text C:\Program Files\Mozilla Firefox\plugin-container.exe[1844] USER32.dll!SetWindowLongW 7E42C2BB 5 Bytes JMP 10699709 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
    .text C:\Program Files\Mozilla Firefox\plugin-container.exe[1844] USER32.dll!GetWindowInfo 7E42C49C 5 Bytes JMP 104C7C37 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
    .text C:\Program Files\Mozilla Firefox\plugin-container.exe[1844] USER32.dll!TrackPopupMenu 7E46531E 5 Bytes JMP 104C823A C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
    .text C:\Program Files\Mozilla Firefox\plugin-container.exe[1844] ole32.dll!CoCreateInstanceEx 774FF154 5 Bytes JMP 012B9000 C:\WINDOWS\system\HsSrv.dll (HsSrv Dynamic Link Library/C-Media Electronics Inc.)
    .text C:\Program Files\Mozilla Firefox\plugin-container.exe[1844] ole32.dll!CoCreateInstance 774FF1AC 5 Bytes JMP 012B8F20 C:\WINDOWS\system\HsSrv.dll (HsSrv Dynamic Link Library/C-Media Electronics Inc.)
    .text C:\Program Files\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe[2724] ole32.dll!CoCreateInstanceEx 774FF154 5 Bytes JMP 10009000 C:\WINDOWS\system\HsSrv.dll (HsSrv Dynamic Link Library/C-Media Electronics Inc.)
    .text C:\Program Files\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe[2724] ole32.dll!CoCreateInstance 774FF1AC 5 Bytes JMP 10008F20 C:\WINDOWS\system\HsSrv.dll (HsSrv Dynamic Link Library/C-Media Electronics Inc.)
    .text C:\Program Files\Norton PC Checkup\Engine\2.0.2.543\ccSvcHst.exe[2824] ole32.dll!CoCreateInstanceEx 774FF154 5 Bytes JMP 10009000 C:\WINDOWS\system\HsSrv.dll (HsSrv Dynamic Link Library/C-Media Electronics Inc.)
    .text C:\Program Files\Norton PC Checkup\Engine\2.0.2.543\ccSvcHst.exe[2824] ole32.dll!CoCreateInstance 774FF1AC 5 Bytes JMP 10008F20 C:\WINDOWS\system\HsSrv.dll (HsSrv Dynamic Link Library/C-Media Electronics Inc.)
    .text C:\Program Files\Mozilla Firefox\firefox.exe[3732] ntdll.dll!NtMapViewOfSection 7C90D51E 5 Bytes JMP 04A3003A
    .text C:\Program Files\Mozilla Firefox\firefox.exe[3732] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 04A300F7
    .text C:\Program Files\Mozilla Firefox\firefox.exe[3732] ntdll.dll!LdrLoadDll 7C91632D 5 Bytes JMP 00401410 C:\Program Files\Mozilla Firefox\firefox.exe (Firefox/Mozilla Corporation)
    .text C:\Program Files\Mozilla Firefox\firefox.exe[3732] kernel32.dll!VirtualProtectEx + 6E 7C801ACF 7 Bytes JMP 04A303D2
    .text C:\Program Files\Mozilla Firefox\firefox.exe[3732] kernel32.dll!ReadProcessMemory + 3E 7C80220E 7 Bytes JMP 04A301B0
    .text C:\Program Files\Mozilla Firefox\firefox.exe[3732] kernel32.dll!lstrlenW + 43 7C809AEC 7 Bytes JMP 04A3031C
    .text C:\Program Files\Mozilla Firefox\firefox.exe[3732] kernel32.dll!GetVersionExA + D3 7C812C51 7 Bytes JMP 04A30488
    .text C:\Program Files\Mozilla Firefox\firefox.exe[3732] kernel32.dll!GetProcessHandleCount + 35 7C86229F 7 Bytes JMP 04A30266
    .text C:\Program Files\Mozilla Firefox\firefox.exe[3732] ole32.dll!CoCreateInstanceEx 774FF154 5 Bytes JMP 01419000 C:\WINDOWS\system\HsSrv.dll (HsSrv Dynamic Link Library/C-Media Electronics Inc.)
    .text C:\Program Files\Mozilla Firefox\firefox.exe[3732] ole32.dll!CoCreateInstance 774FF1AC 5 Bytes JMP 01418F20 C:\WINDOWS\system\HsSrv.dll (HsSrv Dynamic Link Library/C-Media Electronics Inc.)
    .text C:\Program Files\Brownie\brstswnd.exe[3988] ole32.dll!CoCreateInstanceEx 774FF154 5 Bytes JMP 10009000 C:\WINDOWS\system\HsSrv.dll (HsSrv Dynamic Link Library/C-Media Electronics Inc.)
    .text C:\Program Files\Brownie\brstswnd.exe[3988] ole32.dll!CoCreateInstance 774FF1AC 5 Bytes JMP 10008F20 C:\WINDOWS\system\HsSrv.dll (HsSrv Dynamic Link Library/C-Media Electronics Inc.)
    .text C:\Documents and Settings\DAD\Downloads for screening\ew4i63e6.exe[4008] ole32.dll!CoCreateInstanceEx 774FF154 5 Bytes JMP 10009000 C:\WINDOWS\system\HsSrv.dll (HsSrv Dynamic Link Library/C-Media Electronics Inc.)
    .text C:\Documents and Settings\DAD\Downloads for screening\ew4i63e6.exe[4008] ole32.dll!CoCreateInstance 774FF1AC 5 Bytes JMP 10008F20 C:\WINDOWS\system\HsSrv.dll (HsSrv Dynamic Link Library/C-Media Electronics Inc.)

    ---- Devices - GMER 1.0.15 ----

    Device Ntfs.sys (NT File System Driver/Microsoft Corporation)
    Device Fastfat.SYS (Fast FAT File System Driver/Microsoft Corporation)

    AttachedDevice \Driver\Tcpip \Device\Ip SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
    AttachedDevice \Driver\Tcpip \Device\Ip fssfltr_tdi.sys (Family Safety Filter Driver (TDI)/Microsoft Corporation)
    AttachedDevice \Driver\Tcpip \Device\Tcp SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
    AttachedDevice \Driver\Tcpip \Device\Tcp fssfltr_tdi.sys (Family Safety Filter Driver (TDI)/Microsoft Corporation)
    AttachedDevice \Driver\Tcpip \Device\Udp SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
    AttachedDevice \Driver\Tcpip \Device\Udp fssfltr_tdi.sys (Family Safety Filter Driver (TDI)/Microsoft Corporation)
    AttachedDevice \Driver\Tcpip \Device\RawIp SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
    AttachedDevice \Driver\Tcpip \Device\RawIp fssfltr_tdi.sys (Family Safety Filter Driver (TDI)/Microsoft Corporation)

    Device mrxsmb.sys (Windows NT SMB Minirdr/Microsoft Corporation)

    AttachedDevice fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)

    ---- Registry - GMER 1.0.15 ----

    Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\System
    Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\System@OODEFRAG10.00.00.01WORKSTATION 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
    Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\System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
    Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\System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
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@AppInit_DLLs
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@DeviceNotSelectedTimeout 15
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@GDIProcessHandleQuota 10000
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@Spooler yes
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@swapdisk
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@TransmissionRetryTimeout 90
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@USERProcessHandleQuota 10000
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@NoPopUpsOnBoot 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}@ Microsoft Disk Quota
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}@NoMachinePolicy 0
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}@NoUserPolicy 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}@NoSlowLink 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}@NoBackgroundPolicy 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}@NoGPOListChanges 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}@PerUserLocalSettings 0
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}@RequiresSuccessfulRegistry 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}@EnableAsynchronousProcessing 0
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}@DllName dskquota.dll
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}@ProcessGroupPolicy ProcessGroupPolicy
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}@ Internet Explorer Zonemapping
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}@DllName C:\WINDOWS\system32\iedkcs32.dll
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}@ProcessGroupPolicy ProcessGroupPolicyForZoneMap
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}@NoGPOListChanges 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}@RequiresSucessfulRegistry 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}@DisplayName @C:\WINDOWS\system32\iedkcs32.dll.mui,-3051
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}@RequiresSuccessfulRegistry 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{7B849a69-220F-451E-B3FE-2CB811AF94AE}@ Internet Explorer User Accelerators
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{7B849a69-220F-451E-B3FE-2CB811AF94AE}@DisplayName @C:\WINDOWS\system32\iedkcs32.dll.mui,-3051
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{7B849a69-220F-451E-B3FE-2CB811AF94AE}@DllName C:\WINDOWS\system32\iedkcs32.dll
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{7B849a69-220F-451E-B3FE-2CB811AF94AE}@NoGPOListChanges 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{7B849a69-220F-451E-B3FE-2CB811AF94AE}@ProcessGroupPolicy ProcessGroupPolicyForActivities
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{7B849a69-220F-451E-B3FE-2CB811AF94AE}@ProcessGroupPolicyEx ProcessGroupPolicyForActivitiesEx
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{7B849a69-220F-451E-B3FE-2CB811AF94AE}@RequiresSuccessfulRegistry 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}@ProcessGroupPolicy SceProcessSecurityPolicyGPO
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}@GenerateGroupPolicy SceGenerateGroupPolicy
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}@ExtensionRsopPlanningDebugLevel 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}@ProcessGroupPolicyEx SceProcessSecurityPolicyGPOEx
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}@ExtensionDebugLevel 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}@DllName scecli.dll
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}@ Security
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}@NoUserPolicy 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}@NoGPOListChanges 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}@EnableAsynchronousProcessing 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}@MaxNoGPOListChangesInterval 960
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}@ProcessGroupPolicyEx ProcessGroupPolicyEx
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}@GenerateGroupPolicy GenerateGroupPolicy
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}@ProcessGroupPolicy ProcessGroupPolicy
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}@DllName C:\WINDOWS\system32\iedkcs32.dll
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}@ Internet Explorer Branding
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}@NoSlowLink 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}@NoBackgroundPolicy 0
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}@NoGPOListChanges 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}@NoMachinePolicy 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}@DisplayName @C:\WINDOWS\system32\iedkcs32.dll.mui,-3014
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}@ProcessGroupPolicy SceProcessEFSRecoveryGPO
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}@DllName scecli.dll
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}@ EFS recovery
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}@NoUserPolicy 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}@NoGPOListChanges 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}@RequiresSuccessfulRegistry 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{B587E2B1-4D59-4e7e-AED9-22B9DF11D053}@ 802.3 Group Policy
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{B587E2B1-4D59-4e7e-AED9-22B9DF11D053}@DisplayName @dot3gpclnt.dll,-100
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{B587E2B1-4D59-4e7e-AED9-22B9DF11D053}@ProcessGroupPolicyEx ProcessLANPolicyEx
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{B587E2B1-4D59-4e7e-AED9-22B9DF11D053}@GenerateGroupPolicy GenerateLANPolicy
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{B587E2B1-4D59-4e7e-AED9-22B9DF11D053}@DllName dot3gpclnt.dll
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{B587E2B1-4D59-4e7e-AED9-22B9DF11D053}@NoUserPolicy 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{B587E2B1-4D59-4e7e-AED9-22B9DF11D053}@NoGPOListChanges 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{C631DF4C-088F-4156-B058-4375F0853CD8}@ Microsoft Offline Files
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{C631DF4C-088F-4156-B058-4375F0853CD8}@DllName %SystemRoot%\System32\cscui.dll
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{C631DF4C-088F-4156-B058-4375F0853CD8}@EnableAsynchronousProcessing 0
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{C631DF4C-088F-4156-B058-4375F0853CD8}@NoBackgroundPolicy 0
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{C631DF4C-088F-4156-B058-4375F0853CD8}@NoGPOListChanges 0
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{C631DF4C-088F-4156-B058-4375F0853CD8}@NoMachinePolicy 0
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{C631DF4C-088F-4156-B058-4375F0853CD8}@NoSlowLink 0
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{C631DF4C-088F-4156-B058-4375F0853CD8}@NoUserPolicy 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{C631DF4C-088F-4156-B058-4375F0853CD8}@PerUserLocalSettings 0
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{C631DF4C-088F-4156-B058-4375F0853CD8}@ProcessGroupPolicy ProcessGroupPolicy
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{C631DF4C-088F-4156-B058-4375F0853CD8}@RequiresSuccessfulRegistry 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{c6dc5466-785a-11d2-84d0-00c04fb169f7}@ Software Installation
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{c6dc5466-785a-11d2-84d0-00c04fb169f7}@DllName appmgmts.dll
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{c6dc5466-785a-11d2-84d0-00c04fb169f7}@ProcessGroupPolicyEx ProcessGroupPolicyObjectsEx
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{c6dc5466-785a-11d2-84d0-00c04fb169f7}@GenerateGroupPolicy GenerateGroupPolicy
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{c6dc5466-785a-11d2-84d0-00c04fb169f7}@NoBackgroundPolicy 0
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{c6dc5466-785a-11d2-84d0-00c04fb169f7}@RequiresSucessfulRegistry 0
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{c6dc5466-785a-11d2-84d0-00c04fb169f7}@NoSlowLink 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{c6dc5466-785a-11d2-84d0-00c04fb169f7}@PerUserLocalSettings 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{c6dc5466-785a-11d2-84d0-00c04fb169f7}@EventSources (Application Management,Application)?(MsiInstaller,Application)?
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}@ Internet Explorer Machine Accelerators
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}@DisplayName @C:\WINDOWS\system32\iedkcs32.dll.mui,-3051
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}@DllName C:\WINDOWS\system32\iedkcs32.dll
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}@NoGPOListChanges 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}@ProcessGroupPolicy ProcessGroupPolicyForActivities
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}@ProcessGroupPolicyEx ProcessGroupPolicyForActivitiesEx
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}@RequiresSuccessfulRegistry 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui@
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui@DLLName igfxsrvc.dll
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui@Asynchronous 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui@Impersonate 1
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui@Unlock WinlogonUnlockEvent
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn\Event@Logon LBTWLgn_LOGON
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn\Event@StartShell LBTWLgn_STARTSHELL
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList@HelpAssistant 0
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList@TsInternetUser 0
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList@SQLAgentCmdExec 0
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList@NetShowServices 0
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList@IWAM_ 65536
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList@IUSR_ 65536
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList@VUSR_ 65536
    Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList@ASPNET 0

    ---- EOF - GMER 1.0.15 ----
    Having seen the size of the logs to be examined, I feel a bit of a fraud for asking you to help. The reason(s) I submitted a HiJack this log were because of a catalog of irritating issues that made me wonder if there were underlying problems, and I was directed to do so by Detective. Anyway here is a list of my "problems" and if you find them too trivial(or time consuming) to deal with I shall fully understand. My PCI DTV programme (WinFast) has started to not respond or badly respond to mouse commands - both wired and wireless ( a clean reinstall of hard and software has not sorted it); system restore is not working for any restore point: "not responding" errors are becoming more frequent; system is generally sluggish/slow.
    I have the CD for Windows XP SP1a OEM that came with my DELL Dimension 2400.

    Kindest regards and good luck - stokie

  4. #4
    Member Spyware Fighter
    Join Date
    Jun 2010
    Location
    Bement,Ill USA
    Posts
    1,340
    Points
    146

    Default

    Hello,

    Let run a couple of scanners and see if they find any thing.

    1.
    Please download the TDSS Rootkit Removing Tool (TDSSKiller.exe) and save it to your Desktop. <-Important!!!
    Be sure to download TDSSKiller.exe (v2.5.6.0) from Kaspersky's website and not TDSSKiller.zip which appears to be an older version 2.3.2.2 of the tool.
    • Double-click on TDSSKiller.exe to run the tool for known TDSS variants.
      Vista/Windows 7 users right-click and select Run As Administrator.
    • If TDSSKiller does not run, try renaming it.
    • To do this, right-click on TDSSKiller.exe, select Rename and give it a random name with the .com file extension (i.e. 123abc.com). If you do not see the file extension, please refer to How to change the file extension.
    • Click the Start Scan button.
    • Do not use the computer during the scan
    • If the scan completes with nothing found, click Close to exit.
    • If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.
    • Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.
    • A log file named TDSSKiller_version_date_time_log.txt (i.e. TDSSKiller.2.5.6.0_27.07.2010_09.o7.26_log.txt) will be created and saved to the root directory (usually Local Disk C.
    • Copy and paste the contents of that file in your next reply.


    2.
    Install Recovery Console and Run ComboFix

    This tool is not a toy. If used the wrong way you could trash your computer. Please use only under direction of a Helper. If you decide to do so anyway, please do not blame me or ComboFix.

    Download Combofix from any of the links below, and save it to your desktop.

    Link 1
    Link 2
    • Close/disable all anti-virus and anti-malware programs so they do not interfere with the running of ComboFix. Refer to this page if you are not sure how.
    • Close any open windows, including this one.
    • Double click on ComboFix.exe & follow the prompts.
    • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
    • If you did not have it installed, you will see the prompt below. Choose YES.
    • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

    **Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

    Note:The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you
    should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.

    • Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

    • Click on Yes, to continue scanning for malware.
    • When finished, it will produce a report for you. Please post the contents of the log (C:\ComboFix.txt).
    Leave your computer alone while ComboFix is running.
    ComboFix will restart your computer if malware is found; allow it to do so.


    Note: Please Do NOT mouseclick combofix's window while its running because it may cause it to stall.


    Things to include in your next reply::
    TDssKiller log
    Combofix.txt
    How is your machine running now?
    " Extinguishing Malware from the world"

    The Spware Help forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.
    HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
    Thanks-




  5. #5
    Member stokie's Avatar
    Join Date
    Apr 2005
    Posts
    74
    Points
    3

    Default

    Hello

    I'm just testing as I seem unable to post the logs.

  6. #6
    Member stokie's Avatar
    Join Date
    Apr 2005
    Posts
    74
    Points
    3

    Default Logs

    Hello
    The combined logs are too big for a single submission so I'll try sending them individually.
    I'm concerned that the whole of my "Media" folder was deleted especially Audacity and Spotify which I would have expected to be perfectly safe!

    Here is the CombiFix log, the TDssKiller found nothing - do you need it?ComboFix 11-08-03.01 - DAD 03/08/2011 10:21:48.3.2 - x86
    Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1271.517 [GMT 1:00]
    Running from: c:\documents and settings\DAD\Desktop\ComboFix.exe
    AV: Norton Internet Security *Disabled/Updated* {E10A9785-9598-4754-B552-92431C1C35F8}
    FW: Norton Internet Security *Enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    c:\documents and settings\DAD\Application Data\Microsoft\1eaadjc.dll
    c:\documents and settings\DAD\Application Data\Microsoft\bass.dll
    c:\documents and settings\DAD\Application Data\Microsoft\kfgresk.dll
    c:\documents and settings\DAD\Application Data\Microsoft\mjcriu.dll
    c:\documents and settings\DAD\Application Data\Microsoft\peaadje.dll
    c:\documents and settings\DAD\Application Data\Microsoft\qwadjb.dll
    c:\documents and settings\DAD\Application Data\Microsoft\rsaadjd.dll
    c:\documents and settings\DAD\Media
    c:\documents and settings\DAD\Media\Audacity\audacity-manual-1.2.pdf
    c:\documents and settings\DAD\Media\Audacity\Audacity\audacity-win-unicode-1.3.12.exe
    c:\documents and settings\DAD\Media\Audacity\Audacity\audacity-win-unicode-1.3.13.exe
    c:\documents and settings\DAD\Media\Audacity\Audacity\Desktop.ini
    c:\documents and settings\DAD\Media\Audacity\Audacity\Lame_v3.98.2_for_Audacity_on_Windows.exe
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\All I Have To Do Is Dream.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\Bird Dog.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\Bye Bye Love.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\C'mon Everybody.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\Chantilly Lace.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\Claudette.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\Diana.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\Don't Be Cruel.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\Donna RV.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\Great Balls Of Fire.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\Hats Off To Larry.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\Heartbeat.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\Heartbreak Hotel.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\In Dreams.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\It's Only Make Believe.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\It Doesn't Matter Anymore.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\Keep A Knockin.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\Love Me.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\My Prayer.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\Oh Boy.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\Poetry In Motion.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\Poor Little Fool.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\Problems.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\Rock And Roll Music.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\Roses Are Red.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\Smoke Gets In Your Eyes.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\Summertime Blues.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\That'll Be The Day Decca.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\That'll Be The Day.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\The Night Has A Thousand Eyes.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\Wake Up Little Susie.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\50's\When.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\Desktop.ini
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\Modules\Mum and the children.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\New compilation\Amen Corner - Bend Me Shape Me.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\New compilation\Bee Gees - Blue Island.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\New compilation\Elkie Brooks - Lilac Wine.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\New compilation\Julian Lennon - Saltwater.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\New compilation\The Box Tops - The Letter.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\New compilation\The Lemon Pipers - Green Tambourine.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\New compilation\Tommy Roe - Sheila.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\Spotify\If This is Goodbye.wav
    c:\documents and settings\DAD\Media\Audacity\AudacityProjects\Spotify\Why Worry Knopfler Atkins Everleys.wav
    c:\documents and settings\DAD\Media\Audacity\Desktop.ini
    c:\documents and settings\DAD\Media\Beatles Scores 2\~$e Beatles - Complete Scores.pdf
    c:\documents and settings\DAD\Media\Beatles Scores 2\The Beatles - Complete Scores.pdf
    c:\documents and settings\DAD\Media\Beatles Scores\The Beatles - Complete Scores.pdf
    c:\documents and settings\DAD\Media\CD list copy.jpg
    c:\documents and settings\DAD\Media\CD list.psd
    c:\documents and settings\DAD\Media\CDBurnerXP.lnk
    c:\documents and settings\DAD\Media\cdbxp_setup_4.3.2.2212.exe
    c:\documents and settings\DAD\Media\CyberLink PowerDVD.lnk
    c:\documents and settings\DAD\Media\Desktop.ini
    c:\documents and settings\DAD\Media\dvdshrink32setup.zip
    c:\documents and settings\DAD\Media\e4567_Xonar DS_UM.pdf
    c:\documents and settings\DAD\Media\joinvobfilestool.zip
    c:\documents and settings\DAD\Media\joinvobfilestool\JoinVobFiles.exe
    c:\documents and settings\DAD\Media\joinvobfilestool\readme.txt
    c:\documents and settings\DAD\Media\Media Player 11 set up\Desktop.ini
    c:\documents and settings\DAD\Media\Media Player 11 set up\wmp11-windowsxp-x86-enu.exe
    c:\documents and settings\DAD\Media\My Music\Cliff Richard & the Shadows\desktop.ini
    c:\documents and settings\DAD\Media\My Music\Cliff Richard & the Shadows\Reunited [Deluxe Edition] Disc 1\01 I Could Easily Fall (In Love with You).mp3
    c:\documents and settings\DAD\Media\My Music\Cliff Richard & the Shadows\Reunited [Deluxe Edition] Disc 1\02 The Young Ones.mp3
    c:\documents and settings\DAD\Media\My Music\Cliff Richard & the Shadows\Reunited [Deluxe Edition] Disc 1\03 Move It.mp3
    c:\documents and settings\DAD\Media\My Music\Cliff Richard & the Shadows\Reunited [Deluxe Edition] Disc 1\04 Living Doll.mp3
    c:\documents and settings\DAD\Media\My Music\Cliff Richard & the Shadows\Reunited [Deluxe Edition] Disc 1\05 Bachelor Boy.mp3
    c:\documents and settings\DAD\Media\My Music\Cliff Richard & the Shadows\Reunited [Deluxe Edition] Disc 1\06 Nine Times Out of Ten.mp3
    c:\documents and settings\DAD\Media\My Music\Cliff Richard & the Shadows\Reunited [Deluxe Edition] Disc 1\07 C'mon Everybody.mp3
    c:\documents and settings\DAD\Media\My Music\Cliff Richard & the Shadows\Reunited [Deluxe Edition] Disc 1\08 Travellin' Light.mp3
    c:\documents and settings\DAD\Media\My Music\Cliff Richard & the Shadows\Reunited [Deluxe Edition] Disc 1\09 It'll Be Me.mp3
    c:\documents and settings\DAD\Media\My Music\Cliff Richard & the Shadows\Reunited [Deluxe Edition] Disc 1\10 In the Country.mp3
    c:\documents and settings\DAD\Media\My Music\Cliff Richard & the Shadows\Reunited [Deluxe Edition] Disc 1\11 On the Beach.mp3
    c:\documents and settings\DAD\Media\My Music\Cliff Richard & the Shadows\Reunited [Deluxe Edition] Disc 1\12 The Next Time.mp3
    c:\documents and settings\DAD\Media\My Music\Cliff Richard & the Shadows\Reunited [Deluxe Edition] Disc 1\13 Please Don't Tease.mp3
    c:\documents and settings\DAD\Media\My Music\Cliff Richard & the Shadows\Reunited [Deluxe Edition] Disc 1\14 Sea Cruise.mp3
    c:\documents and settings\DAD\Media\My Music\Cliff Richard & the Shadows\Reunited [Deluxe Edition] Disc 1\15 Willie and the Hand Jive.mp3
    c:\documents and settings\DAD\Media\My Music\Cliff Richard & the Shadows\Reunited [Deluxe Edition] Disc 1\16 Summer Holiday.mp3
    c:\documents and settings\DAD\Media\My Music\Cliff Richard & the Shadows\Reunited [Deluxe Edition] Disc 1\17 Do You Wanna Dance-.mp3
    c:\documents and settings\DAD\Media\My Music\Cliff Richard & the Shadows\Reunited [Deluxe Edition] Disc 1\18 Don't Talk to Him.mp3
    c:\documents and settings\DAD\Media\My Music\Cliff Richard & the Shadows\Reunited [Deluxe Edition] Disc 1\19 Time Drags By.mp3
    c:\documents and settings\DAD\Media\My Music\Cliff Richard & the Shadows\Reunited [Deluxe Edition] Disc 1\20 Gee Whizz It's You.mp3
    c:\documents and settings\DAD\Media\My Music\Cliff Richard & the Shadows\Reunited [Deluxe Edition] Disc 1\21 Lucky Lips.mp3
    c:\documents and settings\DAD\Media\My Music\Cliff Richard & the Shadows\Reunited [Deluxe Edition] Disc 1\22 Singing the Blues.mp3
    c:\documents and settings\DAD\Media\My Music\Cliff Richard & the Shadows\Reunited [Deluxe Edition] Disc 1\AlbumArt_{BD43C784-AA49-410A-A742-14534B4BF5D0}_Large.jpg
    c:\documents and settings\DAD\Media\My Music\Cliff Richard & the Shadows\Reunited [Deluxe Edition] Disc 1\AlbumArt_{BD43C784-AA49-410A-A742-14534B4BF5D0}_Small.jpg
    c:\documents and settings\DAD\Media\My Music\Cliff Richard & the Shadows\Reunited [Deluxe Edition] Disc 1\AlbumArtSmall.jpg
    c:\documents and settings\DAD\Media\My Music\Cliff Richard & the Shadows\Reunited [Deluxe Edition] Disc 1\desktop.ini
    c:\documents and settings\DAD\Media\My Music\Cliff Richard & the Shadows\Reunited [Deluxe Edition] Disc 1\Folder.jpg
    c:\documents and settings\DAD\Media\My Music\DEFAULT.PLS
    c:\documents and settings\DAD\Media\My Music\Desktop.ini
    c:\documents and settings\DAD\Media\My Music\Sample Music.lnk
    c:\documents and settings\DAD\Media\My Music\Unknown\desktop.ini
    c:\documents and settings\DAD\Media\My Music\Willi Boskovsky\desktop.ini
    c:\documents and settings\DAD\Media\My Music\Willi Boskovsky\World of Johann Strauss\01 The Blue Danube Waltz.mp3
    c:\documents and settings\DAD\Media\My Music\Willi Boskovsky\World of Johann Strauss\02 Pizzicato-Polka.mp3
    c:\documents and settings\DAD\Media\My Music\Willi Boskovsky\World of Johann Strauss\03 Roses from the South Waltz.mp3
    c:\documents and settings\DAD\Media\My Music\Willi Boskovsky\World of Johann Strauss\04 At the Hunt.mp3
    c:\documents and settings\DAD\Media\My Music\Willi Boskovsky\World of Johann Strauss\05 Thousand and One Nights Waltz.mp3
    c:\documents and settings\DAD\Media\My Music\Willi Boskovsky\World of Johann Strauss\06 Tales from the Vienna Woods Waltz.mp3
    c:\documents and settings\DAD\Media\My Music\Willi Boskovsky\World of Johann Strauss\07 Egyptian March.mp3
    c:\documents and settings\DAD\Media\My Music\Willi Boskovsky\World of Johann Strauss\08 Vienna Blood Waltz.mp3
    c:\documents and settings\DAD\Media\My Music\Willi Boskovsky\World of Johann Strauss\09 Perpetuum Mobile.mp3
    c:\documents and settings\DAD\Media\My Music\Willi Boskovsky\World of Johann Strauss\10 Voices of Spring Waltz.mp3
    c:\documents and settings\DAD\Media\My Music\Willi Boskovsky\World of Johann Strauss\AlbumArt_{2740A69C-2D4C-4C20-AD6D-2F76D28D6770}_Large.jpg
    c:\documents and settings\DAD\Media\My Music\Willi Boskovsky\World of Johann Strauss\AlbumArt_{2740A69C-2D4C-4C20-AD6D-2F76D28D6770}_Small.jpg
    c:\documents and settings\DAD\Media\My Music\Willi Boskovsky\World of Johann Strauss\AlbumArtSmall.jpg
    c:\documents and settings\DAD\Media\My Music\Willi Boskovsky\World of Johann Strauss\desktop.ini
    c:\documents and settings\DAD\Media\My Music\Willi Boskovsky\World of Johann Strauss\Folder.jpg
    c:\documents and settings\DAD\Media\My recordings\Dance On.mp3
    c:\documents and settings\DAD\Media\My recordings\Deep Purple.mp3
    c:\documents and settings\DAD\Media\My recordings\Desktop.ini
    c:\documents and settings\DAD\Media\My recordings\FBI.mp3
    c:\documents and settings\DAD\Media\My recordings\Find Me A Golden Street.mp3
    c:\documents and settings\DAD\Media\My recordings\Foottapper.mp3
    c:\documents and settings\DAD\Media\My recordings\Geronimo.mp3
    c:\documents and settings\DAD\Media\My recordings\Going Home.mp3
    c:\documents and settings\DAD\Media\My recordings\Janet and John go to London.mp3
    c:\documents and settings\DAD\Media\My recordings\Janet and John go to the shoeshop.mp3
    c:\documents and settings\DAD\Media\My recordings\John goes to the chemists.mp3
    c:\documents and settings\DAD\Media\My recordings\John goes to the fish and chip shop.mp3
    c:\documents and settings\DAD\Media\My recordings\Linda Ronstadt.mp3
    c:\documents and settings\DAD\Media\My recordings\Not The Beach Boys.wmv
    c:\documents and settings\DAD\Media\My recordings\Willie Nelson Story.mp3
    c:\documents and settings\DAD\Media\Nero StartSmart.lnk
    c:\documents and settings\DAD\Media\Nero\AUTORUN.INF
    c:\documents and settings\DAD\Media\Nero\back.bmp
    c:\documents and settings\DAD\Media\Nero\borlndmm.dll
    c:\documents and settings\DAD\Media\Nero\cc3250mt.dll
    c:\documents and settings\DAD\Media\Nero\Desktop.ini
    c:\documents and settings\DAD\Media\Nero\install.exe
    c:\documents and settings\DAD\Media\Nero\install.ini
    c:\documents and settings\DAD\Media\Nero\Nero\Autorun.inf
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\AudioPlugins\Aac.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\AudioPlugins\aacenc32.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\AudioPlugins\Aiff.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\AudioPlugins\DefConvertor.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\AudioPlugins\Downloaders.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\AudioPlugins\lame_enc.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\AudioPlugins\midi.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\AudioPlugins\mp3PP.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\AudioPlugins\mp3PRO.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\AudioPlugins\mp3PRO_dmo.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\AudioPlugins\mp3PRO_hlp.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\AudioPlugins\msa.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\AudioPlugins\msa7\msa.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\AudioPlugins\ogg.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\AudioPlugins\video.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\AudioPlugins\wav.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\aacplus.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\dvddisc.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\NDParser.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\ndvddisc.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\NeAMR.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\NeAudCD.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\NeAudio.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\NeAudioConv.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\NeCapture.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\NeDVD.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\NeDVSplitter.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\NeFileSourceAsync.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\NeFileSrc.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\NeFSource.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\NeNDAud.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\NeNDGui.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\NeNDMux.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\NeNDVid.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\NePhotoSource.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\NePSMuxer.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\NeQTDec.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\NeRender.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\NeResize.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\neroadb.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\neroapl.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\NeroFormatConv.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\NeroVideoProc.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\NeSceneDetector.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\NeSplitter.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\NeVcd.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\NeVCR.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\NeVideo.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\DSFilters\NeVideoAnalyzer.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\Lib\AdvrCntr.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\Lib\apreg.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\Lib\DriveLocker.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\Lib\em2v.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\Lib\MultiChannel.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\Lib\NeAcEnc.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\Lib\NeEm2a.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\Lib\NeroCBUI.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\Lib\NeroDigitalExt.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\Lib\NeroIPP.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\Lib\NeroMediaCon.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\Lib\NeVcr.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Common Files\Lib\specialoffer.exe.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Buttons\frame_blob.png
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Buttons\frame_bricks.png
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Buttons\frame_cloud.png
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Buttons\frame_cloud2.png
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Buttons\frame_cushion.png
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Buttons\frame_edged.png
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Buttons\frame_fish.png
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Buttons\frame_flower.png
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Buttons\frame_frame.png
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Buttons\frame_metal.png
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Buttons\frame_oval.png
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Buttons\frame_platter.png
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Buttons\frame_pool.png
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Buttons\frame_pumpkin.png
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Buttons\frame_pyramiden.png
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Buttons\frame_raw.png
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Buttons\frame_rounded.png
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Buttons\frame_sausage.png
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Buttons\frame_soft.png
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Buttons\frame_starfish.png
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Buttons\frame_tv.png
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Buttons\frame_winter.png
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\MenuTemplates-2.bin
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\nve-mtmpl.bin
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\alien_skin4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\alienplanet4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\autumn4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\barbecue_man4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\barbecue_party4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\barbecue4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\birthday4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\blue_waves4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\brandnew_car4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\camping4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\cat_and_mouse4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\cinema4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\cool_baptism4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\copperstone4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\crazy_a4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\crazy_d4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\desert4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\diving4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\do_it_yourself4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\easter_egg4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\fire1_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\firestone4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\first_school4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\fishing4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\flower10_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\flower6_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\football4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\funny_bunny4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\game_hero4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\gardening4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\glass1_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\glassfire4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\greencove4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\greenland4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\ground6_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\halloween_b4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\halloween4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\hobby_botanist4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\homeworker4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\hungry_dog4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\inline4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\karaoke4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\kite4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\lava4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\lawnmower_man4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\leaves10_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\leaves5_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\light_r7_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\light10_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\man_at_work4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\matrix_revisited4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\meltdown4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\mosaic_b4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\movingA4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\movingB4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\music4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\pattern_ab4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\pattern_af4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\pattern_d4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\pattern_h4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\pattern_v4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\playing_dart4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\poolkids4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\pyramids4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\rainy_season4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\redhot_circuit4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\relax4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\runners4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\safari4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\santa_claus4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\sharkey4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\sky1_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\sky3_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\sledgeride4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\summer4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\surfbabe4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\swimming_pool4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\sylvester4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\tenniscrack4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\tv_fun4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\vision_a4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\vision_b4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\wallpaper_a4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\wallpaper_b4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\water_sprite4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\water1_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\wildsky4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\winter_sports4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\winterfun4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\x_masA4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\MenuTemplates\Pictures\yeti_fun4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\alienplanet16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\artichoke1_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\artichoke1_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\artichoke2_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\artichoke2_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\barbecue16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\bark1_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\bark1_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\bark2_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\bark2_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\bark3_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\bark3_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\bark4_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\bark4_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\birthday16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\blue oil4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\blue_and_gold4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\blue_lichen4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\camping16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\chromefire4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\cinema16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\cool_baptism16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\crazy_b4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\crazy_c4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\crystal_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\crystal1_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\crystal2_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\crystal2_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\crystal3_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\crystal3_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\crystal4_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\crystal4_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\desert16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\diffus_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\diffuse_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\easter_egg16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\fire1_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\fire2_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\fire2_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\first_school16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\flower_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\flower1_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\flower10_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\flower11_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\flower11_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\flower12_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\flower12_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\flower13_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\flower13_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\flower2_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\flower2_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\flower3_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\flower3_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\flower4_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\flower4_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\flower5_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\flower5_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\flower6_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\flower7_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\flower7_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\flower8_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\flower8_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\flower9_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\flower9_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\fossil_beach4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\frozen_fire4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\glass_wall4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\glass1_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\glass2_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\glass2_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\glass3_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\glass3_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\glass4_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\glass4_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\graffiti_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\graffiti_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\green_plaster4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\green_relief4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\greencove16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\greenland16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\ground1_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\ground1_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\ground2_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\ground2_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\ground3_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\ground3_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\ground4_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\ground4_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\ground5_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\ground5_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\ground6_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\ground7_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\ground7_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\ground8_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\ground8_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\halloween16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\Icon[013]
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\island16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\karaoke16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\knobs_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\knobs_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\leaves1_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\leaves1_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\leaves10_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\leaves11_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\leaves11_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\leaves2_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\leaves2_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\leaves3_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\leaves3_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\leaves4_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\leaves4_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\leaves5_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\leaves6_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\leaves6_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\leaves7_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\leaves7_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\leaves8_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\leaves8_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\leaves9_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\leaves9_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light_r2_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light_r2_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light_r3_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light_r3_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light_r4_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light_r4_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light_r5_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light_r5_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light_r6_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light_r6_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light_r8_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light_r8_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light_r9_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light_r9_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light_re_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light_re_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light10_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light11_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light11_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light12_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light12_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light13_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light13_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light14_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light14_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light15_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light15_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light16_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\light16_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\Llight_r7_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\metal_f0_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\metal_f0_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\metal_f2_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\metal_f2_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\metal_p2_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\metal_p2_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\metal_pl_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\metal_pl_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\mosaic_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\mosaic_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\mosaic_a4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\music16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\oh_seventies_a4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\oh_seventies_b4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\oh_seventies_c4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\oranges_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\oranges_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\paper_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\paper_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_a4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_aa4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_ac4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_ad4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_ae4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_ag4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_ah4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_ai4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_aj4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_ak4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_al4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_am4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_b4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_c4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_de4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_e4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_f4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_g4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_i4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_j4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_k4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_l4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_m4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_n4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_o4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_p4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_q4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_r4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_s4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_t4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_u4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_w4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_x4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_y4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pattern_z4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\plain_a4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\plain_b4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\plain_c4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\plain_d4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\plain_e4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\prism_e2_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\prism_e2_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\prism_e3_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\prism_e3_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\prism_e4_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\prism_e4_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\prism_ef_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\prism_ef_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\psychedelic_green2_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\psychedelic_green4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\psychedelic_orange4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\psychomarble4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\pyramids16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\santa_claus16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\sardines_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\sardines_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\sky1_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\sky2_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\sky2_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\sky3_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\summer16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\sunrise_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\sunrise_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\swamp_thing4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\sylvester16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\textile_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\textile_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\textile2_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\textile2_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\textile3_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\textile3_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\textile4_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\textile4_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\toadskin4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\tomato1_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\tomato1_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\tomato2_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\tomato2_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\trees1_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\trees1_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\trees2_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\trees2_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\trees3_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\trees3_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\trees4_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\trees4_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\vegetables_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\vegetables_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\vegetables2_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\vegetables2_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\vision_c4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\vision_d4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\vision_e4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\wallpaper_c4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\wallpaper_d4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\water1_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\water2_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\water2_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\water3_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\water3_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\water4_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\water4_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\weave1_16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\weave1_4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\wildsky16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Content\Pictures\winterfun16_9.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Setup.cfg
    c:\documents and settings\DAD\Media\Nero\Nero\Content\Setup.exe
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\CoverDes.exe.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\covered-chs.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\covered-cht.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\covered-csy.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\covered-dan.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\covered-deu.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\covered-ell.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\covered-esl.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\covered-esp.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\covered-fin.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\covered-fra.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\covered-hun.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\covered-ita.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\covered-jpn.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\covered-kor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\covered-nld.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\covered-nor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\covered-plk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\covered-ptb.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\covered-ptg.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\covered-rus.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\covered-sky.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\covered-slv.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\covered-sve.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\covered-tha.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\covered-trk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\CoverEdCtrl.ocx.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\def.dat.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\NeroCoverDesigner_chs.chm
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\NeroCoverDesigner_cht.chm
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\NeroCoverDesigner_deu.chm
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\NeroCoverDesigner_eng.chm
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\NeroCoverDesigner_esp.chm
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\NeroCoverDesigner_fra.chm
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\NeroCoverDesigner_ita.chm
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\NeroCoverDesigner_jpn.chm
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\NeroCoverDesigner_kor.chm
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\NeroCoverDesigner_nld.chm
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\NeroCoverDesigner_ptb.chm
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\NeroCoverDesigner_ptg.chm
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\NeroCoverDesigner_sve.chm
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\stocks.dat.cab
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\Templates\Audio_Classic.nct
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\Templates\Audio_Content.nct
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\Templates\Audio_Title.nct
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\Templates\Audio_TitleMax.nct
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\Templates\AudioData.nct
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\Templates\AudioData_B&W.nct
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\Templates\AudioData_Classic.nct
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\Templates\AudioData_Content.nct
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\Templates\DanceHiphop.nct
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\Templates\DanceHiphop_B&W.nct
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\Templates\Data.nct
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\Templates\Data_B&W.nct
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\Templates\Data_Classic.nct
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\Templates\Data_Content.nct
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\Templates\Data_Title.nct
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\Templates\Data_TitleMax.nct
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\Templates\disco.nct
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\Templates\jazz.nct
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\Templates\Jazz_Classical.nct
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\Templates\Rock.nct
    c:\documents and settings\DAD\Media\Nero\Nero\CoverDesigner\Templates\Vocal.nct
    c:\documents and settings\DAD\Media\Nero\Nero\DirectX\BDA.cab
    c:\documents and settings\DAD\Media\Nero\Nero\DirectX\BDANT.cab
    c:\documents and settings\DAD\Media\Nero\Nero\DirectX\BDAXP.cab
    c:\documents and settings\DAD\Media\Nero\Nero\DirectX\DirectX.cab
    c:\documents and settings\DAD\Media\Nero\Nero\DirectX\DSETUP.dll
    c:\documents and settings\DAD\Media\Nero\Nero\DirectX\dsetup32.dll
    c:\documents and settings\DAD\Media\Nero\Nero\DirectX\dxnt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\DirectX\dxsetup.exe
    c:\documents and settings\DAD\Media\Nero\Nero\DirectX\ManagedDX.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\i386\InCD.exe
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\i386\incdapi.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\i386\InCDFat.sys.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\i386\InCDFatRec.sys.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\i386\InCDfs.sys.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\i386\InCDpass.sys.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\i386\InCDrec.sys.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\i386\InCDrm.sys
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\i386\InCDsrv.exe.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\i386\SrvError.Log.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\InCD\dma.bin.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\InCD\Error.log.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\InCD\gaa.bin.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\InCD\InCD 4 - FAQ.html.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\InCD\InCD_chs.chm
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\InCD\InCD_cht.chm
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\InCD\InCD_deu.chm
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\InCD\InCD_eng.chm
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\InCD\InCD_esp.chm
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\InCD\InCD_fra.chm
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\InCD\InCD_ita.chm
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\InCD\InCD_jpn.chm
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\InCD\InCD_kor.chm
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\InCD\InCD_nld.chm
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\InCD\InCD_ptb.chm
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\InCD\InCD_ptg.chm
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\InCD\InCD_sve.chm
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\InCD\incd1252.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\InCD\lgc.bin.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\InCD\shared.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\Redist\mfc42.dll
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\Redist\msvcrt.dll
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\Redist\ShFolder.exe
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\Setup.cfg
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\Setup.exe
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\Setup\Eula_chs.txt
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\Setup\Eula_cht.txt
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\Setup\Eula_deu.txt
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\Setup\Eula_eng.txt
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\Setup\Eula_esp.txt
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\Setup\Eula_fra.txt
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\Setup\Eula_ita.txt
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\Setup\Eula_jpn.txt
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\Setup\Eula_kor.txt
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\Setup\Eula_nld.txt
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\Setup\Eula_ptg.txt
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\Setup\Eula_sve.txt
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\Setup\shortcut.dll
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\Sharedi386\InCDL.exe.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\Sharedi386\incdshx.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\w9x\bsudf.vxd.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\w9x\InCD.exe
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\w9x\incdapi.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\w9x\incdfs.vxd.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\w9x\incdpass.vxd.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD 4\w9x\InCDrm.vxd
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\i386\InCD.exe
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\i386\incdapi.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\i386\InCDFat.sys.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\i386\InCDFatRec.sys.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\i386\InCDfs.sys.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\i386\InCDpass.sys.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\i386\InCDrec.sys.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\i386\InCDrm.sys
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\i386\InCDsrv.exe
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\InCD\incd1252.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\InCD\shared.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\Redist\mfc42.dll
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\Redist\msvcrt.dll
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\Setup.cfg
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\Setup.exe
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\Setup\Eula_chs.txt
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\Setup\Eula_cht.txt
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\Setup\Eula_deu.txt
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\Setup\Eula_eng.txt
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\Setup\Eula_esp.txt
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\Setup\Eula_fra.txt
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\Setup\Eula_ita.txt
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\Setup\Eula_jpn.txt
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\Setup\Eula_kor.txt
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\Setup\Eula_nld.txt
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\Setup\Eula_ptg.txt
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\Setup\Eula_sve.txt
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\Sharedi386\incdshx.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\W9x\InCDpard.vxd
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\W9x\InCDrm.vxd
    c:\documents and settings\DAD\Media\Nero\Nero\InCD Reader\W9x\InCDudfr.vxd
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\BackItUp-Chs.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\BackItUp-Cht.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\BackItUp-Csy.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\BackItUp-Dan.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\BackItUp-Deu.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\BackItUp-Ell.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\BackItUp-Esl.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\BackItUp-Esp.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\BackItUp-Fin.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\BackItUp-Fra.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\BackItUp-Hun.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\BackItUp-Ita.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\BackItUp-Jpn.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\BackItUp-Kor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\BackItUp-Nld.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\BackItUp-Nor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\BackItUp-Plk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\BackItUp-Ptb.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\BackItUp-Ptg.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\BackItUp-Rus.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\BackItUp-Sky.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\BackItUp-Slv.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\BackItUp-Sve.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\BackItUp-Tha.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\BackItUp-Trk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\BackItUp.exe.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBJ-Chs.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBJ-Cht.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBJ-Csy.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBJ-Dan.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBJ-Deu.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBJ-Ell.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBJ-Esl.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBJ-Esp.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBJ-Fin.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBJ-Fra.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBJ-Hun.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBJ-Ita.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBJ-Jpn.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBJ-Kor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBJ-Nld.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBJ-Nor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBJ-Plk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBJ-Ptb.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBJ-Ptg.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBJ-Rus.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBJ-Sky.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBJ-Slv.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBJ-Sve.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBJ-Tha.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBJ-Trk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBJ.exe.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBR-Chs.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBR-Cht.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBR-Csy.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBR-Dan.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBR-Deu.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBR-Ell.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBR-Esl.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBR-Esp.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBR-Fin.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBR-Fra.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBR-Hun.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBR-Ita.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBR-Jpn.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBR-Kor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBR-Nld.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBR-Nor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBR-Plk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBR-Ptb.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBR-Ptg.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBR-Rus.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBR-Sky.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBR-Slv.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBR-Sve.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBR-Tha.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBR-Trk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NBR.exe.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NeroBackItUp_Chs.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NeroBackItUp_Cht.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NeroBackItUp_Deu.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NeroBackItUp_eng.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NeroBackItUp_Esp.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NeroBackItUp_Fra.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NeroBackItUp_Ita.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NeroBackItUp_Jpn.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NeroBackItUp_Kor.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NeroBackItUp_Nld.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NeroBackItUp_Ptb.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NeroBackItUp_Ptg.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero BackItUp\NeroBackItUp_Sve.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\EffectCtrl.ocx.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\NeroSoundTrax_chs.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\NeroSoundTrax_cht.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\NeroSoundTrax_deu.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\NeroSoundTrax_eng.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\NeroSoundTrax_esp.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\NeroSoundTrax_fra.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\NeroSoundTrax_ita.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\NeroSoundTrax_jpn.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\NeroSoundTrax_kor.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\NeroSoundTrax_nld.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\NeroSoundTrax_ptb.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\NeroSoundTrax_ptg.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\SoundTrax-Chs.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\SoundTrax-Cht.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\SoundTrax-Csy.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\SoundTrax-Dan.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\SoundTrax-Deu.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\SoundTrax-Ell.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\SoundTrax-Esl.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\SoundTrax-Esp.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\SoundTrax-Fin.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\SoundTrax-Fra.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\SoundTrax-Hun.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\SoundTrax-Ita.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\SoundTrax-Jpn.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\SoundTrax-Kor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\SoundTrax-Nld.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\SoundTrax-Nor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\SoundTrax-Plk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\SoundTrax-Ptb.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\SoundTrax-Ptg.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\SoundTrax-Rus.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\SoundTrax-Sky.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\SoundTrax-Slv.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\SoundTrax-Sve.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\SoundTrax-Tha.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\SoundTrax-Trk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\nero soundtrax\SoundTrax.exe.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero StartSmart\NeroStartSmart.exe.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero StartSmart\NeroStartSmart_chs.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero StartSmart\NeroStartSmart_cht.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero StartSmart\NeroStartSmart_deu.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero StartSmart\NeroStartSmart_eng.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero StartSmart\NeroStartSmart_esp.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero StartSmart\NeroStartSmart_fra.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero StartSmart\NeroStartSmart_ita.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero StartSmart\NeroStartSmart_jpn.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero StartSmart\NeroStartSmart_kor.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero StartSmart\NeroStartSmart_nld.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero StartSmart\NeroStartSmart_ptb.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero StartSmart\NeroStartSmart_ptg.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero StartSmart\NeroStartSmart_sve.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Toolkit\CDSpeed.exe.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Toolkit\CDSpeed_eng.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Toolkit\DriveSpeed.exe.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Toolkit\hwinfo.exe.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Toolkit\InfoTool.exe.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\AudioControls2.ocx.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\Axis.ocx.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\DXBridge.wpl.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\DXEnum.exe.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\LEDMeter.ocx.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\NeroWaveEditor_chs.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\NeroWaveEditor_cht.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\NeroWaveEditor_deu.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\NeroWaveEditor_eng.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\NeroWaveEditor_esp.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\NeroWaveEditor_fra.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\NeroWaveEditor_ita.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\NeroWaveEditor_jpn.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\NeroWaveEditor_kor.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\NeroWaveEditor_nld.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\NeroWaveEditor_ptb.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\NeroWaveEditor_ptg.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\NeroWaveEditor_sve.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\Presets\1e61b927-8c5044d4-ae889c51-dd586cd3.pre.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\Presets\2c7682e2-d38b40b0-afd3ab3f-1119f089.pre.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\Presets\36b69eab-4da7410e-a9233458-ff920a91.pre.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\Presets\3e837f70-d5764187-951f9de3-34cf0129.pre.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\Presets\53e09fcc-6dc04140-9f962ece-93584bc.pre.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\Presets\541c03d3-cbfb40c0-b0385740-afec9f4.pre.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\Presets\5d1f0052-f8114a9f-9deea25e-39d99e88.pre.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\Presets\6073de43-6e416f-90412ea3-2b56d0af.pre.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\Presets\73a712b4-d614426e-bd00e28a-2680e483.pre.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\Presets\73abe042-a4514a93-853113e3-8a42a686.pre.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\Presets\7c25acb5-fb1c458e-87732cad-5b483c26.pre.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\Presets\8c3d0948-7044dc-8325bbcd-3a3a56ce.pre.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\Presets\9568266b-fc044b76-aad47a1d-2a20fe2c.pre.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\Presets\9ccd71-dd314df9-b871a1b2-adb7d13c.pre.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\Presets\9d61817f-45664ed8-9445daa0-a46641de.pre.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\Presets\a1d2638d-b23f429f-b0afdee5-a3350131.pre.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\Presets\ac92b519-53b641d6-89c2ba98-44554b2c.pre.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\Presets\b12dd394-8ac74eb1-95c9d1ec-2bf2ee19.pre.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\Presets\b18df606-87964fc1-8b5c6414-bbe887a3.pre.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\Presets\c62798c7-f50a4226-a88470d-37015a98.pre.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\Presets\d8684a6c-a1a14e4a-93c59908-d63ba37e.pre.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\Presets\d9608ef8-5d0d4927-a0091465-535f57ed.pre.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\Presets\e450dd9d-ff584493-9bfcd356-9d10547c.pre.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\Presets\fed38076-c8f547a7-9f8e0da5-8e44486.pre.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\vplugins-chs.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\vplugins-cht.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\vplugins-csy.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\vplugins-dan.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\vplugins-deu.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\vplugins-ell.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\vplugins-esl.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\vplugins-esp.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\vplugins-fin.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\vplugins-fra.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\vplugins-hun.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\vplugins-ita.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\vplugins-jpn.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\vplugins-kor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\vplugins-nld.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\vplugins-nor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\vplugins-plk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\vplugins-ptb.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\vplugins-ptg.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\vplugins-rus.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\vplugins-sky.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\vplugins-slv.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\vplugins-sve.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\vplugins-tha.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\vplugins-trk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\vPlugIns.wpl.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\VSTBridge.wpl.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\waveedit-chs.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\waveedit-cht.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\waveedit-csy.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\waveedit-dan.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\waveedit-deu.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\waveedit-ell.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\waveedit-esl.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\waveedit-esp.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\waveedit-fin.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\waveedit-fra.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\waveedit-hun.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\waveedit-ita.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\waveedit-jpn.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\waveedit-kor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\waveedit-nld.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\waveedit-nor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\waveedit-plk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\waveedit-ptb.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\waveedit-ptg.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\waveedit-rus.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\waveedit-sky.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\waveedit-slv.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\waveedit-sve.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\waveedit-tha.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\waveedit-trk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\waveedit.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero Wave Editor\WaveEdit.exe.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\AudioPluginMgr.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Boo.wav.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\CDCopy.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\CDI\CDI_IMAG.RTF.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\CDI\CDI_TEXT.FNT.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\CDI\CDI_VCD.APP.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\CDI\CDI_VCD.CFG
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\cdr100.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\cdr50s.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\CDROM.CFG.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\CDROM.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\cdu920.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\cr2200cs.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\DingDong.wav.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\DosBootimage.IMA.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Drweb32.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\DRWEBASE.VDB.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\DVDREALLOC.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Dws114x.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Equalize.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\FATImporter.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\GENCUSH.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Generatr.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\GenFAT.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\geniso.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\GenPCHy.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\GenUDF.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\image.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\ImageGen.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\ims.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\ISOFS.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\KARAOKE.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\MMC.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\MPGEnc.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeHDBlkAccess.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeMP3Dmo.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeMP3Hlp.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\nero.exe
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nero.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\neroAPI.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroBurningRom_chs.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroBurningRom_cht.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroBurningRom_deu.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroBurningRom_eng.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroBurningRom_esp.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroBurningRom_fra.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroBurningRom_ita.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroBurningRom_jpn.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroBurningRom_kor.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroBurningRom_nld.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroBurningRom_ptb.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroBurningRom_ptg.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroBurningRom_sve.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\nerocd95.vxd.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerochs.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerochs.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerocht.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerocht.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroCmd.exe.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroCom.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerocsy.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerocsy.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerodan.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerodan.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\neroDB.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerodeu.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerodeu.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Neroell.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Neroell.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\neroErr.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Neroesl.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Neroesl.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Neroesp.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Neroesp.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroExpress_chs.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroExpress_cht.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroExpress_deu.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroExpress_eng.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroExpress_esp.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroExpress_fra.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroExpress_ita.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroExpress_jpn.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroExpress_kor.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroExpress_nld.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroExpress_ptb.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroExpress_ptg.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroExpress_sve.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerofin.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerofin.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerofra.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerofra.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerohun.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerohun.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Neroita.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Neroita.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerojpn.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerojpn.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerokor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerokor.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeroNet.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Neronld.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Neronld.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Neronor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Neronor.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Neroplk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Neroplk.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Neroptb.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Neroptb.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Neroptg.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Neroptg.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerorus.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerorus.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\neroscsi.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\neroshx.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerosky.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerosky.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Neroslv.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Neroslv.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerosve.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerosve.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerotha.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerotha.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerotrk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Nerotrk.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\neRSDB.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NetRecorder.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NeVCDEngine.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\newtrf.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\nres_dan.msg.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\nres_deu.msg.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\nres_eng.msg.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\nres_esp.msg.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\nres_fin.msg.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\nres_fra.msg.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\nres_hun.msg.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\nres_ita.msg.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\nres_jpn.msg.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\nres_nld.msg.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\nres_nor.msg.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\nres_ptg.msg.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\nres_rus.msg.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\nres_sve.msg.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\nres_trk.msg.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\nrestore.cfg.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\NRESTORE.EXE.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\READHD16.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\ReadHD32.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\ro1420c.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\TMPVImporter.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Trumpet1.wav.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\UDFImporter.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\Uninstall\UNNero.cfg
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\VCDMenu.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\VMPEGEnc.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\VMPEGEncNDX.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Nero\WNASPI32.DLL
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Redist\50comupd.exe
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Redist\gdiplus.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Redist\mfc42.DLL
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Redist\MSVCP60.DLL
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Redist\msvcrt.dll
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Redist\shfolder.exe
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Redist\WMFADist.exe
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Redist\wmfdist.exe
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\setup\Eula_chs.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\setup\Eula_cht.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\setup\Eula_deu.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\setup\Eula_eng.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\setup\Eula_esp.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\setup\Eula_fra.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\setup\Eula_ita.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\setup\Eula_jpn.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\setup\Eula_kor.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\setup\Eula_nld.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\setup\Eula_ptg.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\setup\Eula_sve.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\setup\shortcut.dll
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Setupx.cfg
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\Setupx.exe
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\System\ImagX7.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\System\ImagXpr7.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\System\ImagXR7.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\System\ImagXRA7.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\System\NeroCheck.exe.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\System\TwnLib20.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\WMPBurn\NeroBurnPlugin.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero 6\WMPBurn\WMPBurn.exe.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero BurnRights\NeroBurnRights\NeroBurnRights.cpl.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero BurnRights\NeroBurnRights\NeroBurnRights.exe
    c:\documents and settings\DAD\Media\Nero\Nero\Nero BurnRights\NeroBurnRights\NeroBurnRights_deu.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero BurnRights\NeroBurnRights\NeroBurnRights_eng.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero BurnRights\NeroBurnRights\NeroBurnRightsHelp.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero BurnRights\NeroBurnRights\NeroCo.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero BurnRights\Setup.cfg
    c:\documents and settings\DAD\Media\Nero\Nero\Nero BurnRights\Setup.exe
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\CDCopy.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\cdr100.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\cdr50s.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\CDROM.CFG.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\CDROM.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\cdu920.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\cr2200cs.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\Dws114x.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\Generatr.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\geniso.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\image.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\ImageGen.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\ims.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\ISOFS.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\MMC.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\nero.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\NeroAPI.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\nerocd95.vxd.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\Nerochs.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\neroCht.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\neroCsy.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\nerodan.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\nerodeu.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\neroell.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\NeroErr.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\neroesl.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\NEROESP.TXT.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\neroFin.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\nerofra.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\NEROHUN.TXT.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\neroita.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\nerojpn.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\NeroKor.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\neronld.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\NERONOR.TXT.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\neroPlk.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\neroPtg.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\nerorus.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\neroscsi.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\neroSky.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\neroSlv.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\nerosve.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\nerotha.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\nerotrk.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\NeRSDB.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\newtrf.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\ro1420c.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\api\WNASPI32.DLL.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\dBicons.bmp.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\default.BMP.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\default.nps.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\EQUA_ENG.PRF.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\NeroMediaPlayer.exe
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\nmp.spr.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\NmpChs.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\NmpCht.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\NmpDan.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Nmpdeu.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\NmpEll.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\NmpEsp.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\NmpFin.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\NmpFra.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\NmpHun.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\NmpIta.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\NmpJpn.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\NmpKor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\NmpNld.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\NmpNor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\NmpPlk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\NmpPtg.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\NmpRom.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\NmpRus.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\NmpSlv.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\NmpSve.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\NmpUkr.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\AudioPluginMgr.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\CompChs.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\CompCht.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\CompDan.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\CompDeu.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\CompEll.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\CompEsp.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\CompFin.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\CompFra.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\CompHun.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\Compilation.exe.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\CompIta.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\CompJpn.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\CompKor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\CompMem.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\CompNld.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\CompNor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\CompPlk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\CompPtg.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\CompRom.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\CompRus.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\CompSlv.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\CompSve.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\CompUkr.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\GDIRES16.DLL.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\GdiRes32.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\InetCdDb.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\NeroDb.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Services\NMPEqlz.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Skins\NMPStartSmart.bmp.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Skins\NMPStartSmart.nps.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\Stream.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\NeroMediaPlayer\video.ani.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\Redist\mfc42.DLL
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\Redist\msvcp60.DLL
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\Redist\msvcrt.DLL
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\Redist\ShFolder.exe
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\Redist\WMFADist.exe
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\Redist\wmfdist.exe
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\Setup\Eula_chs.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\Setup\Eula_cht.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\Setup\Eula_deu.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\Setup\Eula_eng.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\Setup\Eula_esp.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\Setup\Eula_fra.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\Setup\Eula_ita.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\Setup\Eula_jpn.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\Setup\Eula_kor.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\Setup\Eula_nld.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\Setup\Eula_ptg.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\Setup\Eula_sve.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\Setup\ShortCut.dll
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\Setupx.cfg
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Media Player\Setupx.exe
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\BasicFilters.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\FImgPlg.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\freeimage-license.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\FreeImage.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\NeroPhotoSnap_Chs.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\NeroPhotoSnap_Cht.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\NeroPhotoSnap_deu.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\NeroPhotoSnap_Eng.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\NeroPhotoSnap_esp.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\NeroPhotoSnap_fra.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\NeroPhotoSnap_ita.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\NeroPhotoSnap_jpn.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\NeroPhotoSnap_kor.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\NeroPhotoSnap_nld.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\NeroPhotoSnap_sve.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\NSPluginMgr.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoEffects.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoEffectsLib.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnap-Chs.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnap-Cht.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnap-Csy.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnap-Dan.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnap-Deu.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnap-Ell.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnap-Esl.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnap-Esp.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnap-Fin.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnap-Fra.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnap-Hun.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnap-Ita.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnap-Jpn.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnap-Kor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnap-Nld.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnap-Nor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnap-Plk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnap-Ptb.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnap-Ptg.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnap-Rus.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnap-Sky.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnap-Slv.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnap-Sve.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnap-Tha.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnap-Trk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnap.exe.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnapViewer-Chs.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnapViewer-Cht.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnapViewer-Csy.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnapViewer-Dan.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnapViewer-Deu.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnapViewer-Ell.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnapViewer-Esl.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnapViewer-Esp.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnapViewer-Fin.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnapViewer-Fra.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnapViewer-Hun.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnapViewer-Ita.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnapViewer-Jpn.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnapViewer-Kor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnapViewer-Nld.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnapViewer-Nor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnapViewer-Plk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnapViewer-Ptb.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnapViewer-Ptg.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnapViewer-Rus.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnapViewer-Sky.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnapViewer-Slv.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnapViewer-Sve.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnapViewer-Tha.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnapViewer-Trk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\PhotoSnapViewer.exe.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Nero PhotoSnap\XImgPlg.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\AMCUIBase-chs.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\AMCUIBase-cht.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\AMCUIBase-csy.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\AMCUIBase-dan.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\AMCUIBase-deu.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\AMCUIBase-ell.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\AMCUIBase-esl.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\AMCUIBase-esp.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\AMCUIBase-fin.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\AMCUIBase-fra.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\AMCUIBase-hun.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\AMCUIBase-ita.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\AMCUIBase-jpn.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\AMCUIBase-kor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\AMCUIBase-nld.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\AMCUIBase-nor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\AMCUIBase-plk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\AMCUIBase-ptb.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\AMCUIBase-ptg.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\AMCUIBase-rus.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\AMCUIBase-sky.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\AMCUIBase-slv.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\AMCUIBase-sve.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\AMCUIBase-tha.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\AMCUIBase-trk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\Buttons\5pointstar_Button.png
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\Buttons\8pointstar_Button.png
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\Buttons\Clippededges_Button.png
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\Buttons\DVD_Button_0.png
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\Buttons\DVD_Button_1.png
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\Buttons\DVD_Button_2.png
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\Buttons\DVD_Button_3.png
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\Buttons\DVD_Button_4.png
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\Buttons\DVD_Button_5.png
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\Buttons\DVD_Button_6.png
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\Buttons\Ebonyframe_Button.png
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\Buttons\frame_jagged.png
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\Buttons\frame_metal.png
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\Buttons\frame_oval.png
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\Buttons\frame_pyramiden.png
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\Buttons\frame_raw.png
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\Buttons\frame_starfish.png
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\Buttons\frame_winter.png
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\Buttons\Hexagon_Button.png
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\Buttons\Marble_Button.png
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\Buttons\PointFrame_Button.png
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\Buttons\Pointsquare_Button.png
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\Buttons\Quarter1_Button.png
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\Buttons\Quarter2_Button.png
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\Buttons\Quarter3_Button.png
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\Buttons\Quarter4_Button.png
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\Buttons\Woodframe_Button.png
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\DVDUI-chs.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\DVDUI-cht.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\DVDUI-csy.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\DVDUI-dan.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\DVDUI-deu.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\DVDUI-ell.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\DVDUI-esl.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\DVDUI-esp.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\DVDUI-fin.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\DVDUI-fra.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\DVDUI-hun.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\DVDUI-ita.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\DVDUI-jpn.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\DVDUI-kor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\DVDUI-nld.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\DVDUI-nor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\DVDUI-plk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\DVDUI-ptb.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\DVDUI-ptg.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\DVDUI-rus.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\DVDUI-sky.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\DVDUI-slv.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\DVDUI-sve.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\DVDUI-tha.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\DVDUI-trk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\ExpressUI-chs.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\ExpressUI-cht.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\ExpressUI-csy.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\ExpressUI-dan.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\ExpressUI-deu.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\ExpressUI-ell.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\ExpressUI-esl.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\ExpressUI-esp.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\ExpressUI-fin.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\ExpressUI-fra.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\ExpressUI-hun.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\ExpressUI-ita.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\ExpressUI-jpn.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\ExpressUI-kor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\ExpressUI-nld.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\ExpressUI-nor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\ExpressUI-plk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\ExpressUI-ptb.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\ExpressUI-ptg.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\ExpressUI-rus.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\ExpressUI-sky.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\ExpressUI-slv.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\ExpressUI-sve.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\ExpressUI-tha.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\ExpressUI-trk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\GCFX-chs.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\GCFX-cht.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\GCFX-csy.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\GCFX-dan.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\GCFX-deu.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\GCFX-ell.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\GCFX-esl.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\GCFX-esp.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\GCFX-fin.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\GCFX-fra.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\GCFX-hun.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\GCFX-ita.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\GCFX-jpn.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\GCFX-kor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\GCFX-nld.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\GCFX-nor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\GCFX-plk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\GCFX-ptb.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\GCFX-ptg.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\GCFX-rus.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\GCFX-sky.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\GCFX-slv.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\GCFX-sve.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\GCFX-tha.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\GCFX-trk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\MenuTemplates\MTDefault.bin
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\MenuTemplates\Pictures\island4_3.jpg
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\CDI\CDI_IMAG.RTF.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\CDI\CDI_TEXT.FNT.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\CDI\CDI_VCD.APP.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\CDI\CDI_VCD.CFG
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\cdr100.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\cdr50s.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\CDROM.CFG.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\CDROM.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\cdu920.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\cr2200cs.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\DVDREALLOC.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\Dws114x.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\gencush.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\Generatr.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\geniso.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\GenUDF.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\image.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\ImageGen.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\ims.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\ISOFS.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\MMC.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\nero.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\NeroAPI.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\Nerochs.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\NeroCht.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\neroCsy.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\nerodan.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\nerodeu.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\neroEll.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\NeroErr.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\NeroEsl.TXT.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\NEROESP.TXT.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\neroFin.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\nerofra.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\NEROHUN.TXT.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\neroita.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\nerojpn.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\NeroKor.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\neronld.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\NERONOR.TXT.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\neroPlk.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\neroPtb.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\neroPtg.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\nerorus.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\neroscsi.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\neroSky.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\neroSlv.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\neroSve.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\NeroTha.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\NeroTrk.txt.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\NeRSDB.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\NeVCDEngine.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\newtrf.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\ro1420c.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\TMPVImporter.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\UDFImporter.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroFiles\WNASPI32.DLL.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVision-chs.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVision-cht.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVision-csy.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVision-dan.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVision-deu.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVision-ell.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVision-esl.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVision-esp.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVision-fin.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVision-fra.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVision-hun.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVision-ita.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVision-jpn.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVision-kor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVision-nld.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVision-nor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVision-plk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVision-ptb.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVision-ptg.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVision-rus.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVision-sky.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVision-slv.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVision-sve.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVision-tha.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVision-trk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVisionExpress_CHS.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVisionExpress_CHT.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVisionExpress_DEU.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVisionExpress_ENG.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVisionExpress_ESP.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVisionExpress_FRA.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVisionExpress_ITA.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVisionExpress_JPN.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVisionExpress_Kor.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVisionExpress_NLD.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVisionExpress_PTB.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVisionExpress_PTG.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeroVisionExpress_SVE.chm
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeVideoFX-chs.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeVideoFX-cht.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeVideoFX-deu.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeVideoFX-esp.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeVideoFX-fra.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeVideoFX-ita.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeVideoFX-jpn.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeVideoFX-kor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeVideoFX-nld.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\NeVideoFX-ptg.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\VCDUI-chs.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\VCDUI-cht.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\VCDUI-csy.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\VCDUI-dan.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\VCDUI-deu.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\VCDUI-ell.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\VCDUI-esl.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\VCDUI-esp.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\VCDUI-fin.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\VCDUI-fra.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\VCDUI-hun.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\VCDUI-ita.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\VCDUI-jpn.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\VCDUI-kor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\VCDUI-nld.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\VCDUI-nor.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\VCDUI-plk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\VCDUI-ptb.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\VCDUI-ptg.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\VCDUI-rus.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\VCDUI-sky.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\VCDUI-slv.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\VCDUI-sve.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\VCDUI-tha.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\VCDUI-trk.nls.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\Video\Black.avi.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\AMCDocBase.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\AMCDOM.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\AMCLib.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\AMCUIBase.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\DVDBlockAcc.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\DVDDoc.DLL.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\DVDEngine.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\DVDUI.DLL.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\ExpressDoc.DLL.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\ExpressUI.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\GCCapture.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\GCCore.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\GCFilter.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\GCFX.DLL.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\GCHW.DLL.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\GCHWCfg.DLL.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\GCLib.DLL.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\GCLocale.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\GDIPainter.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\HDCC.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\HTMLGallery.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\MMTools.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\NeAnalyzer.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\NeMediaOut.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\NeroVision.exe
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\NeroVisionAPI.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\NeVideoFX.bitmaps.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\NeVideoFX.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\NeVideoFXW.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\NVDV.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\VCDDoc.DLL.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\VCDEngine.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w2k\VCDUI.DLL.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\AMCDocBase.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\AMCDOM.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\AMCLib.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\AMCUIBase.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\DVDBlockAcc.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\DVDDoc.DLL.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\DVDEngine.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\DVDUI.DLL.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\ExpressDoc.DLL.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\ExpressUI.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\GCCapture.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\GCCore.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\GCFilter.ax.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\GCFX.DLL.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\GCHW.DLL.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\GCHWCfg.DLL.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\GCLib.DLL.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\GCLocale.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\GDIPainter.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\HDCC.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\HTMLGallery.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\MMTools.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\NeAnalyzer.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\NeMediaOut.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\NeroVision.exe
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\NeroVisionAPI.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\NeVideoFX.bitmaps.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\NeVideoFX.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\NeVideoFXW.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\NVDV.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\VCDDoc.DLL.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\VCDEngine.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\NeroVision\w9x\VCDUI.DLL.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Redist\50comupd.exe
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Redist\gdiplus.DLL.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Redist\MFC71.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Redist\MSVCP60.DLL
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Redist\msvcp71.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Redist\msvcr71.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Redist\msvcrt.DLL
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Redist\msxml3.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Redist\msxml3a.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Redist\msxml3r.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Redist\SHFolder.exe
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Redist\wmfdist.exe
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Setup\Eula_chs.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Setup\Eula_cht.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Setup\Eula_deu.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Setup\Eula_eng.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Setup\Eula_esp.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Setup\Eula_fra.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Setup\Eula_ita.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Setup\Eula_jpn.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Setup\Eula_kor.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Setup\Eula_nld.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Setup\Eula_ptg.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Setup\Eula_sve.txt
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Setup\ShortCut.dll
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Setupx.cfg
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\Setupx.exe
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\System\ImagX7.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\System\ImagXpr7.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\System\ImagXR7.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\System\ImagXRA7.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\System\nerocd95.vxd.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\System\oleaut32.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\System\picn20.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\System\stdole2.tlb.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\System\TwnLib20.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero Vision Express\System\TwnLib4.dll.cab
    c:\documents and settings\DAD\Media\Nero\Nero\Nero.ico
    c:\documents and settings\DAD\Media\Nero\Nero\NeroPhotoShowExpress\data\nrps_express_cd_0214.exe
    c:\documents and settings\DAD\Media\Nero\Nero\NeroPhotoShowExpress\data\nrps_intl_0214_LANG_DUTCH.exe
    c:\documents and settings\DAD\Media\Nero\Nero\NeroPhotoShowExpress\data\nrps_intl_0214_LANG_ENGLISH.exe
    c:\documents and settings\DAD\Media\Nero\Nero\NeroPhotoShowExpress\data\nrps_intl_0214_LANG_FRENCH.exe
    c:\documents and settings\DAD\Media\Nero\Nero\NeroPhotoShowExpress\data\nrps_intl_0214_LANG_GERMAN.exe
    c:\documents and settings\DAD\Media\Nero\Nero\NeroPhotoShowExpress\data\nrps_intl_0214_LANG_ITALIAN.exe
    c:\documents and settings\DAD\Media\Nero\Nero\NeroPhotoShowExpress\data\nrps_intl_0214_LANG_JAPANESE.exe
    c:\documents and settings\DAD\Media\Nero\Nero\NeroPhotoShowExpress\data\nrps_intl_0214_LANG_KOREAN.exe
    c:\documents and settings\DAD\Media\Nero\Nero\NeroPhotoShowExpress\data\nrps_intl_0214_LANG_PORTUGUESE.exe
    c:\documents and settings\DAD\Media\Nero\Nero\NeroPhotoShowExpress\data\nrps_intl_0214_LANG_SIMPCHINESE.exe
    c:\documents and settings\DAD\Media\Nero\Nero\NeroPhotoShowExpress\data\nrps_intl_0214_LANG_SPANISH.exe
    c:\documents and settings\DAD\Media\Nero\Nero\NeroPhotoShowExpress\data\nrps_intl_0214_LANG_SWEDISH.exe
    c:\documents and settings\DAD\Media\Nero\Nero\NeroPhotoShowExpress\data\nrps_intl_0214_LANG_TRADCHINESE.exe
    c:\documents and settings\DAD\Media\Nero\Nero\NeroPhotoShowExpress\setup.exe
    c:\documents and settings\DAD\Media\Nero\Nero\Redist\Images\Bckg\backgrnd.bmp
    c:\documents and settings\DAD\Media\Nero\Nero\Redist\Images\Bckg\nero.bmp
    c:\documents and settings\DAD\Media\Nero\Nero\Redist\Images\Bckg\unbackgrnd.bmp
    c:\documents and settings\DAD\Media\Nero\Nero\Redist\Images\Info\Cool_Main.png
    c:\documents and settings\DAD\Media\Nero\Nero\Redist\Images\Info\Main.png
    c:\documents and settings\DAD\Media\Nero\Nero\Redist\Images\Info\Prog.png
    c:\documents and settings\DAD\Media\Nero\Nero\Redist\Images\Logo\Default\1.png
    c:\documents and settings\DAD\Media\Nero\Nero\Redist\Images\Logo\Nero\1.png
    c:\documents and settings\DAD\Media\Nero\Nero\Redist\Images\Logo\Nero\2.png
    c:\documents and settings\DAD\Media\Nero\Nero\Redist\Images\Logo\Nero\3.png
    c:\documents and settings\DAD\Media\Nero\Nero\Redist\Images\Logo\Nero\4.png
    c:\documents and settings\DAD\Media\Nero\Nero\Redist\Images\Logo\Nero\5.png
    c:\documents and settings\DAD\Media\Nero\Nero\Redist\Images\Logo\Nero\6.png
    c:\documents and settings\DAD\Media\Nero\Nero\Redist\Images\Logo\Nero\7.png
    c:\documents and settings\DAD\Media\Nero\Nero\Redist\Images\Logo\Nero\9.png
    c:\documents and settings\DAD\Media\Nero\Nero\Redist\Images\Logo\Nero\99.png
    c:\documents and settings\DAD\Media\Nero\Nero\Redist\Images\Logo\NMP\1.png
    c:\documents and settings\DAD\Media\Nero\Nero\Redist\Images\Logo\NPSE\1.png
    c:\documents and settings\DAD\Media\Nero\Nero\Redist\Images\Logo\NVE\1.png
    c:\documents and settings\DAD\Media\Nero\Nero\Redist\Images\Logo\NVE\1a_NVE2_SE.png
    c:\documents and settings\DAD\Media\Nero\Nero\Redist\Images\Logo\NVE\4.png
    c:\documents and settings\DAD\Media\Nero\Nero\Redist\Images\Logo\NVE\6.png
    c:\documents and settings\DAD\Media\Nero\Nero\Redist\trch._ex
    c:\documents and settings\DAD\Media\Nero\Nero\setup.exe
    c:\documents and settings\DAD\Media\Nero\Nero\setupx.exe
    c:\documents and settings\DAD\Media\Nero\Nero\Thumbs.db
    c:\documents and settings\DAD\Media\Nero\Readme\readme.txt
    c:\documents and settings\DAD\Media\Nero\Thumbs.db
    c:\documents and settings\DAD\Media\Nero\UNNero.exe
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\2507RM.exe
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\delentry.exe
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\deluidrv.exe
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\genedisk.inf
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\genestor.pdr
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\geneuide.inf
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\geneuide.sys
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\PL2507MON.exe
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\PL2507S.inf
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\PL2507S.pdr
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\PL2507U.INF
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\PL2507U.sys
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\readme.txt
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\setup.exe
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\TPP200.INF
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\TPP200.SYS
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\TPP300.BAK
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\TPP300.INF
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\TPP300.INF.bak
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\TPP300.SYS
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\TPP725.INF
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\TPP725.SYS
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\TPPALDR.EXE
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\TPPIOSMP.SYS
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\TPPIOSTB.INF
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\TPPIOSTB.PDR
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\TPPNTTRY.EXE
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\TPPSTRAY.EXE
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\TPPUI16.DLL
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\TPPUI32.DLL
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\TPPUN.EXE
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\USB Driver for Windows 98.zip
    c:\documents and settings\DAD\Media\Nero\USB Driver for Windows98\USBMonit.exe
    c:\documents and settings\DAD\Media\Oddments\Copicat\Copicat 1.doc
    c:\documents and settings\DAD\Media\Oddments\Copicat\Copicat 2.doc
    c:\documents and settings\DAD\Media\Oddments\Copicat\Copicat 3.doc
    c:\documents and settings\DAD\Media\Oddments\Copicat\Copicat schematic.doc
    c:\documents and settings\DAD\Media\Oddments\Please set any e.doc
    c:\documents and settings\DAD\Media\Oddments\Terry Wisbey?s TEXAS THUNDER.doc
    c:\documents and settings\DAD\Media\PCI_DS_5_12_8_1792.zip
    c:\documents and settings\DAD\Media\Photo Frame Manual.pdf
    c:\documents and settings\DAD\Media\QuickTime Player.lnk
    c:\documents and settings\DAD\Media\QuickTimeInstaller.exe
    c:\documents and settings\DAD\Media\RCConfig.lnk
    c:\documents and settings\DAD\Media\RealPlayer.exe
    c:\documents and settings\DAD\Media\RealPlayer.lnk
    c:\documents and settings\DAD\Media\SetupDVDDecrypter_3.5.4.0.exe
    c:\documents and settings\DAD\Media\sharp_mdmt180.pdf
    c:\documents and settings\DAD\Media\sharp_mdsr50_manual.pdf
    c:\documents and settings\DAD\Media\Shortcut to JoinVobFiles.exe.lnk
    c:\documents and settings\DAD\Media\Sony DVD Manual.pdf
    c:\documents and settings\DAD\Media\Spotify Installer.exe
    c:\documents and settings\DAD\Media\Spotify.lnk
    c:\documents and settings\DAD\Media\Thumbs.db
    c:\documents and settings\DAD\Media\YouTube Downloader.lnk
    c:\documents and settings\DAD\Media\YouTubeDownloaderSetup32.exe
    c:\windows\desktop
    c:\windows\system32\Dvbpws.dll
    .
    .
    ((((((((((((((((((((((((( Files Created from 2011-07-03 to 2011-08-03 )))))))))))))))))))))))))))))))
    .
    .
    2011-08-02 07:22 . 2011-07-13 03:39 6881616 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\{CDAFA9EA-7FCF-4A0B-A036-FBE1B0A8E09A}\mpengine.dll
    2011-08-01 13:42 . 2011-08-01 21:23 -------- d-----w- C:\WinFast WorkArea
    2011-08-01 13:37 . 2011-08-01 13:38 -------- d-----w- c:\program files\WinFast
    2011-08-01 13:29 . 2006-01-26 17:19 167296 ----a-w- c:\windows\system32\drivers\wfcxvcap.sys
    2011-08-01 13:29 . 2008-04-14 01:12 28672 ----a-w- c:\windows\system32\vidcap.ax
    2011-08-01 13:29 . 2008-04-13 23:12 53760 ----a-w- c:\windows\system32\vfwwdm32.dll
    2011-08-01 13:29 . 2008-04-13 23:12 43008 ----a-w- c:\windows\system32\ksxbar.ax
    2011-08-01 13:29 . 2008-04-14 00:12 91136 ----a-w- c:\windows\system32\kswdmcap.ax
    2011-08-01 13:29 . 2008-04-13 23:12 61952 ----a-w- c:\windows\system32\kstvtune.ax
    2011-08-01 13:28 . 2006-01-26 17:17 10368 ----a-w- c:\windows\system32\drivers\wfcxxbar.sys
    2011-08-01 13:28 . 2009-11-27 16:07 8704 ----a-w- c:\windows\system32\tsbyuv.dll
    2011-08-01 13:28 . 2006-01-26 17:18 21248 ----a-w- c:\windows\system32\drivers\wfcxdtun.sys
    2011-08-01 13:28 . 2008-04-13 23:12 53760 ----a-w- c:\windows\system32\drivers\vfwwdm32.dll
    2011-08-01 13:28 . 2008-04-13 23:12 33280 ----a-w- c:\windows\system32\PsisRndr.ax
    2011-08-01 13:28 . 2008-04-13 23:12 363520 ----a-w- c:\windows\system32\PsisDecd.dll
    2011-07-31 20:26 . 2011-07-31 20:26 -------- d-----w- c:\documents and settings\DAD\Local Settings\Application Data\ArcSoft
    2011-07-31 20:22 . 2011-07-31 20:26 -------- d-----w- c:\documents and settings\DAD\Application Data\ArcSoft
    2011-07-31 20:22 . 2011-07-31 20:25 -------- d-----w- c:\documents and settings\All Users\Application Data\ArcSoft
    2011-07-31 15:11 . 2011-07-31 18:50 -------- d-----w- c:\documents and settings\All Users\Application Data\iolo
    .
    .
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2011-07-30 21:52 . 2010-10-05 08:32 16400 ----a-w- c:\windows\system32\drivers\LNonPnP.sys
    2011-07-13 03:39 . 2009-03-13 17:30 6881616 -c--a-w- c:\documents and settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll
    2011-07-06 18:52 . 2011-06-18 15:55 41272 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2011-07-06 18:52 . 2011-06-18 15:55 22712 ----a-w- c:\windows\system32\drivers\mbam.sys
    2011-06-23 16:55 . 2011-05-21 16:34 413696 ----a-w- c:\windows\system32\wrap_oal.dll
    2011-06-23 16:55 . 2003-03-28 03:24 102400 ----a-w- c:\windows\system32\OpenAL32.dll
    2011-06-21 08:37 . 2011-05-17 07:49 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
    2011-06-02 14:02 . 2003-07-16 20:51 1858944 ----a-w- c:\windows\system32\win32k.sys
    2011-05-31 15:49 . 2003-02-21 03:42 348160 ----a-w- c:\windows\system32\msvcr71.dll
    2011-05-31 15:49 . 2003-03-18 19:14 499712 ----a-w- c:\windows\system32\msvcp71.dll
    2011-05-24 18:14 . 2009-10-02 19:01 222080 -c----w- c:\windows\system32\MpSigStub.exe
    2011-05-10 07:58 . 2011-02-17 09:30 60872 ----a-w- c:\windows\system32\S32EVNT1.DLL
    2011-05-10 07:58 . 2011-02-17 09:30 126584 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS
    2011-03-18 17:53 . 2011-07-30 14:43 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
    .
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-10-18 204288]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2010-06-26 1311312]
    "LifeCam"="c:\program files\Microsoft LifeCam\LifeExp.exe" [2010-12-13 135536]
    "Cmaudio8788GX"="c:\windows\system\HsMgr.exe" [2008-07-11 200704]
    "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
    "WinFastDTV"="c:\program files\WinFast\WFDTV\DTVSchdl.exe" [2006-07-11 69632]
    "WinFast Schedule"="c:\program files\WinFast\WFDTV\WFWIZ.exe" [2006-07-07 348160]
    "TkBellExe"="c:\program files\real\realplayer\update\realsched.exe" [2011-05-31 273544]
    .
    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]
    "DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-02-26 437160]
    .
    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    "tscuninstall"="c:\windows\system32\tscupgrd.exe" [2004-08-04 44544]
    .
    [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
    "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
    2009-09-03 22:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
    2010-05-06 09:29 64592 ----a-w- c:\program files\Common Files\LogiShrd\Bluetooth\LBTWLgn.dll
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
    @="Driver"
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
    @="Service"
    .
    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Bluetooth.lnk]
    backup=c:\windows\pss\Bluetooth.lnkCommon Startup
    HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Quick Search Box
    HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper
    HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg
    HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinFast Schedule
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
    2011-06-06 11:55 937920 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader]
    2005-09-09 00:18 57344 -c--a-w- c:\program files\Adobe\Photoshop Elements 4.0\apdproxy.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Easy-PrintToolBox]
    2004-01-14 01:10 409600 ----a-w- c:\program files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HDDHealth]
    2008-03-03 12:30 1608192 ----a-w- c:\program files\HDD Health\hddhealth.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBJ]
    2005-08-09 14:28 1961984 ------w- c:\program files\Ahead\Nero BackItUp\NBJ.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
    2001-07-09 10:50 155648 ----a-w- c:\windows\system32\NeroCheck.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
    2010-11-29 17:38 421888 ----a-w- c:\program files\QuickTime\QTTask.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
    2005-01-12 02:01 32768 ----a-w- c:\program files\CyberLink\PowerDVD\PDVDServ.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAXPnP]
    2004-10-14 13:42 1404928 -c--a-w- c:\program files\Analog Devices\Core\smax4pnp.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
    2011-07-30 20:45 2424192 ----a-w- c:\program files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
    2011-05-31 15:49 273544 ----a-w- c:\program files\Real\RealPlayer\Update\realsched.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinFastDTV]
    2006-07-11 15:10 69632 ----a-w- c:\program files\WinFast\WFDTV\DTVSchdl.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
    2006-10-18 20:05 204288 ------w- c:\program files\Windows Media Player\wmpnscfg.exe
    .
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall"= 0 (0x0)
    .
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "c:\\Program Files\\Messenger\\msmsgs.exe"=
    "c:\\Program Files\\Spotify\\spotify.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
    "c:\\Program Files\\Microsoft LifeCam\\LifeCam.exe"=
    "c:\\Program Files\\Microsoft LifeCam\\LifeEnC2.exe"=
    "c:\\Program Files\\Microsoft LifeCam\\LifeExp.exe"=
    "c:\\Program Files\\Microsoft LifeCam\\LifeTray.exe"=
    "c:\\Program Files\\Skype\\Phone\\Skype.exe"=
    .
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "5985:TCP"= 5985:TCP:*isabled:Windows Remote Management
    .
    R0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NIS\1206000.01D\symds.sys [10/05/2011 08:58 340088]
    R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NIS\1206000.01D\symefa.sys [10/05/2011 08:58 744568]
    R1 BHDrvx86;BHDrvx86;c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\BASHDefs\20110723.001\BHDrvx86.sys [23/07/2011 01:27 815736]
    R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [17/02/2010 19:25 12872]
    R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [10/05/2010 19:41 67656]
    R1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NIS\1206000.01D\ironx86.sys [10/05/2011 08:58 136312]
    R2 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;c:\program files\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe [18/09/2009 04:54 169312]
    R2 LBeepKE;Logitech Beep Suppression Driver;c:\windows\system32\drivers\LBeepKE.sys [05/10/2010 09:30 10448]
    R2 NIS;Norton Internet Security;c:\program files\Norton Internet Security\Engine\18.6.0.29\ccsvchst.exe [10/05/2011 08:57 130008]
    R2 Norton PC Checkup Application Launcher;Norton PC Checkup Application Launcher;c:\program files\Norton PC Checkup\Engine\2.0.2.543\SymcPCCULaunchSvc.exe [21/02/2010 19:00 120248]
    R2 PCCUJobMgr;Common Client Job Manager Service;c:\program files\Norton PC Checkup\Engine\2.0.2.543\ccSvcHst.exe [21/02/2010 19:00 126392]
    R2 WFCXVCAP;WinFast TV Video Capture Driver;c:\windows\system32\drivers\wfcxvcap.sys [01/08/2011 14:29 167296]
    R2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [03/11/2006 20:19 13592]
    R3 cmudaxp;ASUS Xonar DS Audio Interface;c:\windows\system32\drivers\cmudaxp.sys [23/06/2011 17:56 1498624]
    R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [02/08/2011 08:41 105592]
    R3 IDSxpx86;IDSxpx86;c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\IPSDefs\20110802.030\IDSXpx86.sys [02/08/2011 01:07 355256]
    R3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver;c:\windows\system32\drivers\nx6000.sys [12/03/2011 17:56 30576]
    R3 wfcxdtun;WinFast DTV BDA Tuner/Demod Driver;c:\windows\system32\drivers\wfcxdtun.sys [01/08/2011 14:28 21248]
    R3 wfcxtcap;WinFast DTV BDA Transport Stream Capture Driver;c:\windows\system32\drivers\wfcxtcap.sys [01/08/2011 14:27 15872]
    R3 wfcxxbar;WinFast TV Crossbar Driver;c:\windows\system32\drivers\wfcxxbar.sys [01/08/2011 14:28 10368]
    R3 WFIOCTL;WFIOCTL;c:\program files\WinFast\WFDTV\WFIOCTL.sys [01/08/2011 14:37 9446]
    S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys --> c:\windows\system32\DRIVERS\Lbd.sys [?]
    S2 NPVR Recording Service;NPVR Recording Service;"c:\program files\NPVR\NRecord.exe" --> c:\program files\NPVR\NRecord.exe [?]
    S3 CrucialSMBusScan;CrucialSMBusScan;\??\c:\windows\system32\drivers\CrucialSMBusScan.sys --> c:\windows\system32\drivers\CrucialSMBusScan.sys [?]
    S3 Lavasoft Kernexplorer;Lavasoft helper driver;\??\c:\program files\Lavasoft\Ad-Aware\KernExplorer.sys --> c:\program files\Lavasoft\Ad-Aware\KernExplorer.sys [?]
    S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [16/07/2003 21:47 14336]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    WINRM REG_MULTI_SZ WINRM
    .
    Contents of the 'Scheduled Tasks' folder
    .
    2011-07-24 c:\windows\Tasks\Microsoft_Hardware_Launch_LcBuddy_exe.job
    - c:\program files\Microsoft LifeCam\LcBuddy.exe [2010-12-13 13:37]
    .
    2011-08-03 c:\windows\Tasks\MP Scheduled Scan.job
    - c:\program files\Windows Defender\MpCmdRun.exe [2006-11-03 19:20]
    .
    2011-08-03 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-299502267-1078081533-725345543-1006.job
    - c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 09:47]
    .
    2011-08-03 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-299502267-1078081533-725345543-1006.job
    - c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 09:47]
    .
    .
    ------- Supplementary Scan -------
    .
    uStart Page = hxxp://www.google.co.uk/
    uDefault_Search_URL = hxxp://www.google.com/ie
    uInternet Settings,ProxyOverride = *.local
    uSearchAssistant = hxxp://www.google.com/ie
    uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
    IE: E&xport to Microsoft Excel
    IE: Free YouTube Download - c:\documents and settings\DAD\Application Data\DVDVideoSoftIEHelpers\freeyoutubedownload.htm
    IE: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    TCP: DhcpNameServer = 192.168.1.254
    FF - ProfilePath - c:\documents and settings\DAD\Application Data\Mozilla\Firefox\Profiles\43j3ymf3.default\
    FF - prefs.js: browser.search.selectedEngine - Yahoo! Search
    FF - prefs.js: browser.startup.homepage - hxxp://google.co.uk
    FF - prefs.js: network.proxy.type - 0
    .
    .
    ------- File Associations -------
    .
    JSEFile=NOTEPAD.EXE %1
    .
    - - - - ORPHANS REMOVED - - - -
    .
    HKLM-Run-Cmaudio8788 - cmicnfgp.cpl
    MSConfigStartUp-Adobe Reader Speed Launcher - c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe
    AddRemove-{4AC7B4E7-59B7-4E48-A60D-263C486FC33A}_is1 - c:\program files\iolo\System Checkup\uninstscu.exe
    .
    .
    .
    **************************************************************************
    .
    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover
    Rootkit scan 2011-08-03 10:43
    Windows 5.1.2600 Service Pack 3 NTFS
    .
    scanning hidden processes ...
    .
    scanning hidden autostart entries ...
    .
    scanning hidden files ...
    .
    scan completed successfully
    hidden files: 0
    .
    **************************************************************************
    .
    [HKEY_LOCAL_MACHINE\System\ControlSet003\Services\NIS]
    "ImagePath"="\"c:\program files\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files\Norton Internet Security\Engine\18.6.0.29\diMaster.dll\" /prefetch:1"
    --
    .
    [HKEY_LOCAL_MACHINE\System\ControlSet003\Services\PCCUJobMgr]
    "ImagePath"="\"c:\program files\Norton PC Checkup\Engine\2.0.2.543\ccSvcHst.exe\" /s \"PCCUJobMgr\" /m \"c:\program files\Norton PC Checkup\Engine\2.0.2.543\diMaster.dll\" /prefetch:1"
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------
    .
    [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
    @Denied: (2) (LocalSystem)
    "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
    d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,06,84,b0,50,88,4b,5f,4a,a9,e0,9a,\
    "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
    d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,06,84,b0,50,88,4b,5f,4a,a9,e0,9a,\
    .
    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
    "OODEFRAG10.00.00.01WORKSTATION"="03D69161D10F63533F0431AC0BB6885C66CF5EE3D95DF409BB9DFC312F65F892A8E2879451389C0BE2C242B7C983EA1E21F30325624DB3A558FB883C2AD3739392365E80153D3D9DCEAAD6B8A397BA4C73B710D71BA83AC4D48F08B857934F76C1F5C6321E42F9FEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CA6A0AC4980AC7933FEBC9E127BECC74C5D575E7D6A3B98089DB7CE019D40AA5C9DF46449199BAF7743309C1818E359F8443A91C6FB833E92DED4169F334FFC9539D151345D5811FA87AE8D8959C3CC9682ABC8499F3412542906258E72C6E78653361EB3569F56C51E450FC0607D1CDC182E0FDC54E9AA4B4A4E19588B71F94D096D0040BA6F25049F4ABD87F2E862983ABE873A0A74B70535753748BCB5975BA9A904D6B2E93A27D6F68A2C47014EDCD1C2A62225C7FDD691291B2E36213CE2390088785F546164C56B3A800765A47FFD023755FDFB5656B877B35D1EE5725EEDE94428CF1AFDB5A0A964D853D6BB1A0F26561CDF4DACDF3957C3AD8B57DC8834C4BB6F8B47055850197790BE3FFE8B0A4076408C9B8192569E627B0DEF31E12B524CDB8C8E83CB6F813383CE266EF42AC2DB9035E9E7D0060CF8A5244A37AD273726FCBFC615D551922D1500BD9CBDDB84A2600460894272BEC70F432ACEF4AE7D4CE709E76D80795F4EA9C1D6300F40C2B605154C22517A3BE1A0D5F266847D1396353D915298205D51AB74E865582E9B5A59769B02ADB16AACC6382D846B04C7B18126049EAE3168C909720E0BCA2E92A33EAEE30E4B5D1762EFBB86C27EE4529B6D0327BF97CDBC9A328486055CFD0F7B13B45CBD60F873148E254E4ED5784CA91E050338EE4BFE7D9CEA354AC78EDCA14173DF1DE63215A29CACFB674D48B283BB51479E8F31337EC45820650B862BA5B0CCEFCCA06BF0C59400A76404166523F204C41D9ABB467EA4F2F176E73F0D6E531330810FBB6588F5410D2F60542C5B74A871F1F55B05B34156FAB0E446F9361990E783F9EDB24946048DC309ABAFCDF444E6EF4BB622A49D92ADDB4C5BCE8879FE832EEB7F7CBA8952AEB26A767B722C4AE3FB8625B32F44299F522C76C8CA708F12F2B4A44DE24F2798A335440495D826C992D8B1B48443128C0356C00C2FF9654855E6C10F9D24F5994E5C591D5739359EBF389E04A82C38D4F2E09521C11B1AFDEDDAF214991EA3200099AB002A14490CA65E5FE275147A78B7A609F1DFD938AEE82A078ED95307C31A6769CAD6B1A9E0FCC71E7816952B217DC560CEBA41417B06347E99B45F6F3B13876FFDF95D0F8D8E3535CE0D4D1397829F13EA585E27A61B1E912F54E29D65F27D530181E829A8382BB655AD5DEBCC9B5BD05C13C453988ECBAAB1B88144C156115B9A31A8176DECF367"
    "OODEFRAG04.00.00.01SERVER"="42963DBB86AC53E48FE815453F7B291C21BFBD53501E40FADADD276B37EB8A1C803056167982FEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CA6A0AC4980AC7933FEBC9E127BECC74C5D575E7D6A3B9808C038D530D6EB345230BF7FED5AF0DA24C5EEEEC87D5EC623502E32A77059D9513D0E91C7219C61C5B5B69973F054E9B2A6DCC181A2570A7412C5E37018F30AAA3356078A5B47CCF0F338F29C002B9490320A213D4AAD945A53A5ECA4329E4E7CA8EEA28E28A7417AA4B7D0B739F7F09FDDB2765B747D309866F3FCD2AD30C30CED067937846DD1C8340ECB1746E22588D47582BF9606B839D4B897126CA09DE006AFF5695FEBA706C675D2124439EEB476595651992E2287576294F7C38FA2482CDFD38E99987CA02E0EA70440689DD4D345D9FCD97E6E135FC29EA47EBDAC55CAF123930C8E9FCAF6D9604AC087965AB30646B129A339B0108D3736DA122ADA82A549EB010EF47A5D426548BD4C507E90CBACE2CC6E2EF7C05E31510A169CF3299A7F8CB879F269D39176E3A01259BB1A2B6E887CD311C57D30352032769AFB465AD26EE4D6A616FEF7A3094C5A5050B19C431EE56C34BA05663ECE6D874F16164D2290AC52AC433887D32593C8E940EEFB33A42BF582394BC49B8DCA3DF7A58A41A4F22BBABA750DB840AB3F25EDD19B0BA09DDF5079EA77F6F191CBB2E754C6EA619C7081177840E576938ADA3A91B56CBC120E012A3BE588B81365A4048FA3DE36177E3E1DD9C55059D5A5F93D4DEF290E0D31B0395A266B3CCE82F547892E9853EECB2C3B6BC7199DF234B67D19322F709E3CADDFBC7A751C06012C4135A5F5BC36452B75C4A4C8CC6C4F68904C164C11599366EB9A5BDE4BFBB2F0114D01B84D0348BBE33EEC4C46C9028CA380693772D60FF13FEEF34613F9DE1370CDE588AF6FA887B0F6E5F03A944DC0F8953006EDB17D074E7BA42C0D4DBD03287933EEE5182D561C508A69AE5CA34AE1B09FB72D099F05A2C47F762B467FD795D4F7DAC41F111AF8F107CFFE33EE9149B5A22BAD80A86B5890CC6E2F39C2CB2C28F81F742B82642D44BC1ED6308AA0A9D2D7A44341C35E226D89C2337F21BAF180AF7071E3266CB576C233B8EE452993F3124C15F58C28452AE182A0F523298131476A8E77120BA1FADF52FA0CE4FD2BCFD8301DCD95B51B5B3CA4B97BC5BB09CC210CED985042940715A446AB20972ADAE3BF2A7D6297905830819075FC3BC9AE52360A7CE0B3C49511341A73A4925BD0244F5F3C6C02A6BE86580CCDAD971B712231AD5CB7267D633BF1C68E902C1FB2BA973445A0CE726EC1C7EA70B2E1E6F88D25FC76BA849E742C2F72ACF84BEA40FE347258E07A9D8A94D73A4D59502CE8C522690CC55D9B8DB0A3177E66F6C5837B26"
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
    .
    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}]
    @DACL=(02 0000)
    @="Microsoft Disk Quota"
    "NoMachinePolicy"=dword:00000000
    "NoUserPolicy"=dword:00000001
    "NoSlowLink"=dword:00000001
    "NoBackgroundPolicy"=dword:00000001
    "NoGPOListChanges"=dword:00000001
    "PerUserLocalSettings"=dword:00000000
    "RequiresSuccessfulRegistry"=dword:00000001
    "EnableAsynchronousProcessing"=dword:00000000
    "DllName"=expand:"dskquota.dll"
    "ProcessGroupPolicy"="ProcessGroupPolicy"
    .
    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}]
    @DACL=(02 0000)
    @="Internet Explorer Zonemapping"
    "DllName"="c:\\WINDOWS\\system32\\iedkcs32.dll"
    "ProcessGroupPolicy"="ProcessGroupPolicyForZoneMap"
    "NoGPOListChanges"=dword:00000001
    "RequiresSucessfulRegistry"=dword:00000001
    "DisplayName"="@c:\\WINDOWS\\system32\\iedkcs32.dll.mui,-3051"
    "RequiresSuccessfulRegistry"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{7B849a69-220F-451E-B3FE-2CB811AF94AE}]
    @DACL=(02 0000)
    @="Internet Explorer User Accelerators"
    "DisplayName"="@c:\\WINDOWS\\system32\\iedkcs32.dll.mui,-3051"
    "DllName"="c:\\WINDOWS\\system32\\iedkcs32.dll"
    "NoGPOListChanges"=dword:00000001
    "ProcessGroupPolicy"="ProcessGroupPolicyForActivities"
    "ProcessGroupPolicyEx"="ProcessGroupPolicyForActivitiesEx"
    "RequiresSuccessfulRegistry"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}]
    @DACL=(02 0000)
    "ProcessGroupPolicy"="SceProcessSecurityPolicyGPO"
    "GenerateGroupPolicy"="SceGenerateGroupPolicy"
    "ExtensionRsopPlanningDebugLevel"=dword:00000001
    "ProcessGroupPolicyEx"="SceProcessSecurityPolicyGPOEx"
    "ExtensionDebugLevel"=dword:00000001
    "DllName"=expand:"scecli.dll"
    @="Security"
    "NoUserPolicy"=dword:00000001
    "NoGPOListChanges"=dword:00000001
    "EnableAsynchronousProcessing"=dword:00000001
    "MaxNoGPOListChangesInterval"=dword:000003c0
    .
    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}]
    @DACL=(02 0000)
    "ProcessGroupPolicyEx"="ProcessGroupPolicyEx"
    "GenerateGroupPolicy"="GenerateGroupPolicy"
    "ProcessGroupPolicy"="ProcessGroupPolicy"
    "DllName"="c:\\WINDOWS\\system32\\iedkcs32.dll"
    @="Internet Explorer Branding"
    "NoSlowLink"=dword:00000001
    "NoBackgroundPolicy"=dword:00000000
    "NoGPOListChanges"=dword:00000001
    "NoMachinePolicy"=dword:00000001
    "DisplayName"="@c:\\WINDOWS\\system32\\iedkcs32.dll.mui,-3014"
    .
    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}]
    @DACL=(02 0000)
    "ProcessGroupPolicy"="SceProcessEFSRecoveryGPO"
    "DllName"=expand:"scecli.dll"
    @="EFS recovery"
    "NoUserPolicy"=dword:00000001
    "NoGPOListChanges"=dword:00000001
    "RequiresSuccessfulRegistry"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{B587E2B1-4D59-4e7e-AED9-22B9DF11D053}]
    @DACL=(02 0000)
    @="802.3 Group Policy"
    "DisplayName"=expand:"@dot3gpclnt.dll,-100"
    "ProcessGroupPolicyEx"="ProcessLANPolicyEx"
    "GenerateGroupPolicy"="GenerateLANPolicy"
    "DllName"=expand:"dot3gpclnt.dll"
    "NoUserPolicy"=dword:00000001
    "NoGPOListChanges"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{C631DF4C-088F-4156-B058-4375F0853CD8}]
    @DACL=(02 0000)
    @="Microsoft Offline Files"
    "DllName"=expand:"%SystemRoot%\\System32\\cscui.dll"
    "EnableAsynchronousProcessing"=dword:00000000
    "NoBackgroundPolicy"=dword:00000000
    "NoGPOListChanges"=dword:00000000
    "NoMachinePolicy"=dword:00000000
    "NoSlowLink"=dword:00000000
    "NoUserPolicy"=dword:00000001
    "PerUserLocalSettings"=dword:00000000
    "ProcessGroupPolicy"="ProcessGroupPolicy"
    "RequiresSuccessfulRegistry"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{c6dc5466-785a-11d2-84d0-00c04fb169f7}]
    @DACL=(02 0000)
    @="Software Installation"
    "DllName"=expand:"appmgmts.dll"
    "ProcessGroupPolicyEx"="ProcessGroupPolicyObjectsEx"
    "GenerateGroupPolicy"="GenerateGroupPolicy"
    "NoBackgroundPolicy"=dword:00000000
    "RequiresSucessfulRegistry"=dword:00000000
    "NoSlowLink"=dword:00000001
    "PerUserLocalSettings"=dword:00000001
    "EventSources"=multi:"(Application Management,Application)\00(MsiInstaller,Application)\00\00"
    .
    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}]
    @DACL=(02 0000)
    @="Internet Explorer Machine Accelerators"
    "DisplayName"="@c:\\WINDOWS\\system32\\iedkcs32.dll.mui,-3051"
    "DllName"="c:\\WINDOWS\\system32\\iedkcs32.dll"
    "NoGPOListChanges"=dword:00000001
    "ProcessGroupPolicy"="ProcessGroupPolicyForActivities"
    "ProcessGroupPolicyEx"="ProcessGroupPolicyForActivitiesEx"
    "RequiresSuccessfulRegistry"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
    @DACL=(02 0000)
    @=""
    "DLLName"="igfxsrvc.dll"
    "Asynchronous"=dword:00000001
    "Impersonate"=dword:00000001
    "Unlock"="WinlogonUnlockEvent"
    .
    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn\Event]
    @DACL=(02 0000)
    "Logon"="LBTWLgn_LOGON"
    "StartShell"="LBTWLgn_STARTSHELL"
    .
    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList]
    @DACL=(02 0000)
    "HelpAssistant"=dword:00000000
    "TsInternetUser"=dword:00000000
    "SQLAgentCmdExec"=dword:00000000
    "NetShowServices"=dword:00000000
    "IWAM_"=dword:00010000
    "IUSR_"=dword:00010000
    "VUSR_"=dword:00010000
    "ASPNET"=dword:00000000
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------
    .
    - - - - - - - > 'winlogon.exe'(1008)
    c:\program files\SUPERAntiSpyware\SASWINLO.dll
    c:\windows\system32\WININET.dll
    c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll
    .
    - - - - - - - > 'explorer.exe'(3204)
    c:\windows\system32\WININET.dll
    c:\progra~1\WINDOW~2\wmpband.dll
    c:\windows\system32\ieframe.dll
    c:\windows\system32\msi.dll
    c:\windows\system32\webcheck.dll
    c:\windows\system32\WPDShServiceObj.dll
    c:\windows\system32\btncopy.dll
    c:\windows\system32\PortableDeviceTypes.dll
    c:\windows\system32\PortableDeviceApi.dll
    .
    ------------------------ Other Running Processes ------------------------
    .
    c:\program files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
    c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
    c:\program files\Java\jre6\bin\jqs.exe
    c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    c:\program files\Microsoft LifeCam\MSCamS32.exe
    c:\program files\CDBurnerXP\NMSAccessU.exe
    c:\program files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
    c:\windows\system32\wscntfy.exe
    c:\program files\ASUS Xonar DS Audio\Customapp\Program\ASUSAUDIOCENTER.EXE
    c:\program files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
    c:\program files\Windows Media Player\WMPNetwk.exe
    .
    **************************************************************************
    .
    Completion time: 2011-08-03 10:53:04 - machine was rebooted
    ComboFix-quarantined-files.txt 2011-08-03 09:53
    .
    Pre-Run: 16,842,625,024 bytes free
    Post-Run: 17,051,590,656 bytes free
    .
    - - End Of File - - B35E63C3CA6820B07AD354E484A9C5E7

  7. #7
    Member Spyware Fighter
    Join Date
    Jun 2010
    Location
    Bement,Ill USA
    Posts
    1,340
    Points
    146

    Default

    Hello,

    Can you please post the TDSSKIller log. How is your machine running now?
    " Extinguishing Malware from the world"

    The Spware Help forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.
    HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
    Thanks-




  8. #8
    Member stokie's Avatar
    Join Date
    Apr 2005
    Posts
    74
    Points
    3

    Default

    Hello
    Here is the log
    2011/08/03 10:14:47.0484 2008 TDSS rootkit removing tool 2.5.13.0 Jul 29 2011 17:24:11
    2011/08/03 10:14:49.0484 2008 ================================================================================
    2011/08/03 10:14:49.0484 2008 SystemInfo:
    2011/08/03 10:14:49.0484 2008
    2011/08/03 10:14:49.0484 2008 OS Version: 5.1.2600 ServicePack: 3.0
    2011/08/03 10:14:49.0484 2008 Product type: Workstation
    2011/08/03 10:14:49.0484 2008 ComputerName: HOME
    2011/08/03 10:14:49.0484 2008 UserName: DAD
    2011/08/03 10:14:49.0484 2008 Windows directory: C:\WINDOWS
    2011/08/03 10:14:49.0484 2008 System windows directory: C:\WINDOWS
    2011/08/03 10:14:49.0484 2008 Processor architecture: Intel x86
    2011/08/03 10:14:49.0484 2008 Number of processors: 2
    2011/08/03 10:14:49.0484 2008 Page size: 0x1000
    2011/08/03 10:14:49.0484 2008 Boot type: Normal boot
    2011/08/03 10:14:49.0484 2008 ================================================================================
    2011/08/03 10:14:51.0265 2008 Initialize success
    2011/08/03 10:15:02.0937 2652 ================================================================================
    2011/08/03 10:15:02.0937 2652 Scan started
    2011/08/03 10:15:02.0937 2652 Mode: Manual;
    2011/08/03 10:15:02.0937 2652 ================================================================================
    2011/08/03 10:15:03.0609 2652 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys
    2011/08/03 10:15:03.0703 2652 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys
    2011/08/03 10:15:03.0921 2652 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
    2011/08/03 10:15:04.0062 2652 AFD (355556d9e580915118cd7ef736653a89) C:\WINDOWS\System32\drivers\afd.sys
    2011/08/03 10:15:04.0640 2652 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
    2011/08/03 10:15:04.0765 2652 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
    2011/08/03 10:15:04.0906 2652 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
    2011/08/03 10:15:05.0062 2652 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
    2011/08/03 10:15:05.0187 2652 BANTExt (5d7be7b19e827125e016325334e58ff1) C:\WINDOWS\System32\Drivers\BANTExt.sys
    2011/08/03 10:15:05.0328 2652 bcm4sbxp (78e7b52da292fa90bad2f887bbf22159) C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys
    2011/08/03 10:15:05.0468 2652 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
    2011/08/03 10:15:05.0703 2652 BHDrvx86 (f7ff24bb7714247f27b615b3a7d8b132) C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\BASHDefs\20110723.001\BHDrvx86.sys
    2011/08/03 10:15:05.0843 2652 BrPar (2fe6d5be0629f706197b30c0aa05de30) C:\WINDOWS\System32\drivers\BrPar.sys
    2011/08/03 10:15:05.0968 2652 btaudio (ecdc40cc54603c711e1a7a1c9255184a) C:\WINDOWS\system32\drivers\btaudio.sys
    2011/08/03 10:15:06.0109 2652 BTDriver (58a49bd10e08d3d4333a60dedcb1ced8) C:\WINDOWS\system32\DRIVERS\btport.sys
    2011/08/03 10:15:06.0265 2652 BTKRNL (885b6d0f826a216eee4c3ad883809012) C:\WINDOWS\system32\DRIVERS\btkrnl.sys
    2011/08/03 10:15:06.0375 2652 BTWDNDIS (b1d350f3f13cf340fce93912d2ba1ebf) C:\WINDOWS\system32\DRIVERS\btwdndis.sys
    2011/08/03 10:15:06.0484 2652 btwhid (e48668b4a6a5cf68b33aecad18ee8e1e) C:\WINDOWS\system32\DRIVERS\btwhid.sys
    2011/08/03 10:15:06.0609 2652 BTWUSB (57e91e9925976bbc98984eebaaf1d84c) C:\WINDOWS\system32\Drivers\btwusb.sys
    2011/08/03 10:15:06.0734 2652 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
    2011/08/03 10:15:06.0875 2652 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
    2011/08/03 10:15:07.0062 2652 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
    2011/08/03 10:15:07.0218 2652 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
    2011/08/03 10:15:07.0343 2652 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
    2011/08/03 10:15:07.0671 2652 cmudaxp (1531e60628c6c6358222a8beee471555) C:\WINDOWS\system32\drivers\cmudaxp.sys
    2011/08/03 10:15:08.0140 2652 ctsfm2k (8db84de3aab34a8b4c2f644eff41cd76) C:\WINDOWS\system32\DRIVERS\ctsfm2k.sys
    2011/08/03 10:15:08.0453 2652 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
    2011/08/03 10:15:08.0640 2652 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys
    2011/08/03 10:15:08.0781 2652 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys
    2011/08/03 10:15:08.0890 2652 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
    2011/08/03 10:15:09.0062 2652 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
    2011/08/03 10:15:09.0218 2652 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
    2011/08/03 10:15:09.0328 2652 eeCtrl (8f7dbc4be48f5388a6fe1f285e7948ef) C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys
    2011/08/03 10:15:09.0375 2652 EraserUtilRebootDrv (3ee14d400e0fdd0d214275a4a20b7022) C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
    2011/08/03 10:15:09.0546 2652 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
    2011/08/03 10:15:09.0703 2652 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys
    2011/08/03 10:15:09.0796 2652 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys
    2011/08/03 10:15:09.0937 2652 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
    2011/08/03 10:15:10.0062 2652 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
    2011/08/03 10:15:10.0203 2652 fssfltr (e0087225b137e57239ff40f8ae82059b) C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys
    2011/08/03 10:15:10.0312 2652 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
    2011/08/03 10:15:10.0406 2652 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
    2011/08/03 10:15:10.0500 2652 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
    2011/08/03 10:15:10.0609 2652 hidusb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
    2011/08/03 10:15:10.0828 2652 HPZid412 (9f1d80908658eb7f1bf70809e0b51470) C:\WINDOWS\system32\DRIVERS\HPZid412.sys
    2011/08/03 10:15:10.0968 2652 HPZipr12 (f7e3e9d50f9cd3de28085a8fdaa0a1c3) C:\WINDOWS\system32\DRIVERS\HPZipr12.sys
    2011/08/03 10:15:11.0125 2652 HPZius12 (cf1b7951b4ec8d13f3c93b74bb2b461b) C:\WINDOWS\system32\DRIVERS\HPZius12.sys
    2011/08/03 10:15:11.0265 2652 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
    2011/08/03 10:15:11.0500 2652 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
    2011/08/03 10:15:11.0625 2652 ialm (44b7d5a4f2bd9fe21aea0bb0bace38c4) C:\WINDOWS\system32\DRIVERS\ialmnt5.sys
    2011/08/03 10:15:11.0953 2652 IDSxpx86 (b9ba869eb7b66c5740e904a79f9245b4) C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\IPSDefs\20110802.030\IDSxpx86.sys
    2011/08/03 10:15:12.0078 2652 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
    2011/08/03 10:15:12.0265 2652 IntelIde (b5466a9250342a7aa0cd1fba13420678) C:\WINDOWS\system32\DRIVERS\intelide.sys
    2011/08/03 10:15:12.0359 2652 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys
    2011/08/03 10:15:12.0468 2652 ip6fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
    2011/08/03 10:15:12.0562 2652 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
    2011/08/03 10:15:12.0718 2652 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
    2011/08/03 10:15:12.0828 2652 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
    2011/08/03 10:15:12.0953 2652 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
    2011/08/03 10:15:13.0046 2652 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
    2011/08/03 10:15:13.0171 2652 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys
    2011/08/03 10:15:13.0281 2652 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
    2011/08/03 10:15:13.0375 2652 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
    2011/08/03 10:15:13.0484 2652 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
    2011/08/03 10:15:13.0734 2652 LBeepKE (ca63fe81705ad660e482bef210bf2c73) C:\WINDOWS\system32\Drivers\LBeepKE.sys
    2011/08/03 10:15:13.0968 2652 LHidFilt (b68309f25c5787385da842eb5b496958) C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys
    2011/08/03 10:15:14.0140 2652 LMouFilt (63d3b1d3cd267fcc186a0146b80d453b) C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys
    2011/08/03 10:15:14.0265 2652 LUsbFilt (0c62957912d4df1e4ba9795e6be3ed38) C:\WINDOWS\system32\Drivers\LUsbFilt.Sys
    2011/08/03 10:15:14.0390 2652 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
    2011/08/03 10:15:14.0484 2652 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys
    2011/08/03 10:15:14.0593 2652 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys
    2011/08/03 10:15:14.0718 2652 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys
    2011/08/03 10:15:14.0796 2652 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
    2011/08/03 10:15:14.0953 2652 MPE (c0f8e0c2c3c0437cf37c6781896dc3ec) C:\WINDOWS\system32\DRIVERS\MPE.sys
    2011/08/03 10:15:15.0156 2652 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
    2011/08/03 10:15:15.0296 2652 MRxSmb (0dc719e9b15e902346e87e9dcd5751fa) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
    2011/08/03 10:15:15.0453 2652 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
    2011/08/03 10:15:15.0562 2652 MSHUSBVideo (7a0f9cbdbdb135113b9a3c138e20c85d) C:\WINDOWS\system32\Drivers\nx6000.sys
    2011/08/03 10:15:15.0671 2652 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
    2011/08/03 10:15:15.0765 2652 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
    2011/08/03 10:15:15.0843 2652 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
    2011/08/03 10:15:15.0953 2652 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
    2011/08/03 10:15:16.0062 2652 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys
    2011/08/03 10:15:16.0187 2652 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
    2011/08/03 10:15:16.0328 2652 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
    2011/08/03 10:15:16.0562 2652 NAVENG (920d9701bba90dbb7ccfd3536ea4d6f9) C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\VirusDefs\20110802.041\NAVENG.SYS
    2011/08/03 10:15:16.0859 2652 NAVEX15 (31b1a9b53c3319b97f7874347cd992d2) C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\VirusDefs\20110802.041\NAVEX15.SYS
    2011/08/03 10:15:16.0984 2652 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
    2011/08/03 10:15:17.0078 2652 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
    2011/08/03 10:15:17.0171 2652 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
    2011/08/03 10:15:17.0265 2652 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
    2011/08/03 10:15:17.0359 2652 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
    2011/08/03 10:15:17.0453 2652 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
    2011/08/03 10:15:17.0593 2652 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
    2011/08/03 10:15:17.0687 2652 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
    2011/08/03 10:15:17.0890 2652 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
    2011/08/03 10:15:18.0015 2652 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
    2011/08/03 10:15:18.0156 2652 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
    2011/08/03 10:15:18.0265 2652 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
    2011/08/03 10:15:18.0406 2652 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
    2011/08/03 10:15:18.0500 2652 OMCI (cec7e2c6c1fa00c7ab2f5434f848ae51) C:\WINDOWS\SYSTEM32\DRIVERS\OMCI.SYS
    2011/08/03 10:15:18.0640 2652 ossrv (103a9b117a7d9903111955cdafe65ac6) C:\WINDOWS\system32\DRIVERS\ctoss2k.sys
    2011/08/03 10:15:18.0843 2652 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys
    2011/08/03 10:15:18.0953 2652 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
    2011/08/03 10:15:19.0062 2652 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys
    2011/08/03 10:15:19.0250 2652 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys
    2011/08/03 10:15:19.0390 2652 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\drivers\PCIIde.sys
    2011/08/03 10:15:19.0515 2652 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys
    2011/08/03 10:15:19.0640 2652 pcouffin (5b6c11de7e839c05248ced8825470fef) C:\WINDOWS\system32\Drivers\pcouffin.sys
    2011/08/03 10:15:20.0078 2652 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
    2011/08/03 10:15:20.0218 2652 Processor (a32bebaf723557681bfc6bd93e98bd26) C:\WINDOWS\system32\DRIVERS\processr.sys
    2011/08/03 10:15:20.0390 2652 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
    2011/08/03 10:15:20.0500 2652 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
    2011/08/03 10:15:20.0625 2652 PxHelp20 (153d02480a0a2f45785522e814c634b6) C:\WINDOWS\system32\Drivers\PxHelp20.sys
    2011/08/03 10:15:21.0000 2652 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
    2011/08/03 10:15:21.0203 2652 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
    2011/08/03 10:15:21.0375 2652 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
    2011/08/03 10:15:21.0484 2652 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
    2011/08/03 10:15:21.0609 2652 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
    2011/08/03 10:15:21.0953 2652 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
    2011/08/03 10:15:22.0125 2652 RDPWD (6728e45b66f93c08f11de2e316fc70dd) C:\WINDOWS\system32\drivers\RDPWD.sys
    2011/08/03 10:15:22.0234 2652 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys
    2011/08/03 10:15:22.0343 2652 ROOTMODEM (d8b0b4ade32574b2d9c5cc34dc0dbbe7) C:\WINDOWS\system32\Drivers\RootMdm.sys
    2011/08/03 10:15:22.0453 2652 SASDIFSV (a3281aec37e0720a2bc28034c2df2a56) C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
    2011/08/03 10:15:22.0578 2652 SASKUTIL (61db0d0756a99506207fd724e3692b25) C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
    2011/08/03 10:15:22.0750 2652 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
    2011/08/03 10:15:22.0875 2652 senfilt (b9c7617c1e8ab6fdff75d3c8dafcb4c8) C:\WINDOWS\system32\drivers\senfilt.sys
    2011/08/03 10:15:23.0046 2652 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\drivers\Serial.sys
    2011/08/03 10:15:23.0187 2652 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
    2011/08/03 10:15:23.0343 2652 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys
    2011/08/03 10:15:23.0453 2652 smwdm (c6d9959e493682f872a639b6ec1b4a08) C:\WINDOWS\system32\drivers\smwdm.sys
    2011/08/03 10:15:23.0671 2652 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
    2011/08/03 10:15:23.0812 2652 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys
    2011/08/03 10:15:23.0984 2652 SRTSP (83726cf02eced69138948083e06b6eac) C:\WINDOWS\System32\Drivers\NIS\1206000.01D\SRTSP.SYS
    2011/08/03 10:15:24.0125 2652 SRTSPX (4e7eab2e5615d39cf1f1df9c71e5e225) C:\WINDOWS\system32\drivers\NIS\1206000.01D\SRTSPX.SYS
    2011/08/03 10:15:24.0250 2652 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
    2011/08/03 10:15:24.0390 2652 StarOpen (f92254b0bcfcd10caac7bccc7cb7f467) C:\WINDOWS\system32\drivers\StarOpen.sys
    2011/08/03 10:15:24.0546 2652 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
    2011/08/03 10:15:24.0671 2652 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
    2011/08/03 10:15:24.0765 2652 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
    2011/08/03 10:15:25.0031 2652 SymDS (9bbeb8c6258e72d62e7560e6667aad39) C:\WINDOWS\system32\drivers\NIS\1206000.01D\SYMDS.SYS
    2011/08/03 10:15:25.0234 2652 SymEFA (d5c02629c02a820a7e71bca3d44294a3) C:\WINDOWS\system32\drivers\NIS\1206000.01D\SYMEFA.SYS
    2011/08/03 10:15:25.0375 2652 SymEvent (ab33c3b196197ca467cbdda717860dba) C:\WINDOWS\system32\Drivers\SYMEVENT.SYS
    2011/08/03 10:15:25.0531 2652 SymIRON (a73399804d5d4a8b20ba60fcf70c9f1f) C:\WINDOWS\system32\drivers\NIS\1206000.01D\Ironx86.SYS
    2011/08/03 10:15:25.0703 2652 SYMTDI (dec35ccaf7a222df918306cd2fdfbd39) C:\WINDOWS\System32\Drivers\NIS\1206000.01D\SYMTDI.SYS
    2011/08/03 10:15:26.0015 2652 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
    2011/08/03 10:15:26.0171 2652 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
    2011/08/03 10:15:26.0296 2652 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
    2011/08/03 10:15:26.0421 2652 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
    2011/08/03 10:15:26.0515 2652 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
    2011/08/03 10:15:26.0875 2652 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
    2011/08/03 10:15:26.0984 2652 ULCDRHlp (a4e07da3ae2078bd96e84d4baa07b71d) C:\WINDOWS\system32\Drivers\ULCDRHlp.sys
    2011/08/03 10:15:27.0187 2652 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
    2011/08/03 10:15:27.0328 2652 usbaudio (e919708db44ed8543a7c017953148330) C:\WINDOWS\system32\drivers\usbaudio.sys
    2011/08/03 10:15:27.0484 2652 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
    2011/08/03 10:15:27.0578 2652 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
    2011/08/03 10:15:27.0671 2652 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
    2011/08/03 10:15:27.0796 2652 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
    2011/08/03 10:15:27.0937 2652 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
    2011/08/03 10:15:28.0031 2652 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
    2011/08/03 10:15:28.0140 2652 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
    2011/08/03 10:15:28.0281 2652 usbvideo (63bbfca7f390f4c49ed4b96bfb1633e0) C:\WINDOWS\system32\Drivers\usbvideo.sys
    2011/08/03 10:15:28.0375 2652 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
    2011/08/03 10:15:28.0546 2652 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys
    2011/08/03 10:15:28.0687 2652 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
    2011/08/03 10:15:28.0812 2652 Wdf01000 (d918617b46457b9ac28027722e30f647) C:\WINDOWS\system32\Drivers\wdf01000.sys
    2011/08/03 10:15:29.0000 2652 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
    2011/08/03 10:15:29.0125 2652 wfcxdtun (d1e884ba0c48379abe8f4eb9ce3b6d70) C:\WINDOWS\system32\drivers\wfcxdtun.sys
    2011/08/03 10:15:29.0265 2652 wfcxtcap (9c041fdb40fa8b4946b8c845a3613eac) C:\WINDOWS\system32\drivers\wfcxtcap.sys
    2011/08/03 10:15:29.0406 2652 WFCXVCAP (4233c389a7ced0c6549baedb174861d0) C:\WINDOWS\system32\drivers\wfcxvcap.sys
    2011/08/03 10:15:29.0515 2652 wfcxxbar (4df0d04eadd0e7408c7069148b6f7edd) C:\WINDOWS\system32\drivers\wfcxxbar.sys
    2011/08/03 10:15:29.0593 2652 WFIOCTL (9bc98a4e3401d52ed860cf883ccb7478) C:\Program Files\WinFast\WFDTV\WFIOCTL.SYS
    2011/08/03 10:15:29.0796 2652 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
    2011/08/03 10:15:29.0937 2652 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
    2011/08/03 10:15:30.0046 2652 WudfPf (6ff66513d372d479ef1810223c8d20ce) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
    2011/08/03 10:15:30.0140 2652 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0
    2011/08/03 10:15:30.0265 2652 Boot (0x1200) (44759823122c1aaa3207c05a2e9a919e) \Device\Harddisk0\DR0\Partition0
    2011/08/03 10:15:30.0281 2652 ================================================================================
    2011/08/03 10:15:30.0281 2652 Scan finished
    2011/08/03 10:15:30.0281 2652 ================================================================================
    2011/08/03 10:15:30.0312 1496 Detected object count: 0
    2011/08/03 10:15:30.0312 1496 Actual detected object count: 0
    2011/08/03 10:16:03.0390 3272 Deinitialize success

    There is a definite improvement in speed; not had a 'not responding' error yet.
    Although all the Nero, Audacity and Spotify files were on the list of files deleted, the programs still appear on the C drive in programs. The Audacity file still has a dat file for Nero which seemed to be the culprit. Incidentally the Nero is an OEM version legally acquired with license number.
    Again; what could have been wrong with an Audacity file taken from a cassette tape?

    Sorry if I'm being a nuisance.

    Regards
    Stokie

  9. #9
    Member Spyware Fighter
    Join Date
    Jun 2010
    Location
    Bement,Ill USA
    Posts
    1,340
    Points
    146

    Default

    Hello,

    There is a definite improvement in speed; not had a 'not responding' error yet.
    Although all the Nero, Audacity and Spotify files were on the list of files deleted, the programs still appear on the C drive in programs. The Audacity file still has a dat file for Nero which seemed to be the culprit. Incidentally the Nero is an OEM version legally acquired with license number.
    Again; what could have been wrong with an Audacity file taken from a cassette tape?
    Infections as they are today will sometimes infect legitimate files. That is why it got targeted. I would uninstall and reinstall all those products to make sure they are all working properly.

    Lets go ahead and run a couple of other scanners to make sure there are no leftovers.


    1.
    Please download Malwarebytes' Anti-Malware (v1.50) and save it to your desktop.

    Malwarebytes' may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.

    • Make sure you are connected to the Internet and double-click on mbam-setup.exe to install the application.
      For instructions with screenshots, please refer to this Guide.
    • When the installation begins, follow the prompts and do not make any changes to default settings.
    • Malwarebytes will automatically start and you will be asked to update the program before performing a scan.
    • If an update is found, the program will automatically update itself. Press the OK button and continue.
    • If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.

    • Under the Scanner tab, make sure the "Perform Quick Scan" option is selected.
    • Click on the Scan button.
    • When finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
    • Click OK to close the message box, then click the Show Results button to see a list of any malware that was found.
    • Make sure that everything is checked and then click Remove Selected.
    • When removal is completed, a log report will open in Notepad.
    • The log is automatically saved and can be viewed by clicking the Logs tab.
    • Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows the database version and your operating system.
    • Exit Malwarebytes' when done.

    Note: If Malwarebytes' encounters a file that is difficult to remove, you will be asked to reboot your computer so it can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally will prevent Malwarebytes' from removing all the malware.

    2.
    Please click HERE to download Kaspersky Virus Removal Tool.

    • Double click on the file you just downloaded and let it install.
    • It will install to your desktop (be patient; it may take a while).
    • Accept license agreement and click "Start" button.
    • Click on Settings button
      • In Scan scope leave pre-checked items as they're and also checkmark My Computer
      • In Actions checkmark Select action: (disinfect; delete if disinfection fails) instead of preselected Prompt on detection
    • Click on Automatic Scan tab and then click on Start scanning button.
    • Before it is done it may prompt for action regardless of the setting so choose delete if prompted.
    • When the scan is done NO log will be produced.
    • Click on Report button then on Automatic Scan report tab.
    • Right click anywhere within right pane, click Select All then right click again and click Copy.
    • This will copy the items that it found to the clipboard you can then open notepad (go to start then run then type in notepad) and choose paste to paste the contents into Notepad.
    • You can save this on the desktop.
    • Post the contents of the document in your next reply.


    Things to include in your next reply::
    MBAm log
    KAspersky log
    How is your machine running now?
    " Extinguishing Malware from the world"

    The Spware Help forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.
    HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
    Thanks-




  10. #10
    Member stokie's Avatar
    Join Date
    Apr 2005
    Posts
    74
    Points
    3

    Default

    Hello
    I now despair!!!
    Here is the Malwarebytes log
    Malwarebytes' Anti-Malware 1.51.1.1800
    Malwarebytes : Free anti-malware, anti-virus and spyware removal download

    Database version: 7383

    Windows 5.1.2600 Service Pack 3
    Internet Explorer 8.0.6001.18702

    05/08/2011 09:53:11
    mbam-log-2011-08-05 (09-53-11).txt

    Scan type: Quick scan
    Objects scanned: 187553
    Time elapsed: 7 minute(s), 44 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    (No malicious items detected)

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    (No malicious items detected)

    I followed your instructions precisely and ran the Kaspersky which found nothing, after more than 2 hours. When I tried to copy the report, no way would the right click/copy/paste to notepad work. Thinking I may have done something wrong I tried again (another 2+ hours) and again the result was nothing found BUT again there was no way it would let me get a report to copy and post, eventually hanging the whole system so I had to shut down via Task Manager.
    Before running Kaspersky I uninstalled Audacity, Spotify and Nero(using Nero's own General Cleaner) so they weren't around as far as I know. Incidentally even Task Manager has started to 'not respond'.
    As I only have Dell's OEM XP SP1 disc I am faced with a lengthy fresh install of XP; if I can get SP2!

    Down to you old pal - I'm stumped now.

    Cheers

    Stokie

    P.s. the machine is not running well and it's wellbeing is in danger. I'm told that water and electricity is not a good mix!

Page 1 of 3 123 LastLast