Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

WoW trojan

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

WoW trojan

Unread postby 1337z0r » September 4th, 2008, 7:47 pm

the trojan's name is "Trojan-PSW.Win32.OnLineGames.aojv"

while going through temp and other folders to find something about it i came across a Down(0) or something like this .exe file in windows temp folder, which i deleted but this trojan is still being picked up by the WoW client

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:42:43 PM, on 9/04/08
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\msdtc.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\WINDOWS\system32\lxdjcoms.exe
C:\Program Files\Microsoft SQL Server\MSSQL$PRIMAVERA\Binn\sqlservr.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcIp.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcLog.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\SiSWLSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcAppFlt.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\mqsvc.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\WINDOWS\system32\mqtgsvc.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\WgaTray.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nTrayFw.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
C:\Program Files\D-Link\Wireless G WDA-1320\AirGCFG.exe
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
C:\Program Files\Lexmark 1400 Series\lxdjamon.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\Belkin\Belkin 802.11g Wireless PCI Card Configuration Utility\utility.exe
C:\Program Files\Personal Phone Gateway\Listener.exe
C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\WlanCU.exe
C:\Program Files\Personal Phone Gateway\Manager.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Personal Phone Gateway\PhoneGateway.exe
C:\Program Files\Personal Phone Gateway\RingCntr.exe
C:\Documents and Settings\Tayyab.COMPUTER\My Documents\Installs\firefox.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/def ... earch.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [nTrayFw] C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nTrayFw.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [mmtask] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe"
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [D-Link Wireless G WDA-1320] C:\Program Files\D-Link\Wireless G WDA-1320\AirGCFG.exe
O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKLM\..\Run: [Athan] C:\Program Files\Athan\Athan.exe
O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [KONICA MINOLTA PagePro 1350WStatusDisplay] C:\WINDOWS\system32\MSTMON_Q.EXE
O4 - HKLM\..\Run: [lxdjamon] "C:\Program Files\Lexmark 1400 Series\lxdjamon.exe"
O4 - HKLM\..\Run: [LXDJCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXDJtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Belkin 802.11g Wireless PCI Card Configuration Utility.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Personal Phone Gateway.lnk = ?
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O4 - Global Startup: Wireless Configuration Utility HW.32.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Upload - {FD4E2FF8-973C-4A19-89BD-8E86B3CFCFE1} - C:\WINDOWS\system32\shdocvw.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/ms ... b31267.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/ms ... b56986.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-U ... E_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZI ... b56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b56907.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/So ... b31267.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: lxdj_device - - C:\WINDOWS\system32\lxdjcoms.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SiS WirelessLan Service (SiSWLSvc) - Unknown owner - C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\SiSWLSvc.exe

--
End of file - 10694 bytes
1337z0r
Active Member
 
Posts: 8
Joined: September 4th, 2008, 7:35 pm
Advertisement
Register to Remove

Re: WoW trojan

Unread postby 1337z0r » September 6th, 2008, 8:44 am

i ran security task manager and it's showing

Down(0)ow.dll (100)
Down(0)ow.dll (92)
Down(0).Dat (82)
Down(0).Dat (82)

as the 4 greatest threats
the numbers contain its rating out of 100 for threat
1337z0r
Active Member
 
Posts: 8
Joined: September 4th, 2008, 7:35 pm

Re: WoW trojan

Unread postby ndmmxiaomayi » September 7th, 2008, 1:37 am

Hi 1337z0r,

Welcome to Malware Removal. :)

Sorry for the delay, we are swamped with logs.

You have 2 antivirus programs installed and this is not recommended. Having more than one antivirus programs installed will not help to increase computer security, but may reduce it when they start attacking each other.

They may also cause crashes.

Please choose to keep either AVG Antivirus or Command Software Antivirus (also known as Authentium Antivirus).

You can uninstall either of them via Add/Remove Programs by clicking on Start > Control Panel and double clicking on Add/Remove Programs.

Restart your computer after you've removed one of the antivirus programs.

Next...

  1. Open HijackThis.
  2. Click on the Open the Misc Tools section button.
  3. Look under System tools.
  4. Click on the Open Uninstall Manager... button.
  5. Click on the Save list... button.
  6. It will prompt you to save. Save this log in a convenient location. By default it's named uninstall_list.txt.
  7. Notepad will open. Please post this log in your next reply.

In your next reply, please post:

  1. A new HijackThis log
  2. Uninstall List
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: WoW trojan

Unread postby 1337z0r » September 7th, 2008, 12:22 pm

i have noticed recently that my computer also slowed down a bit

i had to uninstall avg because the other software wasn't even on the list. also using Security Task Manager i moved and prevented the 3 of the Down(0)ow.dll/dat (which im very sure is the trojan's files from some research) from running again, should i restore them back for this to be successful?

here are the logs:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:19:15 AM, on 9/07/08
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\WINDOWS\system32\lxdjcoms.exe
C:\Program Files\Microsoft SQL Server\MSSQL$PRIMAVERA\Binn\sqlservr.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcIp.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcLog.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\SiSWLSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcAppFlt.exe
C:\WINDOWS\system32\mqsvc.exe
C:\WINDOWS\system32\mqtgsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nTrayFw.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
C:\Program Files\D-Link\Wireless G WDA-1320\AirGCFG.exe
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
C:\Program Files\Lexmark 1400 Series\lxdjamon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\Belkin\Belkin 802.11g Wireless PCI Card Configuration Utility\utility.exe
C:\Program Files\Personal Phone Gateway\Listener.exe
C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\WlanCU.exe
C:\Program Files\Personal Phone Gateway\Manager.exe
C:\Program Files\Personal Phone Gateway\PhoneGateway.exe
C:\Program Files\Personal Phone Gateway\RingCntr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Winamp\winamp.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\notepad.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/def ... earch.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [nTrayFw] C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nTrayFw.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [mmtask] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe"
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [D-Link Wireless G WDA-1320] C:\Program Files\D-Link\Wireless G WDA-1320\AirGCFG.exe
O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKLM\..\Run: [Athan] C:\Program Files\Athan\Athan.exe
O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [KONICA MINOLTA PagePro 1350WStatusDisplay] C:\WINDOWS\system32\MSTMON_Q.EXE
O4 - HKLM\..\Run: [lxdjamon] "C:\Program Files\Lexmark 1400 Series\lxdjamon.exe"
O4 - HKLM\..\Run: [LXDJCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXDJtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Belkin 802.11g Wireless PCI Card Configuration Utility.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Personal Phone Gateway.lnk = ?
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O4 - Global Startup: Wireless Configuration Utility HW.32.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Upload - {FD4E2FF8-973C-4A19-89BD-8E86B3CFCFE1} - C:\WINDOWS\system32\shdocvw.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/ms ... b31267.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/ms ... b56986.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-U ... E_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZI ... b56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b56907.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/So ... b31267.cab
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: lxdj_device - - C:\WINDOWS\system32\lxdjcoms.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SiS WirelessLan Service (SiSWLSvc) - Unknown owner - C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\SiSWLSvc.exe

--
End of file - 9555 bytes




360Share Pro(remove only)
802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10
Adobe Acrobat 6.0 Professional
Adobe Flash Player ActiveX
Adobe Flash Player Plugin
Adobe Reader 7.0.9
Adobe Shockwave Player
ANIO Service
ANIWZCS2 Service
Apple Software Update
Athan Basic 3.0
Athlon 64 Processor Driver
Belkin 802.11g Wireless PCI Card
Combined Community Codec Pack 2006-07-28 (Remove Only)
Diablo II
eMule
FileWrangler version 5.25
Free Video to Mp3 Converter version 3.1
High Definition Audio Driver Package - KB888111
HijackThis 2.0.2
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows XP (KB926239)
Hotfix for Windows XP (KB952287)
IC-Recorder
J2SE Runtime Environment 5.0 Update 3
J2SE Runtime Environment 5.0 Update 7
Java(TM) 6 Update 2
Java(TM) 6 Update 5
KONICA MINOLTA PagePro 1350W
Lexmark 1400 Series
MapleStory
MapleStory
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Office XP Professional with FrontPage
Microsoft Project Professional 2002
Microsoft Publisher 2002
Microsoft SQL Server Desktop Engine (PRIMAVERA)
Microsoft User-Mode Driver Framework Feature Pack 1.5
Microsoft Visio Professional 2002 [English]
Microsoft Visual C++ 2005 Redistributable
Mozilla Firefox (3.0.1)
MSN
MSN Music Assistant
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
Musicmatch® Jukebox
Nero 7 Ultra Edition
NVIDIA Drivers
NVIDIA ForceWare Network Access Manager
Origin Evaluation Copy
OverDrive Media Console
PC Connectivity Solution
Personal Phone Gateway
Primavera 5.0
ProEst
QuickTime
Real Alternative 1.50
RealPlayer
Security Task Manager 1.7f
Security Update for CAPICOM (KB931906)
Security Update for CAPICOM (KB931906)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899589)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB911280)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912812)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913446)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB916281)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB918899)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921503)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922760)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923694)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925454)
Security Update for Windows XP (KB925486)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928090)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Security Update for Windows XP (KB929969)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931768)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Security Update for Windows XP (KB933566)
Security Update for Windows XP (KB933729)
Security Update for Windows XP (KB935839)
Security Update for Windows XP (KB935840)
Security Update for Windows XP (KB936021)
Security Update for Windows XP (KB937143)
Security Update for Windows XP (KB937894)
Security Update for Windows XP (KB938127)
Security Update for Windows XP (KB938829)
Security Update for Windows XP (KB939653)
Security Update for Windows XP (KB941202)
Security Update for Windows XP (KB941568)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB941644)
Security Update for Windows XP (KB941693)
Security Update for Windows XP (KB942615)
Security Update for Windows XP (KB943055)
Security Update for Windows XP (KB943460)
Security Update for Windows XP (KB943485)
Security Update for Windows XP (KB944338)
Security Update for Windows XP (KB944533)
Security Update for Windows XP (KB944653)
Security Update for Windows XP (KB945553)
Security Update for Windows XP (KB946026)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB947864)
Security Update for Windows XP (KB948590)
Security Update for Windows XP (KB948881)
Security Update for Windows XP (KB950749)
Security Update for Windows XP (KB950759)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953838)
Security Update for Windows XP (KB953839)
Skype 2.5
Software IP Phone Center
SoundMAX
Starcraft
Uninstall 1.0.0.0
Update for Windows XP (KB894391)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB908531)
Update for Windows XP (KB910437)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB927891)
Update for Windows XP (KB929338)
Update for Windows XP (KB930916)
Update for Windows XP (KB931836)
Update for Windows XP (KB933360)
Update for Windows XP (KB938828)
Update for Windows XP (KB942763)
Update for Windows XP (KB942840)
Update for Windows XP (KB946627)
Update for Windows XP (KB951072-v2)
VoipCheap
Voipwise
Winamp
Winamp Remote
Windows Driver Package - Nokia (WUDFRd) WPD (03/19/2007 6.83.31.1)
Windows Driver Package - Nokia Modem (02/15/2007 3.1)
Windows Installer 3.1 (KB893803)
Windows Live installer
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB885884
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB891781
WinRAR archiver
Wireless G WDA-1320
World of Warcraft
Yak Community Client 3015c





i try to regularly clean out my installed programs for ones that i dont really need.
1337z0r
Active Member
 
Posts: 8
Joined: September 4th, 2008, 7:35 pm

Re: WoW trojan

Unread postby ndmmxiaomayi » September 7th, 2008, 12:36 pm

Hi 1337z0r,

Step 1

With reference to Malware Removal's P2P Programs Policy, please uninstall the following programs before we continue:

  1. Click on Start > Control Panel and double click on Add/Remove Programs.
  2. Locate 360Share Pro(remove only) and click on the Change/Remove button to uninstall it.
  3. Repeat for eMule.
  4. Close Add/Remove Programs and Control Panel when done.

Step 2

If you already have Combofix, please delete this copy and download it again as it's being updated regularly.

Please visit this webpage for download links, and instructions for running the tool:

http://www.bleepingcomputer.com/combofi ... e-combofix

Please ensure you read this guide carefully and install the Recovery Console first.

The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.

Once Recovery Console is installed, you should see a blue screen prompt like the one below:

Image

Click Yes to allow Combofix to continue scanning for malware.

When done, a log will be produced. Please post that log and a new HijackThis log in your next reply.

Do not mouse click on Combofix while it is running. That may cause it to stall.

In your next reply, please post:

  1. Combofix log
  2. A new HijackThis log
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: WoW trojan

Unread postby 1337z0r » September 7th, 2008, 4:38 pm

The steps for the recovery console requires that I have a windows cd. I don't have one.

also the WoW client stopped picking up the trojan for some reason but Security Task Manager still detects one file active, the file i couldnt remove with the program because it was a free version.
is there any other alternative to cleaning this up. or can i just run combofix without the recovery console
1337z0r
Active Member
 
Posts: 8
Joined: September 4th, 2008, 7:35 pm

Re: WoW trojan

Unread postby ndmmxiaomayi » September 8th, 2008, 10:31 am

It's highly recommended that you don't proceed without having Recovery Console installed. It's our backups. Should things go wrong, we can try to recover your system.

Please download and run this file - http://www.mediafire.com/?aauaanaaaaj

Notepad should open. If it doesn't, a file named OSType.txt is located at where you ran this file.

For example, you ran it from your desktop. You can find OSType.txt on your desktop.
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: WoW trojan

Unread postby 1337z0r » September 8th, 2008, 6:00 pm

Caption: Microsoft Windows XP Professional

im assuming you wanted the contents.
1337z0r
Active Member
 
Posts: 8
Joined: September 4th, 2008, 7:35 pm

Re: WoW trojan

Unread postby ndmmxiaomayi » September 8th, 2008, 8:27 pm

Yup, I do. :)

Please download and save this file to your desktop - http://www.microsoft.com/downloads/deta ... laylang=en

Do not change the file name.

Drag this file into Combofix.

Image

Follow through the prompts.

Once done, you will see this screen:

Image

Click Yes to continue.

When done, a log will be produced. Please post the Combofix log and a new HijackThis log in your next reply.

Do not mouse click on Combofix while it is running. That may cause it to stall.
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: WoW trojan

Unread postby 1337z0r » September 8th, 2008, 8:47 pm

hmm it seems to have found the Down(0)ow file and done something with it =D

here are the logs





ComboFix 08-09-05.09 - Tayyab 2008-09-08 18:35:23.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.359 [GMT -6:00]
Running from: C:\Documents and Settings\Tayyab.COMPUTER\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\Tayyab.COMPUTER\Desktop\WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
* Created a new restore point
.

((((((((((((((((((((((((( Files Created from 2008-08-09 to 2008-09-09 )))))))))))))))))))))))))))))))
.

2008-09-06 11:09 . 2008-09-06 11:09 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Avg8
2008-09-06 06:39 . 2008-09-08 16:04 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\SecTaskMan
2008-09-06 06:38 . 2008-09-06 06:54 <DIR> d-------- C:\Program Files\Security Task Manager
2008-09-04 17:50 . 2008-09-08 16:05 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\PrevxCSI
2008-08-31 10:28 . 2008-09-05 17:26 <DIR> d-------- C:\Program Files\Eusing Free Registry Cleaner
2008-08-30 12:28 . 2008-08-30 12:28 <DIR> d-------- C:\Documents and Settings\Tayyab.COMPUTER\Application Data\Malwarebytes
2008-08-30 12:28 . 2008-08-30 12:28 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Malwarebytes
2008-08-30 12:25 . 2008-08-30 12:25 <DIR> d-------- C:\_OTMoveIt
2008-08-30 12:04 . 2008-08-30 12:04 <DIR> d-------- C:\Program Files\Trend Micro
2008-08-28 22:13 . 2008-08-28 22:13 <DIR> d-------- C:\Program Files\AVG
2008-08-28 20:07 . 2008-09-04 15:32 <DIR> d-a------ C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP
2008-08-28 20:06 . 2008-09-05 17:25 <DIR> d-------- C:\Fraps
2008-08-25 09:41 . 2008-08-25 09:42 <DIR> d-------- C:\Program Files\QuickTime
2008-08-25 09:38 . 2008-08-25 09:38 <DIR> d-------- C:\Program Files\Apple Software Update
2008-08-25 09:38 . 2008-08-25 09:38 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Apple
2008-08-24 21:12 . 2008-08-24 21:12 <DIR> d-------- C:\Program Files\Voipwise.com
2008-08-22 12:36 . 2008-08-22 12:36 <DIR> d-------- C:\Documents and Settings\Tayyab.COMPUTER\Application Data\Ahead

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-09-09 00:28 4,224 ----a-w C:\WINDOWS\system32\drivers\beep.sys
2008-09-08 21:55 --------- d-----w C:\Program Files\Personal Phone Gateway
2008-09-08 02:50 --------- d-----w C:\Documents and Settings\Tahir.COMPUTER\Application Data\Skype
2008-09-07 20:29 --------- d-----w C:\Program Files\eMule
2008-09-06 17:10 --------- d-----w C:\Documents and Settings\Tayyab.COMPUTER\Application Data\Nokia
2008-09-06 01:53 --------- d-----w C:\Program Files\Messenger Plus! Live
2008-09-05 23:35 --------- d-----w C:\Program Files\DivX
2008-09-05 23:31 --------- d-----w C:\Program Files\Windows Live
2008-09-05 23:28 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\WLInstaller
2008-09-04 14:37 --------- d-----w C:\Program Files\Lx_cats
2008-09-01 12:28 --------- d-----w C:\Program Files\VoipCheap
2008-08-31 15:20 --------- d-----w C:\Program Files\Winamp
2008-08-31 15:19 --------- d-----w C:\Documents and Settings\Tayyab.COMPUTER\Application Data\Winamp
2008-08-30 19:21 --------- d-----w C:\Program Files\World of Warcraft
2008-08-30 17:51 --------- d-----w C:\Program Files\Warcraft III
2008-08-29 23:06 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-08-29 23:06 --------- d-----w C:\Program Files\SD EnterNET
2008-08-25 15:41 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Apple Computer
2008-07-07 20:32 253,952 ----a-w C:\WINDOWS\system32\es.dll
2008-06-24 16:23 74,240 ----a-w C:\WINDOWS\system32\mscms.dll
2008-06-23 15:38 659,456 ----a-w C:\WINDOWS\system32\wininet.dll
2008-06-20 17:41 245,248 ----a-w C:\WINDOWS\system32\mswsock.dll
2007-10-26 01:28 1,572,864 ----a-w C:\Program Files\portal.exe
2007-10-20 00:19 32 ----a-r C:\Documents and Settings\All Users\hash.dat
2007-10-03 23:24 49,152 ----a-w C:\Program Files\backup.exe
2007-08-23 23:41 1,127 ----a-w C:\Program Files\Credits.txt
2007-08-08 01:09 61 ----a-w C:\Program Files\settings.ini
2006-06-29 01:16 62,808 ----a-w C:\Documents and Settings\Tahir.COMPUTER\Application Data\GDIPFONTCACHEV1.DAT
2006-06-18 21:37 62,808 ----a-w C:\Documents and Settings\Tayyab.COMPUTER\Application Data\GDIPFONTCACHEV1.DAT
2006-05-14 16:25 476,672 ----a-w C:\Program Files\7z.exe
2006-04-26 03:04 8 ----a-w C:\Documents and Settings\Tahir\Application Data\usb.dat.bin
2006-04-15 22:31 557,056 ----a-w C:\Documents and Settings\Tahir\chatlnk.exe
2006-04-13 23:40 16,760 ----a-w C:\Documents and Settings\Tahir\Application Data\GDIPFONTCACHEV1.DAT
2002-12-20 20:02 1,077,336 ----a-w C:\Program Files\MSCOMCTL.OCX
2001-08-23 13:00 77,824 ----a-w C:\Program Files\asycfilt.dll
2001-08-23 13:00 593,920 ----a-w C:\Program Files\wininet.dll
2001-08-23 13:00 569,344 ----a-w C:\Program Files\oleaut32.dll
2001-08-23 13:00 452,096 ----a-w C:\Program Files\urlmon.dll
2001-08-23 13:00 106,496 ----a-w C:\Program Files\olepro32.dll
2001-08-23 13:00 1,388,544 ----a-w C:\Program Files\msvbvm60.dll
1998-06-24 06:00 115,016 ----a-w C:\Program Files\MSINET.OCX
1998-06-18 06:00 102,912 ----a-w C:\Program Files\VB6STKIT.DLL
1998-05-31 06:00 22,288 ----a-w C:\Program Files\COMCAT.DLL
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]
"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\daemon.exe" [2008-04-01 486856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nTrayFw"="C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nTrayFw.exe" [2005-07-29 270336]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2005-10-10 7286784]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2005-10-10 86016]
"SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [2005-05-19 925696]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2006-05-10 180269]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 144784]
"mmtask"="C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe" [2005-05-03 53248]
"D-Link Wireless G WDA-1320"="C:\Program Files\D-Link\Wireless G WDA-1320\AirGCFG.exe" [2005-12-14 2711552]
"ANIWZCS2Service"="C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe" [2005-11-30 49152]
"Athan"="C:\Program Files\Athan\Athan.exe" [2006-09-17 978944]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2005-09-25 155648]
"KONICA MINOLTA PagePro 1350WStatusDisplay"="C:\WINDOWS\system32\MSTMON_Q.EXE" [2004-11-21 163840]
"lxdjamon"="C:\Program Files\Lexmark 1400 Series\lxdjamon.exe" [2007-03-05 20480]
"LXDJCATS"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXDJtime.dll" [2007-02-09 102400]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-05-27 413696]
"nwiz"="nwiz.exe" [2005-10-10 C:\WINDOWS\system32\nwiz.exe]
"High Definition Audio Property Page Shortcut"="HDAShCut.exe" [2004-10-27 C:\WINDOWS\system32\HdAShCut.exe]
"MsmqIntCert"="mqrt.dll" [2007-07-06 C:\WINDOWS\system32\mqrt.dll]

C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Startup\
Acrobat Assistant.lnk - C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe [2003-04-07 217190]
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 29696]
Belkin 802.11g Wireless PCI Card Configuration Utility.lnk - C:\Program Files\Belkin\Belkin 802.11g Wireless PCI Card Configuration Utility\utility.exe [2006-04-30 340054]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 83360]
Personal Phone Gateway.lnk - C:\WINDOWS\Installer\{00F95E0F-F99D-41B8-82C5-ADAAEF272D46}\_78EC8E5CF1616364F8F203.exe [2008-08-31 10134]
Service Manager.lnk - C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe [2002-12-17 74308]
Wireless Configuration Utility HW.32.lnk - C:\WINDOWS\Installer\{BDC88E5A-F47B-4314-AB38-994592E32C95}\NewShortcut1.exe [2006-09-02 40960]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.wmv3"= C:\PROGRA~1\COMBIN~1\Filters\wmv9vcm.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders msapsspc.dll schannel.dll digest.dll msnsspc.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\NVIDIA Corporation\\NetworkAccessManager\\Apache Group\\Apache2\\bin\\Apache.exe"=
"C:\\WINDOWS\\system32\\dpvsetup.exe"=
"C:\\Program Files\\NetMeeting\\conf.exe"=
"C:\\Program Files\\Software IP Phone Center\\TjBuddy.exe"=
"C:\\Program Files\\Software IP Phone Center\\Pc2PcCall.exe"=
"C:\\Program Files\\Software IP Phone Center\\IPCRelay.exe"=
"C:\\Program Files\\Personal Phone Gateway\\Listener.exe"=
"C:\\Program Files\\Personal Phone Gateway\\PhoneGateway.exe"=
"C:\\Program Files\\VoipCheap\\VoipCheap.exe"=
"C:\\WINDOWS\\system32\\mqsvc.exe"=
"C:\\WINDOWS\\system32\\lxdjcoms.exe"=
"C:\\Program Files\\Lexmark 1400 Series\\lxdjamon.exe"=
"C:\\Program Files\\Lexmark 1400 Series\\App4R.exe"=
"C:\\WINDOWS\\system32\\lxdjcfg.exe"=
"C:\\Program Files\\Lexmark 1400 Series\\Wireless\\lxdjwpss.exe"=
"C:\\Program Files\\Winamp Remote\\bin\\Orb.exe"=
"C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"=
"C:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"=
"C:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\lxdjjswx.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\Program Files\\Voipwise.com\\Voipwise\\Voipwise.exe"=
"C:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\lxdjpswx.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=
"C:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\lxdjtime.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"20091:TCP"= 20091:TCP:BitComet 20091 TCP
"20091:UDP"= 20091:UDP:BitComet 20091 UDP

R2 MLPTDR_Q;MLPTDR_Q;C:\WINDOWS\system32\MLPTDR_Q.SYS [2004-11-18 18848]
R2 MSSQL$PRIMAVERA;MSSQL$PRIMAVERA;C:\Program Files\Microsoft SQL Server\MSSQL$PRIMAVERA\Binn\sqlservr.exe [2002-12-17 7520337]
S2 RPCH;Remote Procedure Call (HPM);C:\Program Files\NetMeeting\Intell.exe [2005-12-27 397312]
S2 RPCT;Remote Procedure Call (TPM);C:\Program Files\Common Files\System\mstinit.exe [2006-08-24 456192]
S3 A3AB;D-Link AirPro 802.11a/b Wireless Adapter Service(A3AB);C:\WINDOWS\system32\DRIVERS\A3AB.sys [2005-08-25 466880]
S3 DNINDIS5;DNINDIS5 NDIS Protocol Driver;C:\PROGRA~1\Belkin\BELKIN~1.11G\DNINDIS5.SYS [2003-07-24 17149]
S3 SIS163u;SiS 163 usb Wireless LAN Adapter Driver;C:\WINDOWS\system32\DRIVERS\sis163u.sys [2004-12-31 167424]
S3 SQLAgent$PRIMAVERA;SQLAgent$PRIMAVERA;C:\Program Files\Microsoft SQL Server\MSSQL$PRIMAVERA\Binn\sqlagent.EXE [2002-12-17 311872]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{60e86ec8-5e18-11dc-bbec-0015f252d951}]
\Shell\AutoRun\command - H:\6qe.com
\Shell\explore\Command - H:\6qe.com
\Shell\open\Command - H:\6qe.com

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a812ea76-a5c9-11dc-aacf-806d6172696f}]
\Shell\AutoRun\command - D:\SETUP.EXE

*Newly Created Service* - CATCHME
*Newly Created Service* - PROCEXP90
.
Contents of the 'Scheduled Tasks' folder
.
- - - - ORPHANS REMOVED - - - -

HKLM-Run-Logitech Hardware Abstraction Layer - KHALMNPR.EXE
ShellExecuteHooks-{0008AE80-D7A2-456A-AE04-EB9ABF822FE4} - C:\WINDOWS\TEMP\Down(0)ow.dll


.
------- Supplementary Scan -------
.
FireFox -: Profile - C:\Documents and Settings\Tayyab.COMPUTER\Application Data\Mozilla\Firefox\Profiles\dlb7s08i.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE - http://www.google.ca
FF -: plugin - C:\Program Files\Adobe\Acrobat 7.0\Reader\browser\nppdf32.dll
FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\npmozax.dll
.

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-08 18:43:18
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
LXDJCATS = rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXDJtime.dll,_RunDLLEntry@16???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-09-08 18:44:42
ComboFix-quarantined-files.txt 2008-09-09 00:44:22

Pre-Run: 151,859,757,056 bytes free
Post-Run: 159,093,166,080 bytes free

WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

198 --- E O F --- 2008-08-24 12:58:03




Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:46:45 PM, on 9/08/08
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\msdtc.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\WINDOWS\system32\lxdjcoms.exe
C:\Program Files\Microsoft SQL Server\MSSQL$PRIMAVERA\Binn\sqlservr.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcIp.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcLog.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\SiSWLSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcAppFlt.exe
C:\WINDOWS\system32\mqsvc.exe
C:\WINDOWS\system32\mqtgsvc.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nTrayFw.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
C:\Program Files\D-Link\Wireless G WDA-1320\AirGCFG.exe
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
C:\Program Files\Lexmark 1400 Series\lxdjamon.exe
C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\WlanCU.exe
C:\Program Files\Personal Phone Gateway\PhoneGateway.exe
C:\Program Files\Personal Phone Gateway\RingCntr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/def ... earch.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [nTrayFw] C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nTrayFw.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [mmtask] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe"
O4 - HKLM\..\Run: [D-Link Wireless G WDA-1320] C:\Program Files\D-Link\Wireless G WDA-1320\AirGCFG.exe
O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKLM\..\Run: [Athan] C:\Program Files\Athan\Athan.exe
O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [KONICA MINOLTA PagePro 1350WStatusDisplay] C:\WINDOWS\system32\MSTMON_Q.EXE
O4 - HKLM\..\Run: [lxdjamon] "C:\Program Files\Lexmark 1400 Series\lxdjamon.exe"
O4 - HKLM\..\Run: [LXDJCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXDJtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Belkin 802.11g Wireless PCI Card Configuration Utility.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Personal Phone Gateway.lnk = ?
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O4 - Global Startup: Wireless Configuration Utility HW.32.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Upload - {FD4E2FF8-973C-4A19-89BD-8E86B3CFCFE1} - C:\WINDOWS\system32\shdocvw.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/ms ... b31267.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/ms ... b56986.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-U ... E_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZI ... b56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b56907.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/So ... b31267.cab
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: lxdj_device - - C:\WINDOWS\system32\lxdjcoms.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SiS WirelessLan Service (SiSWLSvc) - Unknown owner - C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\SiSWLSvc.exe

--
End of file - 9329 bytes
1337z0r
Active Member
 
Posts: 8
Joined: September 4th, 2008, 7:35 pm

Re: WoW trojan

Unread postby ndmmxiaomayi » September 9th, 2008, 11:13 am

Hi 1337z0r :)

Step 1

Please open Notepad and copy and paste the following in the Code box into Notepad:

Code: Select all
http://malwareremoval.com/forum/viewtopic.php?f=11&t=34475

DirLook::
C:\Program Files\eMule

Suspect::
C:\Program Files\portal.exe
C:\Program Files\backup.exe
C:\Program Files\Credits.txt
C:\Program Files\settings.ini
C:\Documents and Settings\Tahir\chatlnk.exe

Registry::
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"20091:TCP"=-
"20091:UDP"=-
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{60e86ec8-5e18-11dc-bbec-0015f252d951}]

Driver::
RPCH
RPCT

Collect::
C:\Program Files\NetMeeting\Intell.exe
C:\Program Files\Common Files\System\mstinit.exe


Warning: The above script is just for 1337z0r. If you are not 1337z0r, please do not use this script as it may damage the workings of your system.

Click on File > Save As....

In the File Name field, copy and paste in CFScript.txt. Do not change the file name.

Click Save.

Referring to the picture below, drag CFScript into Combofix.

Image

Combofix will start running. When done, a log will be produced. Please post this log in your next reply.

In addition, it will prompt you to submit some files for analyzing.

Image

Click OK.

Your web browser (by default it's Internet Explorer) will open.

Please refer to the image below to submit the file for analysis.

Image

Do not mouse click on Combofix while it is running. That may cause it to stall.

Step 2

Please download this file and save it to your desktop - http://www.mediafire.com/?nuyxd3emt6t

Double click on hjt.exe to run it. Notepad will open when it's done. If it doesn't open, you can find a log file named hjt.txt on your desktop. Please post the contents of this log file in your next reply.

In your next reply, please post:

  1. A new HijackThis log
  2. Combofix log (C:\Combofix.txt)
  3. hjt.txt (on your desktop)
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: WoW trojan

Unread postby 1337z0r » September 9th, 2008, 8:46 pm

i did as followed but combofix didn't ask to submit any info

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:45:56 PM, on 9/09/08
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\WINDOWS\system32\lxdjcoms.exe
C:\Program Files\Microsoft SQL Server\MSSQL$PRIMAVERA\Binn\sqlservr.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcIp.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcLog.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\SiSWLSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcAppFlt.exe
C:\WINDOWS\system32\mqsvc.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nTrayFw.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\D-Link\Wireless G WDA-1320\AirGCFG.exe
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
C:\Program Files\Lexmark 1400 Series\lxdjamon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\Belkin\Belkin 802.11g Wireless PCI Card Configuration Utility\utility.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\WlanCU.exe
C:\WINDOWS\system32\mqtgsvc.exe
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\Personal Phone Gateway\Manager.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Winamp\winamp.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/def ... earch.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [nTrayFw] C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nTrayFw.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [D-Link Wireless G WDA-1320] C:\Program Files\D-Link\Wireless G WDA-1320\AirGCFG.exe
O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKLM\..\Run: [Athan] C:\Program Files\Athan\Athan.exe
O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [KONICA MINOLTA PagePro 1350WStatusDisplay] C:\WINDOWS\system32\MSTMON_Q.EXE
O4 - HKLM\..\Run: [lxdjamon] "C:\Program Files\Lexmark 1400 Series\lxdjamon.exe"
O4 - HKLM\..\Run: [LXDJCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXDJtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Belkin 802.11g Wireless PCI Card Configuration Utility.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Personal Phone Gateway.lnk = ?
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O4 - Global Startup: Wireless Configuration Utility HW.32.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Upload - {FD4E2FF8-973C-4A19-89BD-8E86B3CFCFE1} - C:\WINDOWS\system32\shdocvw.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/ms ... b31267.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/ms ... b56986.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-U ... E_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZI ... b56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b56907.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/So ... b31267.cab
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: lxdj_device - - C:\WINDOWS\system32\lxdjcoms.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SiS WirelessLan Service (SiSWLSvc) - Unknown owner - C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\SiSWLSvc.exe

--
End of file - 9322 bytes



ComboFix 08-09-05.12 - Tayyab 2008-09-09 18:30:52.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.342 [GMT -6:00]
Running from: C:\Documents and Settings\Tayyab.COMPUTER\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\Tayyab.COMPUTER\Desktop\CFScript.txt
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Program Files\Common Files\System\mstinit.exe
C:\Program Files\NetMeeting\Intell.exe

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_RPCH
-------\Legacy_RPCT
-------\Service_RPCH
-------\Service_RPCT


((((((((((((((((((((((((( Files Created from 2008-08-10 to 2008-09-10 )))))))))))))))))))))))))))))))
.

2008-09-09 08:25 . 2008-09-09 08:35 <DIR> d-------- C:\Documents and Settings\Tahir.COMPUTER\Application Data\Voipwise
2008-09-06 11:09 . 2008-09-06 11:09 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Avg8
2008-09-06 06:39 . 2008-09-08 16:04 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\SecTaskMan
2008-09-06 06:38 . 2008-09-06 06:54 <DIR> d-------- C:\Program Files\Security Task Manager
2008-09-04 17:50 . 2008-09-08 16:05 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\PrevxCSI
2008-08-31 10:28 . 2008-09-05 17:26 <DIR> d-------- C:\Program Files\Eusing Free Registry Cleaner
2008-08-30 12:28 . 2008-08-30 12:28 <DIR> d-------- C:\Documents and Settings\Tayyab.COMPUTER\Application Data\Malwarebytes
2008-08-30 12:28 . 2008-08-30 12:28 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Malwarebytes
2008-08-30 12:25 . 2008-08-30 12:25 <DIR> d-------- C:\_OTMoveIt
2008-08-30 12:04 . 2008-08-30 12:04 <DIR> d-------- C:\Program Files\Trend Micro
2008-08-28 22:13 . 2008-08-28 22:13 <DIR> d-------- C:\Program Files\AVG
2008-08-28 20:07 . 2008-09-04 15:32 <DIR> d-a------ C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP
2008-08-28 20:06 . 2008-09-05 17:25 <DIR> d-------- C:\Fraps
2008-08-25 09:41 . 2008-08-25 09:42 <DIR> d-------- C:\Program Files\QuickTime
2008-08-25 09:38 . 2008-08-25 09:38 <DIR> d-------- C:\Program Files\Apple Software Update
2008-08-25 09:38 . 2008-08-25 09:38 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Apple
2008-08-24 21:12 . 2008-08-24 21:12 <DIR> d-------- C:\Program Files\Voipwise.com
2008-08-22 12:36 . 2008-08-22 12:36 <DIR> d-------- C:\Documents and Settings\Tayyab.COMPUTER\Application Data\Ahead

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-09-10 00:27 --------- d-----w C:\Documents and Settings\Tahir.COMPUTER\Application Data\Skype
2008-09-10 00:12 4,224 ----a-w C:\WINDOWS\system32\drivers\beep.sys
2008-09-09 12:55 --------- d-----w C:\Program Files\Personal Phone Gateway
2008-09-07 20:29 --------- d-----w C:\Program Files\eMule
2008-09-06 17:10 --------- d-----w C:\Documents and Settings\Tayyab.COMPUTER\Application Data\Nokia
2008-09-06 01:53 --------- d-----w C:\Program Files\Messenger Plus! Live
2008-09-05 23:35 --------- d-----w C:\Program Files\DivX
2008-09-05 23:31 --------- d-----w C:\Program Files\Windows Live
2008-09-05 23:28 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\WLInstaller
2008-09-04 14:37 --------- d-----w C:\Program Files\Lx_cats
2008-09-01 12:28 --------- d-----w C:\Program Files\VoipCheap
2008-08-31 15:20 --------- d-----w C:\Program Files\Winamp
2008-08-31 15:19 --------- d-----w C:\Documents and Settings\Tayyab.COMPUTER\Application Data\Winamp
2008-08-30 19:21 --------- d-----w C:\Program Files\World of Warcraft
2008-08-30 17:51 --------- d-----w C:\Program Files\Warcraft III
2008-08-29 23:06 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-08-29 23:06 --------- d-----w C:\Program Files\SD EnterNET
2008-08-25 15:41 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Apple Computer
2008-07-07 20:32 253,952 ----a-w C:\WINDOWS\system32\es.dll
2008-06-24 16:23 74,240 ----a-w C:\WINDOWS\system32\mscms.dll
2008-06-23 15:38 659,456 ----a-w C:\WINDOWS\system32\wininet.dll
2008-06-20 17:41 245,248 ----a-w C:\WINDOWS\system32\mswsock.dll
2007-10-26 01:28 1,572,864 ----a-w C:\Program Files\portal.exe
2007-10-20 00:19 32 ----a-r C:\Documents and Settings\All Users\hash.dat
2007-10-03 23:24 49,152 ----a-w C:\Program Files\backup.exe
2007-08-23 23:41 1,127 ----a-w C:\Program Files\Credits.txt
2007-08-08 01:09 61 ----a-w C:\Program Files\settings.ini
2006-06-29 01:16 62,808 ----a-w C:\Documents and Settings\Tahir.COMPUTER\Application Data\GDIPFONTCACHEV1.DAT
2006-06-18 21:37 62,808 ----a-w C:\Documents and Settings\Tayyab.COMPUTER\Application Data\GDIPFONTCACHEV1.DAT
2006-05-14 16:25 476,672 ----a-w C:\Program Files\7z.exe
2006-04-26 03:04 8 ----a-w C:\Documents and Settings\Tahir\Application Data\usb.dat.bin
2006-04-15 22:31 557,056 ----a-w C:\Documents and Settings\Tahir\chatlnk.exe
2006-04-13 23:40 16,760 ----a-w C:\Documents and Settings\Tahir\Application Data\GDIPFONTCACHEV1.DAT
2002-12-20 20:02 1,077,336 ----a-w C:\Program Files\MSCOMCTL.OCX
2001-08-23 13:00 77,824 ----a-w C:\Program Files\asycfilt.dll
2001-08-23 13:00 593,920 ----a-w C:\Program Files\wininet.dll
2001-08-23 13:00 569,344 ----a-w C:\Program Files\oleaut32.dll
2001-08-23 13:00 452,096 ----a-w C:\Program Files\urlmon.dll
2001-08-23 13:00 106,496 ----a-w C:\Program Files\olepro32.dll
2001-08-23 13:00 1,388,544 ----a-w C:\Program Files\msvbvm60.dll
1998-06-24 06:00 115,016 ----a-w C:\Program Files\MSINET.OCX
1998-06-18 06:00 102,912 ----a-w C:\Program Files\VB6STKIT.DLL
1998-05-31 06:00 22,288 ----a-w C:\Program Files\COMCAT.DLL
.

(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.

---- Directory of C:\Program Files\eMule ----

2006-09-29 08:26 9620 --a------ C:\Program Files\eMule\config\preferences.ini
2006-09-29 08:26 933 --a------ C:\Program Files\eMule\Temp\001.part.met.bak
2006-09-29 08:26 933 --a------ C:\Program Files\eMule\Temp\001.part.met
2006-09-29 08:26 876 --a------ C:\Program Files\eMule\Temp\008.part.met.bak
2006-09-29 08:26 876 --a------ C:\Program Files\eMule\Temp\008.part.met
2006-09-29 08:26 854 --a------ C:\Program Files\eMule\Temp\006.part.met.bak
2006-09-29 08:26 854 --a------ C:\Program Files\eMule\Temp\006.part.met
2006-09-29 08:26 818 --a------ C:\Program Files\eMule\Temp\022.part.met.bak
2006-09-29 08:26 818 --a------ C:\Program Files\eMule\Temp\022.part.met
2006-09-29 08:26 639 --a------ C:\Program Files\eMule\Temp\106.part.met.bak
2006-09-29 08:26 639 --a------ C:\Program Files\eMule\Temp\106.part.met
2006-09-29 08:26 5 --a------ C:\Program Files\eMule\config\emfriends.met
2006-09-29 08:26 465 --a------ C:\Program Files\eMule\Temp\025.part.met.bak
2006-09-29 08:26 465 --a------ C:\Program Files\eMule\Temp\025.part.met
2006-09-29 08:26 461 --a------ C:\Program Files\eMule\Temp\111.part.met.bak
2006-09-29 08:26 461 --a------ C:\Program Files\eMule\Temp\111.part.met
2006-09-29 08:26 376 --a------ C:\Program Files\eMule\Temp\009.part.met.bak
2006-09-29 08:26 376 --a------ C:\Program Files\eMule\Temp\009.part.met
2006-09-29 08:26 339 --a------ C:\Program Files\eMule\Temp\154.part.met.bak
2006-09-29 08:26 339 --a------ C:\Program Files\eMule\Temp\154.part.met
2006-09-29 08:26 308 --a------ C:\Program Files\eMule\Temp\057.part.met.bak
2006-09-29 08:26 308 --a------ C:\Program Files\eMule\Temp\057.part.met
2006-09-29 08:26 306 --a------ C:\Program Files\eMule\Temp\058.part.met.bak
2006-09-29 08:26 306 --a------ C:\Program Files\eMule\Temp\058.part.met
2006-09-29 08:26 305 --a------ C:\Program Files\eMule\Temp\207.part.met.bak
2006-09-29 08:26 305 --a------ C:\Program Files\eMule\Temp\207.part.met
2006-09-29 08:26 304 --a------ C:\Program Files\eMule\Temp\024.part.met.bak
2006-09-29 08:26 304 --a------ C:\Program Files\eMule\Temp\024.part.met
2006-09-29 08:26 302 --a------ C:\Program Files\eMule\Temp\197.part.met.bak
2006-09-29 08:26 302 --a------ C:\Program Files\eMule\Temp\197.part.met
2006-09-29 08:26 298 --a------ C:\Program Files\eMule\Temp\044.part.met.bak
2006-09-29 08:26 298 --a------ C:\Program Files\eMule\Temp\044.part.met
2006-09-29 08:26 296 --a------ C:\Program Files\eMule\Temp\183.part.met.bak
2006-09-29 08:26 296 --a------ C:\Program Files\eMule\Temp\183.part.met
2006-09-29 08:26 291 --a------ C:\Program Files\eMule\Temp\042.part.met.bak
2006-09-29 08:26 291 --a------ C:\Program Files\eMule\Temp\042.part.met
2006-09-29 08:26 290 --a------ C:\Program Files\eMule\Temp\181.part.met.bak
2006-09-29 08:26 290 --a------ C:\Program Files\eMule\Temp\181.part.met
2006-09-29 08:26 290 --a------ C:\Program Files\eMule\Temp\038.part.met.bak
2006-09-29 08:26 290 --a------ C:\Program Files\eMule\Temp\038.part.met
2006-09-29 08:26 272 --a------ C:\Program Files\eMule\Temp\081.part.met.bak
2006-09-29 08:26 272 --a------ C:\Program Files\eMule\Temp\081.part.met
2006-09-29 08:26 266 --a------ C:\Program Files\eMule\Temp\198.part.met.bak
2006-09-29 08:26 266 --a------ C:\Program Files\eMule\Temp\198.part.met
2006-09-29 08:26 264 --a------ C:\Program Files\eMule\Temp\178.part.met.bak
2006-09-29 08:26 264 --a------ C:\Program Files\eMule\Temp\178.part.met
2006-09-29 08:26 260 --a------ C:\Program Files\eMule\Temp\084.part.met.bak
2006-09-29 08:26 260 --a------ C:\Program Files\eMule\Temp\084.part.met
2006-09-29 08:26 256 --a------ C:\Program Files\eMule\Temp\067.part.met.bak
2006-09-29 08:26 256 --a------ C:\Program Files\eMule\Temp\067.part.met
2006-09-29 08:26 256 --a------ C:\Program Files\eMule\Temp\002.part.met.bak
2006-09-29 08:26 256 --a------ C:\Program Files\eMule\Temp\002.part.met
2006-09-29 08:26 254 --a------ C:\Program Files\eMule\Temp\131.part.met.bak
2006-09-29 08:26 254 --a------ C:\Program Files\eMule\Temp\131.part.met
2006-09-29 08:26 252880 --a------ C:\Program Files\eMule\config\clients.met
2006-09-29 08:26 251 --a------ C:\Program Files\eMule\Temp\168.part.met.bak
2006-09-29 08:26 251 --a------ C:\Program Files\eMule\Temp\168.part.met
2006-09-29 08:26 250 --a------ C:\Program Files\eMule\Temp\123.part.met.bak
2006-09-29 08:26 250 --a------ C:\Program Files\eMule\Temp\123.part.met
2006-09-29 08:26 244 --a------ C:\Program Files\eMule\Temp\170.part.met.bak
2006-09-29 08:26 244 --a------ C:\Program Files\eMule\Temp\170.part.met
2006-09-29 08:26 242 --a------ C:\Program Files\eMule\Temp\174.part.met.bak
2006-09-29 08:26 242 --a------ C:\Program Files\eMule\Temp\174.part.met
2006-09-29 08:26 240 --a------ C:\Program Files\eMule\Temp\190.part.met.bak
2006-09-29 08:26 240 --a------ C:\Program Files\eMule\Temp\190.part.met
2006-09-29 08:26 240 --a------ C:\Program Files\eMule\Temp\070.part.met.bak
2006-09-29 08:26 240 --a------ C:\Program Files\eMule\Temp\070.part.met
2006-09-29 08:26 236 --a------ C:\Program Files\eMule\Temp\010.part.met.bak
2006-09-29 08:26 236 --a------ C:\Program Files\eMule\Temp\010.part.met
2006-09-29 08:26 236 --a------ C:\Program Files\eMule\Temp\005.part.met.bak
2006-09-29 08:26 236 --a------ C:\Program Files\eMule\Temp\005.part.met
2006-09-29 08:26 234 --a------ C:\Program Files\eMule\Temp\173.part.met.bak
2006-09-29 08:26 234 --a------ C:\Program Files\eMule\Temp\173.part.met
2006-09-29 08:26 234 --a------ C:\Program Files\eMule\Temp\066.part.met.bak
2006-09-29 08:26 234 --a------ C:\Program Files\eMule\Temp\066.part.met
2006-09-29 08:26 233 --a------ C:\Program Files\eMule\Temp\124.part.met.bak
2006-09-29 08:26 233 --a------ C:\Program Files\eMule\Temp\124.part.met
2006-09-29 08:26 231 --a------ C:\Program Files\eMule\Temp\015.part.met.bak
2006-09-29 08:26 231 --a------ C:\Program Files\eMule\Temp\015.part.met
2006-09-29 08:26 230 --a------ C:\Program Files\eMule\Temp\028.part.met.bak
2006-09-29 08:26 230 --a------ C:\Program Files\eMule\Temp\028.part.met
2006-09-29 08:26 224 --a------ C:\Program Files\eMule\Temp\065.part.met.bak
2006-09-29 08:26 224 --a------ C:\Program Files\eMule\Temp\065.part.met
2006-09-29 08:26 221 --a------ C:\Program Files\eMule\Temp\205.part.met.bak
2006-09-29 08:26 221 --a------ C:\Program Files\eMule\Temp\205.part.met
2006-09-29 08:26 220 --a------ C:\Program Files\eMule\Temp\176.part.met.bak
2006-09-29 08:26 220 --a------ C:\Program Files\eMule\Temp\176.part.met
2006-09-29 08:26 216 --a------ C:\Program Files\eMule\Temp\078.part.met.bak
2006-09-29 08:26 216 --a------ C:\Program Files\eMule\Temp\078.part.met
2006-09-29 08:26 214 --a------ C:\Program Files\eMule\Temp\167.part.met.bak
2006-09-29 08:26 214 --a------ C:\Program Files\eMule\Temp\167.part.met
2006-09-29 08:26 212 --a------ C:\Program Files\eMule\Temp\087.part.met.bak
2006-09-29 08:26 212 --a------ C:\Program Files\eMule\Temp\087.part.met
2006-09-29 08:26 209 --a------ C:\Program Files\eMule\Temp\224.part.met.bak
2006-09-29 08:26 209 --a------ C:\Program Files\eMule\Temp\224.part.met
2006-09-29 08:26 208 --a------ C:\Program Files\eMule\Temp\027.part.met.bak
2006-09-29 08:26 208 --a------ C:\Program Files\eMule\Temp\027.part.met
2006-09-29 08:26 206 --a------ C:\Program Files\eMule\Temp\189.part.met.bak
2006-09-29 08:26 206 --a------ C:\Program Files\eMule\Temp\189.part.met
2006-09-29 08:26 205 --a------ C:\Program Files\eMule\Temp\017.part.met.bak
2006-09-29 08:26 205 --a------ C:\Program Files\eMule\Temp\017.part.met
2006-09-29 08:26 202 --a------ C:\Program Files\eMule\Temp\039.part.met.bak
2006-09-29 08:26 202 --a------ C:\Program Files\eMule\Temp\039.part.met
2006-09-29 08:26 200 --a------ C:\Program Files\eMule\Temp\177.part.met.bak
2006-09-29 08:26 200 --a------ C:\Program Files\eMule\Temp\177.part.met
2006-09-29 08:26 199 --a------ C:\Program Files\eMule\Temp\064.part.met.bak
2006-09-29 08:26 199 --a------ C:\Program Files\eMule\Temp\064.part.met
2006-09-29 08:26 197 --a------ C:\Program Files\eMule\Temp\148.part.met.bak
2006-09-29 08:26 197 --a------ C:\Program Files\eMule\Temp\148.part.met
2006-09-29 08:26 191 --a------ C:\Program Files\eMule\Temp\113.part.met.bak
2006-09-29 08:26 191 --a------ C:\Program Files\eMule\Temp\113.part.met
2006-09-29 08:26 191 --a------ C:\Program Files\eMule\Temp\030.part.met.bak
2006-09-29 08:26 191 --a------ C:\Program Files\eMule\Temp\030.part.met
2006-09-29 08:26 188 --a------ C:\Program Files\eMule\Temp\204.part.met.bak
2006-09-29 08:26 188 --a------ C:\Program Files\eMule\Temp\204.part.met
2006-09-29 08:26 187 --a------ C:\Program Files\eMule\Temp\061.part.met.bak
2006-09-29 08:26 187 --a------ C:\Program Files\eMule\Temp\061.part.met
2006-09-29 08:26 182 --a------ C:\Program Files\eMule\Temp\090.part.met.bak
2006-09-29 08:26 182 --a------ C:\Program Files\eMule\Temp\090.part.met
2006-09-29 08:26 178 --a------ C:\Program Files\eMule\Temp\068.part.met.bak
2006-09-29 08:26 178 --a------ C:\Program Files\eMule\Temp\068.part.met
2006-09-29 08:26 177 --a------ C:\Program Files\eMule\Temp\089.part.met.bak
2006-09-29 08:26 177 --a------ C:\Program Files\eMule\Temp\089.part.met
2006-09-29 08:26 177 --a------ C:\Program Files\eMule\Temp\037.part.met.bak
2006-09-29 08:26 177 --a------ C:\Program Files\eMule\Temp\037.part.met
2006-09-29 08:26 176 --a------ C:\Program Files\eMule\Temp\007.part.met.bak
2006-09-29 08:26 176 --a------ C:\Program Files\eMule\Temp\007.part.met
2006-09-29 08:26 174 --a------ C:\Program Files\eMule\Temp\031.part.met.bak
2006-09-29 08:26 174 --a------ C:\Program Files\eMule\Temp\031.part.met
2006-09-29 08:26 173 --a------ C:\Program Files\eMule\Temp\049.part.met.bak
2006-09-29 08:26 173 --a------ C:\Program Files\eMule\Temp\049.part.met
2006-09-29 08:26 173 --a------ C:\Program Files\eMule\Temp\035.part.met.bak
2006-09-29 08:26 173 --a------ C:\Program Files\eMule\Temp\035.part.met
2006-09-29 08:26 172 --a------ C:\Program Files\eMule\Temp\032.part.met.bak
2006-09-29 08:26 172 --a------ C:\Program Files\eMule\Temp\032.part.met
2006-09-29 08:26 170 --a------ C:\Program Files\eMule\Temp\077.part.met.bak
2006-09-29 08:26 170 --a------ C:\Program Files\eMule\Temp\077.part.met
2006-09-29 08:26 162 --a------ C:\Program Files\eMule\Temp\012.part.met.bak
2006-09-29 08:26 162 --a------ C:\Program Files\eMule\Temp\012.part.met
2006-09-29 08:26 161 --a------ C:\Program Files\eMule\Temp\050.part.met.bak
2006-09-29 08:26 161 --a------ C:\Program Files\eMule\Temp\050.part.met
2006-09-29 08:26 159 --a------ C:\Program Files\eMule\Temp\122.part.met.bak
2006-09-29 08:26 159 --a------ C:\Program Files\eMule\Temp\122.part.met
2006-09-29 08:26 155 --a------ C:\Program Files\eMule\Temp\091.part.met.bak
2006-09-29 08:26 155 --a------ C:\Program Files\eMule\Temp\091.part.met
2006-09-29 08:26 155 --a------ C:\Program Files\eMule\Temp\062.part.met.bak
2006-09-29 08:26 155 --a------ C:\Program Files\eMule\Temp\062.part.met
2006-09-29 08:26 155 --a------ C:\Program Files\eMule\Temp\020.part.met.bak
2006-09-29 08:26 155 --a------ C:\Program Files\eMule\Temp\020.part.met
2006-09-29 08:26 154 --a------ C:\Program Files\eMule\Temp\018.part.met.bak
2006-09-29 08:26 154 --a------ C:\Program Files\eMule\Temp\018.part.met
2006-09-29 08:26 151 --a------ C:\Program Files\eMule\Temp\069.part.met.bak
2006-09-29 08:26 151 --a------ C:\Program Files\eMule\Temp\069.part.met
2006-09-29 08:26 150 --a------ C:\Program Files\eMule\Temp\043.part.met.bak
2006-09-29 08:26 150 --a------ C:\Program Files\eMule\Temp\043.part.met
2006-09-29 08:26 150 --a------ C:\Program Files\eMule\Temp\023.part.met.bak
2006-09-29 08:26 150 --a------ C:\Program Files\eMule\Temp\023.part.met
2006-09-29 08:26 149 --a------ C:\Program Files\eMule\Temp\059.part.met.bak
2006-09-29 08:26 149 --a------ C:\Program Files\eMule\Temp\059.part.met
2006-09-29 08:26 149 --a------ C:\Program Files\eMule\Temp\051.part.met.bak
2006-09-29 08:26 149 --a------ C:\Program Files\eMule\Temp\051.part.met
2006-09-29 08:26 147 --a------ C:\Program Files\eMule\Temp\092.part.met.bak
2006-09-29 08:26 147 --a------ C:\Program Files\eMule\Temp\092.part.met
2006-09-29 08:26 145 --a------ C:\Program Files\eMule\Temp\056.part.met.bak
2006-09-29 08:26 145 --a------ C:\Program Files\eMule\Temp\056.part.met
2006-09-29 08:26 143 --a------ C:\Program Files\eMule\Temp\013.part.met.bak
2006-09-29 08:26 143 --a------ C:\Program Files\eMule\Temp\013.part.met
2006-09-29 08:26 142 --a------ C:\Program Files\eMule\Temp\083.part.met.bak
2006-09-29 08:26 142 --a------ C:\Program Files\eMule\Temp\083.part.met
2006-09-29 08:26 142 --a------ C:\Program Files\eMule\Temp\055.part.met.bak
2006-09-29 08:26 142 --a------ C:\Program Files\eMule\Temp\055.part.met
2006-09-29 08:26 132 --a------ C:\Program Files\eMule\Temp\103.part.met.bak
2006-09-29 08:26 132 --a------ C:\Program Files\eMule\Temp\103.part.met
2006-09-29 08:26 132 --a------ C:\Program Files\eMule\Temp\054.part.met.bak
2006-09-29 08:26 132 --a------ C:\Program Files\eMule\Temp\054.part.met
2006-09-29 08:26 131 --a------ C:\Program Files\eMule\Temp\115.part.met.bak
2006-09-29 08:26 131 --a------ C:\Program Files\eMule\Temp\115.part.met
2006-09-29 08:26 129 --a------ C:\Program Files\eMule\Temp\026.part.met.bak
2006-09-29 08:26 129 --a------ C:\Program Files\eMule\Temp\026.part.met
2006-09-29 08:26 125 --a------ C:\Program Files\eMule\Temp\003.part.met.bak
2006-09-29 08:26 125 --a------ C:\Program Files\eMule\Temp\003.part.met
2006-09-29 08:26 124 --a------ C:\Program Files\eMule\Temp\112.part.met.bak
2006-09-29 08:26 124 --a------ C:\Program Files\eMule\Temp\112.part.met
2006-09-29 08:26 123 --a------ C:\Program Files\eMule\Temp\114.part.met.bak
2006-09-29 08:26 123 --a------ C:\Program Files\eMule\Temp\114.part.met
2006-09-29 08:25 5 --a------ C:\Program Files\eMule\config\cancelled.met
2006-09-29 08:25 2130 --a------ C:\Program Files\eMule\config\statistics.ini
2006-09-29 08:25 138157 --a------ C:\Program Files\eMule\config\known.met
2006-09-29 08:15 22050 --a------ C:\Program Files\eMule\config\server_met.old
2006-09-05 21:23 0 --a------ C:\Program Files\eMule\Temp\003.part
2006-09-05 21:23 0 --a------ C:\Program Files\eMule\Temp\001.part
2006-09-01 22:21 272384000 --a------ C:\Program Files\eMule\Temp\006.part
2006-09-01 20:43 194759 --a------ C:\Program Files\eMule\Temp\037.part
2006-09-01 19:21 327873282 --a------ C:\Program Files\eMule\Temp\022.part
2006-09-01 18:01 993865 --a------ C:\Program Files\eMule\config\known2_64.met
2006-09-01 18:01 6313305 --a------ C:\Program Files\eMule\Incoming\management and cost accounting - 6th edition - colin drury_chapter15_p589-643.pdf
2006-09-01 17:37 10238444 --a------ C:\Program Files\eMule\Incoming\Finance Analysis Cost Accounting Radition And Innovation.pdf
2006-09-01 16:14 10897090 --a------ C:\Program Files\eMule\Temp\178.part
2006-09-01 15:28 20480 --a------ C:\Program Files\eMule\Temp\056.part
2006-09-01 14:57 11585310 --a------ C:\Program Files\eMule\Incoming\Mcgraw Hill Pmp Project Management Professional Study Guide Ebook-Ddu.chm
2006-09-01 14:25 184320 --a------ C:\Program Files\eMule\Temp\039.part
2006-09-01 14:11 3589010 --a------ C:\Program Files\eMule\Incoming\Mcgraw-Hill - Project Management For Managers.pdf
2006-09-01 13:48 11137870 --a------ C:\Program Files\eMule\Incoming\Harvard Business Review Apr 2005(1).pdf
2006-09-01 13:29 3478521 --a------ C:\Program Files\eMule\Incoming\Cost Reduction And Control Best Practices - The Best Ways For A Financial Manager To Save Money - 2Nd Edition - 2006(1).pdf
2006-09-01 12:40 500032 --a------ C:\Program Files\eMule\Incoming\Minimization of cost of recycling in chemical processes.pdf
2006-09-01 11:40 14717289 --a------ C:\Program Files\eMule\Incoming\Microsoft Access 2000 Power Programming.pdf
2006-09-01 11:37 3612806 --a------ C:\Program Files\eMule\Incoming\McGraw Hill - Project Management.pdf
2006-08-27 18:14 61440 --a------ C:\Program Files\eMule\Temp\077.part
2006-08-27 18:01 184320 --a------ C:\Program Files\eMule\Temp\051.part
2006-08-27 17:47 11338382 --a------ C:\Program Files\eMule\Incoming\McGraw Hill - PMP Project Management Professional Study Guide.rar
2006-08-27 17:45 11570232 --a------ C:\Program Files\eMule\Incoming\McGraw Hill - PMP Project Management Professional Study Guide.zip
2006-08-27 17:44 218 --a------ C:\Program Files\eMule\Incoming\How To Build A Home Theater Projector - Do-It-Yourself Guide to Low-Cost High-Performance Home Theater Projector System.txt
2006-08-27 17:40 538112 --a------ C:\Program Files\eMule\Temp\007.part
2006-08-27 17:02 780573 --a------ C:\Program Files\eMule\Temp\068.part
2006-08-27 17:00 112640 --a------ C:\Program Files\eMule\Incoming\Project Management Template.ppt
2006-08-27 16:59 1418296 --a------ C:\Program Files\eMule\Incoming\Harvard business revue-Primal Leadership - The hidden driver of great performance(1).pdf
2006-08-27 16:37 5081618 --a------ C:\Program Files\eMule\Incoming\Project 2003- The PORTABLE MBA in PROJECT MANAGEMENT.pdf
2006-08-27 16:19 15152020 --a------ C:\Program Files\eMule\Incoming\Teach YourSelf Prolog.zip
2006-08-27 16:05 3918916 --a------ C:\Program Files\eMule\Incoming\John Wiley & Sons - The Fast Forward Mba In Project Management (2005), 2Ed Ling Lotb.pdf
2006-08-27 15:30 25434142 --a------ C:\Program Files\eMule\Incoming\projm - Human Resource Skills for Project Manager(PMI).pdf
2006-08-27 14:52 787364 --a------ C:\Program Files\eMule\Incoming\An Introduction to Prolog.pdf
2006-08-27 14:47 1385269 --a------ C:\Program Files\eMule\Incoming\Training - Acc512 - Management Accounting And Cost Control Study Guide.pdf
2006-08-27 14:46 8710144 --a------ C:\Program Files\eMule\Incoming\Kranti - Chana Jor Garam Kishore Kumar Lata Mangeshkar Nitin Mukesh Mohammed Rafi.mp3
2006-08-27 14:38 25888926 --a------ C:\Program Files\eMule\Incoming\Harvard Business School Press - Leading Quietly 1578514878.pdf
2006-08-27 14:33 30836243 --a------ C:\Program Files\eMule\Incoming\Julio Battisti - Curso Avançado de Excel.pdf
2006-08-27 14:27 1383230 --a------ C:\Program Files\eMule\Incoming\Reference Manual for Prolog.pdf
2006-08-27 14:19 3351562 --a------ C:\Program Files\eMule\Incoming\McGraw-Hill - Just Enough Project Management [2005].chm
2006-08-27 14:11 3592583 --a------ C:\Program Files\eMule\Incoming\Wiley,.Cost.Reduction.and.Control.Best.Practices.(2006).TLF.pdf
2006-08-27 13:51 611995 --a------ C:\Program Files\eMule\Incoming\tutorial_prolog.pdf
2006-08-27 13:48 1386562 --a------ C:\Program Files\eMule\Incoming\Management Accounting And Cost Control Study Guide (2004).pdf
2006-08-27 13:16 5624635 --a------ C:\Program Files\eMule\Incoming\management and cost accounting - 6th edition - colin drury_chapter10_p368-409.pdf
2006-08-27 13:13 597915 --a------ C:\Program Files\eMule\Incoming\1 - Introduction To Cost And Management Accounting In A Global Business Environment.pdf
2006-08-27 13:12 6851740 --a------ C:\Program Files\eMule\Incoming\management and cost accounting - 6th edition - colin drury_chapter16_p642-693.pdf
2006-08-27 13:11 41627 --a------ C:\Program Files\eMule\Incoming\Cost Control - Activity Based Costing For Project Managment.pdf
2006-08-27 12:37 153516 --a------ C:\Program Files\eMule\Incoming\Introduction_To_Cost_And_Management_Accounting.pdf
2006-08-27 12:31 271389 --a------ C:\Program Files\eMule\Incoming\Project Management for Construction_ Cost Control, Monitoring and Accounting.pdf
2006-08-27 12:24 560350 --a------ C:\Program Files\eMule\Incoming\Budgeting and Cost Estimation.pdf
2006-08-27 12:23 578811 --a------ C:\Program Files\eMule\Incoming\(Ebook-English)_Project-Management-for-Construction-Cost-Estimation.pdf
2006-08-27 12:19 0 --a------ C:\Program Files\eMule\Temp\092.part
2006-08-27 12:19 0 --a------ C:\Program Files\eMule\Temp\091.part
2006-08-27 12:18 0 --a------ C:\Program Files\eMule\Temp\083.part
2006-08-27 12:17 0 --a------ C:\Program Files\eMule\Temp\061.part
2006-08-12 23:03 1587200 --a------ C:\Program Files\eMule\Temp\002.part
2006-08-12 22:54 2893902 --a------ C:\Program Files\eMule\Incoming\Hindi - Yeh Dosti - Kishore Kumar & Mohammed Rafi - Sholay(1).mp3
2006-08-12 22:26 1611252 --a------ C:\Program Files\eMule\Incoming\Mohammed Rafi, Shammi Kapoor - Suku Suku.mp3
2006-08-12 22:23 1535137 --a------ C:\Program Files\eMule\Incoming\Logic, Programming and Prolog (2nd Ed).pdf
2006-08-12 22:13 56469034 --a------ C:\Program Files\eMule\Incoming\ASME 2001 - Boiler And Pressure Vessel Code - Sec II, Part C - Specifications For Welding Rods, Electrodes And Filler Metals.pdf
2006-08-12 22:01 9699435 --a------ C:\Program Files\eMule\Incoming\McGraw-Hill - The Project Manager's Desk Reference 2nd Edition.pdf
2006-08-12 21:30 10258404 --a------ C:\Program Files\eMule\Incoming\Mcgraw Hill Pmp Project Management Professional Study Guide.rar
2006-08-12 20:54 1324690 --a------ C:\Program Files\eMule\Incoming\Ebook Self Help - Kevin Trudeau - Handbook Of Natural Cures.pdf
2006-08-12 20:49 244736 --a------ C:\Program Files\eMule\Incoming\Natural Cures_Kevin Trudeau.doc
2006-08-12 20:42 0 --a------ C:\Program Files\eMule\Temp\049.part
2006-08-07 21:53 4804903 --a------ C:\Program Files\eMule\Incoming\Noorie - Aaja re - Lata - Nitin Mukesh - Music Khaiyyaam - Lyrics - Jan Nisar Akhtar - Yash Raj films.mp3
2006-07-09 15:04 38963200 --a------ C:\Program Files\eMule\Temp\058.part
2006-07-09 14:22 24576 --a------ C:\Program Files\eMule\Incoming\Project Management Golden Rules.ppt
2006-07-09 14:20 354816 --a------ C:\Program Files\eMule\Incoming\MS Project 2000 Tutorial.doc
2006-07-09 13:53 0 --a------ C:\Program Files\eMule\Temp\069.part
2006-07-09 13:53 0 --a------ C:\Program Files\eMule\Temp\062.part
2006-07-08 22:53 844062 --a------ C:\Program Files\eMule\Incoming\Project Management - The Evolutionary Project Manager's Handbook.pdf
2006-07-08 22:33 15418955 --a------ C:\Program Files\eMule\Incoming\Visual Prolog 6.3.zip
2006-07-08 22:29 129572 --a------ C:\Program Files\eMule\Incoming\PMI - PMP Exam Preparation Study Guide - Project Risk Management.pdf
2006-07-08 22:06 29788165 --a------ C:\Program Files\eMule\Incoming\McGraw.Hill.Project.Management.The.Managerial.Process.pdf
2006-07-08 22:03 2764757 --a------ C:\Program Files\eMule\Incoming\Practical Project Management - Tips, Tactics, and Tools.pdf
2006-07-08 22:02 106329 --a------ C:\Program Files\eMule\Incoming\PMP Exam Preparation Study Guide - Project Scope Management.pdf
2006-07-08 21:58 19968 --a------ C:\Program Files\eMule\Incoming\Microsoft Office 2003 (Frontpage, Visio, Project, Onenote) Clave.doc
2006-07-08 21:51 2224020 --a------ C:\Program Files\eMule\Incoming\Report on Project Management and Software Cost Estimation Technologies.pdf
2006-07-08 21:25 23728218 --a------ C:\Program Files\eMule\Temp\131.part
2006-07-08 21:23 0 --a------ C:\Program Files\eMule\Temp\054.part
2006-06-26 14:03 1980405 --a------ C:\Program Files\eMule\Incoming\Tutorial Microsoft Project 2000.pdf
2006-06-26 13:48 2881629 --a------ C:\Program Files\eMule\Incoming\Strategy - Strategic Planning For Project Management [John Wiley & Sons] (Harold Kerzner) .pdf
2006-06-26 13:36 1656551 --a------ C:\Program Files\eMule\Incoming\Project Manager Competency Development Framework, PMI 2001.pdf
2006-06-26 13:17 3309194 --a------ C:\Program Files\eMule\Incoming\AMACOM,.Preparing.for.the.Project.Management.Professional.PMP.Certification.Exam.(2005),.3Ed.YYePG.LotB.pdf
2006-06-26 13:01 0 --a------ C:\Program Files\eMule\Temp\043.part
2006-06-26 13:01 0 --a------ C:\Program Files\eMule\Temp\032.part
2006-06-20 14:48 28345167 --a------ C:\Program Files\eMule\Incoming\IEEE - Protection and Coordination of Industrial and Commercial Power Systems.pdf
2006-06-20 14:35 6163192 --a------ C:\Program Files\eMule\Incoming\Wafa Na Raas Aayee - Bewafa Sanam - Nitin Mukesh.mp3
2006-06-20 14:00 1053768 --a------ C:\Program Files\eMule\Incoming\(business ebook) - Real Estate Investor Business Plan.zip
2006-06-20 13:57 60593769 --a------ C:\Program Files\eMule\Temp\057.part
2006-06-20 13:44 4758622 --a------ C:\Program Files\eMule\Incoming\ASME Y14.41-2003 - Digital Product Definition Data Practises .pdf
2006-06-20 13:35 27234304 --a------ C:\Program Files\eMule\Incoming\IEEE 802.11g Wireless - TRENDnet TEW-423PI v1.10.iso
2006-06-20 12:40 20410195 --a------ C:\Program Files\eMule\Incoming\Wiley.IEEE.Press.Managing.Power.Electronics.VLSI.and.DSP.Driven.Computer.Systems.Nov.2005.eBook-DDU.pdf
2006-06-20 12:36 826368 --a------ C:\Program Files\eMule\Incoming\Robert Kiyosaki - Rich Dad Secrets - Manual.doc
2006-06-20 12:25 600 --a------ C:\Program Files\eMule\Incoming\Real Estate Investing For Dummies Ebook.rar
2006-06-20 11:52 24313856 --a------ C:\Program Files\eMule\Incoming\Robert Kiyosaki - Financial Literacy - 05 of 12 - Real Estate, A Winning Formula.mp3
2006-06-20 11:34 1838001 --a------ C:\Program Files\eMule\Incoming\(eBook) Real Estate - Robert Allen - The Road To Wealth (Multiple Streams of Income).pdf
2006-06-20 11:14 97702 --a------ C:\Program Files\eMule\Incoming\Real Estate Investing 101.zip
2006-06-20 11:01 1120864 --a------ C:\Program Files\eMule\Incoming\Real Estate - Tips & Traps When Buying A Home.pdf
2006-06-20 10:48 9151604 --a------ C:\Program Files\eMule\Incoming\Cover Letter Magic,Trade Secrets Of Professional Resume Writers(Jist)(2Nd)2004.pdf
2006-06-20 10:32 1352824 --a------ C:\Program Files\eMule\Incoming\(Real Estate) The Guide To Buying And Selling A Home.pdf
2006-06-15 14:21 1820214 --a------ C:\Program Files\eMule\Incoming\Wiley, Trump Strategies For Real Estate Billionaire Lessons For The Small Investor (2005); Ocr 7.0-2.6 Lotb.pdf
2006-06-15 14:13 132810 --a------ C:\Program Files\eMule\Incoming\Burley, John - Real Estate Forms [rtf].zip
2006-06-14 14:10 52162 --a------ C:\Program Files\eMule\Incoming\10 Mistakes In Real Estate.pdf
2006-06-14 14:10 1569187 --a------ C:\Program Files\eMule\Incoming\Robert Kiyosaki - Real Estate Investor Business Plan.pdf
2006-06-14 14:07 393699 --a------ C:\Program Files\eMule\Incoming\(Ebook) Guidebook For Real Estate Professionals.pdf
2006-06-14 14:07 38232747 --a------ C:\Program Files\eMule\Incoming\ASME Boiler and Pressure Vessel Code, Section II - Materials.rar
2006-06-14 14:04 240526 --a------ C:\Program Files\eMule\Incoming\ebook - Real Estate - Robert Allen - Money Tree Formula.pdf
2006-06-14 13:58 971848 --a------ C:\Program Files\eMule\Incoming\(eBook) Robert Allen - Robert Allen's Power System for Making Your Real Estate Fortune.pdf
2006-06-14 13:47 738792 --a------ C:\Program Files\eMule\Incoming\Ten Secrets to Becoming a Highly Profitable Residential Developer Real Estate Investing Day Trading Insurance Loan Officer Mortgage Broker Marketing.pdf
2006-06-14 13:46 7495569 --a------ C:\Program Files\eMule\Incoming\Handbook Of Electrical Design Details, 2Nd Edition (2003){home wiring NEC_ANSI) - Tlf.pdf
2006-06-14 13:43 3094902 --a------ C:\Program Files\eMule\Incoming\Robert Kiyosaki - Cashflow Management Secrets.pdf
2006-06-14 13:34 470028 --a------ C:\Program Files\eMule\Incoming\Real Estate - Robert Kiyosaki.pdf
2006-06-14 13:30 93484 --a------ C:\Program Files\eMule\Incoming\Ebook How To Buy Real Estate No Money Down - 5 Non-Profit Sources That Give Money For Downpayment.zip
2006-06-14 13:28 10332090 --a------ C:\Program Files\eMule\Incoming\Real Estate - McGraw.Hill.Home.Closing.Checklist-DDU (business ebook).pdf
2006-06-14 13:23 1401680 --a------ C:\Program Files\eMule\Incoming\(Real Estate) Tips & Traps When Buying A Home (Mcgraw Hill-3Rd Ed-2004).pdf
2006-06-14 13:14 33407 --a------ C:\Program Files\eMule\Incoming\Real estate investment basics by John T Reed.pdf
2006-06-14 13:06 130539 --a------ C:\Program Files\eMule\Incoming\Real Estate - Buying Income Property - The Model Plan.pdf
2006-06-14 13:02 33030506 --a------ C:\Program Files\eMule\Incoming\Wiley Ieee Press Modeling And High Performance Control Of Electric Machines Ebook-Kb.pdf
2006-06-14 13:00 593426 --a------ C:\Program Files\eMule\Incoming\wetfeet - careers_in_real_estate.pdf
2006-06-14 13:00 1253327 --a------ C:\Program Files\eMule\Incoming\Real Estate For Pennies On The Dollar.pdf
2006-06-14 12:58 1539438 --a------ C:\Program Files\eMule\Incoming\29 Leadership Secrets From Jack Welch.pdf
2006-06-14 12:52 2014014 --a------ C:\Program Files\eMule\Incoming\Thomas L Friedman - The Lexus And The Olive Tree (Globalisation).pdf
2006-06-14 12:37 1566097 --a------ C:\Program Files\eMule\Incoming\High Profit Passive Real Estate Investments.pdf
2006-06-14 12:29 440528 --a------ C:\Program Files\eMule\Incoming\How To Find Hidden Real Estate Bargains.pdf
2006-06-14 12:22 1252259 --a------ C:\Program Files\eMule\Incoming\- Carlton Sheets - No Money Down Real Estate - EBOOK.PDF
2006-06-14 12:13 537042 --a------ C:\Program Files\eMule\Incoming\Real Estate Developer Program for Investors & Small Developers Investment Wealth Tax Liens Investments Day Trad.pdf
2006-06-14 12:07 38400 --a------ C:\Program Files\eMule\Incoming\Time Management Secrets.doc
2006-06-14 12:06 276731 --a------ C:\Program Files\eMule\Incoming\CashFlow Secrets.pdf
2006-06-14 12:01 1478498 --a------ C:\Program Files\eMule\Incoming\McGraw Hill - 29 Leadership Secrets From Jack Welch Ebook-FLY.pdf
2006-06-14 12:00 161124 --a------ C:\Program Files\eMule\Incoming\Robert G. Allen - Nothing Down Real Estate.pdf
2006-06-14 11:56 1227520 --a------ C:\Program Files\eMule\Incoming\Thomas Friedman - The World is Flat.pdf
2006-06-14 11:49 2639085 --a------ C:\Program Files\eMule\Incoming\Wiley, How To Make Money With Real Estate Options (2005) Yyepg Lotb.pdf
2006-06-14 11:48 971848 --a------ C:\Program Files\eMule\Incoming\Robert Allen - Making Your Real Estate Fortune.pdf
2006-06-14 11:47 9774938 --a------ C:\Program Files\eMule\Incoming\Wiley,.The.Beginners.Guide.to.Real.Estate.Investing.(2004).YYePG.LotB.pdf
2006-06-14 11:47 13731170 --a------ C:\Program Files\eMule\Incoming\2_Thomas L Friedman - The World Is Flat A Brief History Of The 21St Century(1).pdf
2006-06-14 11:44 2129900 --a------ C:\Program Files\eMule\Incoming\Wiley-Making Your Fortune In Real Estate Investing-Unlimited Riches.pdf
2006-06-14 11:41 1240038 --a------ C:\Program Files\eMule\Incoming\Donald Trump - Fortune Without Fear Real Estate Riches.pdf
2006-06-14 11:39 1927923 --a------ C:\Program Files\eMule\Incoming\Wiley - Trump Strategies for Real Estate (2005).pdf
2006-06-14 11:35 2529825 --a------ C:\Program Files\eMule\Incoming\Wiley, How to Make Money with Real Estate Options (2005) YYePG; OCR 7.0-2.6 LotB.pdf
2006-06-14 11:32 1115313 --a------ C:\Program Files\eMule\Incoming\Brian Tracy - Real Estate Handbook.pdf
2006-06-14 11:05 179381 --a------ C:\Program Files\eMule\Incoming\chomsky, noam - secrets, lies and democracy.pdf
2006-06-13 23:20 654859 --a------ C:\Program Files\eMule\Incoming\Robert Irwin - Buy, Rent, And Sell - How To Profit By Investing In Residential Real Estate.zip
2006-06-13 23:15 3467752 --a------ C:\Program Files\eMule\Incoming\Instrumentation Symbols ANSI-ISA S5.1.pdf
2006-06-13 23:13 1252259 --a------ C:\Program Files\eMule\Incoming\[EBOOK] - Carleton Sheets - No Money Down - Real Estate Forms.PDF
2006-06-13 23:10 13300393 --a------ C:\Program Files\eMule\Incoming\IEEE Press - Power Electronic Converter Harmonics.pdf
2006-06-13 23:09 0 --a------ C:\Program Files\eMule\Temp\089.part
2006-06-11 18:12 169908 --a------ C:\Program Files\eMule\Incoming\IEEE 1058 Standard for Project Management Plans, 1998.pdf
2006-06-11 18:10 2832487 --a------ C:\Program Files\eMule\Incoming\IEEE - Developing Effective Engineering Leadership.pdf
2006-06-11 18:00 20940370 --a------ C:\Program Files\eMule\Incoming\Wiley - IEEE.Press.Modern.Industrial.Automation.Software.Design.Feb.2006.pdf
2006-06-11 17:12 8861457 --a------ C:\Program Files\eMule\Incoming\Wiley - Fundamentals of Telecommunications - (IEEE) - 2ed, 2005.pdf
2006-06-11 17:03 3199088 --a------ C:\Program Files\eMule\Incoming\ANSI ISA - Instrumentation Symbols And Identification.rar
2006-06-11 16:19 435037 --a------ C:\Program Files\eMule\Incoming\IEEE - Migrating from SCADA to Automation.pdf
2006-06-11 16:18 557923 --a------ C:\Program Files\eMule\Incoming\IEEE - Concept Design for a Web-based SCADA System.pdf
2006-06-11 16:14 586328 --a------ C:\Program Files\eMule\Incoming\IEEE - PLC and SCADA - A Water Industry Experience.pdf
2006-06-11 16:12 5275311 --a------ C:\Program Files\eMule\Incoming\IEEE Std 519-1992 - Recommended Practices and Requirements for Harmonic Control in Electric Power Systems.pdf
2006-06-11 16:12 35038 --a------ C:\Program Files\eMule\Incoming\mathlib - MathLib v1.1 IEEE-754 double math function library [Palm].zip
2006-06-11 15:51 7450369 --a------ C:\Program Files\eMule\Incoming\[welding] ANSI-AWS D14.5-97; Specification for Welding of Presses and Press Components - AWS (eBook, 117 pages).pdf
2006-06-11 15:48 3078853 --a------ C:\Program Files\eMule\Incoming\Ansi-Aws Standard a5.1-91; Specification For Carbon Steel Electrodes For Shielded Metal Arc Welding (Ebook, 57 Pages).pdf
2006-06-11 15:23 532054 --a------ C:\Program Files\eMule\Incoming\IEEE - intranet technologies for SCADA.pdf
2006-06-11 15:21 23385362 --a------ C:\Program Files\eMule\Temp\067.part
2006-06-11 15:20 2270194 --a------ C:\Program Files\eMule\Incoming\[welding] ANSI-AWS standard A5.9-1993; Specification for Bare Stainless Steel Welding Electrodes and Rods (eBook, 33 pages).pdf
2006-06-11 15:11 163057620 --a------ C:\Program Files\eMule\Incoming\2_ALBUMS LATA 80 - All My Life ALBUM.mp3
2006-06-11 14:59 22096972 --a------ C:\Program Files\eMule\Incoming\ASME B31.3 (2002) - Process Piping.pdf
2006-06-11 14:59 21957877 --a------ C:\Program Files\eMule\Temp\070.part
2006-06-11 14:58 22096972 --a------ C:\Program Files\eMule\Incoming\ASME B31.3 2002 - Process Piping.pdf
2006-06-11 14:32 255683 --a------ C:\Program Files\eMule\Incoming\IEEE Standard Electrical Power System Device Function Numbers.pdf
2006-06-11 13:51 9081592 --a------ C:\Program Files\eMule\Incoming\Wiley.IEEE.Press.Fundamentals.of.Telecommunications.2nd.Edition.Apr.2005.pdf
2006-06-11 13:32 27750500 --a------ C:\Program Files\eMule\Incoming\Ansi-Aws Standard d1.1-2002; Structural Welding Code - Steel (Ebook, 547 Pages).pdf
2006-05-30 00:18 324865702 --a------ C:\Program Files\eMule\Incoming\CBT.Nuggets.PMP.rar
2006-05-29 19:06 272836 --a------ C:\Program Files\eMule\Incoming\Financial management in construction.pdf
2006-05-29 18:56 173397 --a------ C:\Program Files\eMule\Temp\113.part
2006-05-29 17:34 21447778 --a------ C:\Program Files\eMule\Incoming\Nfpa - Collection Fire Building Mechanical Standards Codes Life Sprinklers Etc.zip
2006-05-29 17:23 227214425 --a------ C:\Program Files\eMule\Incoming\Access.2003.VBA.Programmers.Reference.Mar.2004.doc
2006-05-29 17:10 9519351 --a------ C:\Program Files\eMule\Incoming\McGraw.Hill.Microsoft.Office.Access.2003.The.Complete.Reference.eBook-LiB(1).pdf
2006-05-29 16:12 791707 --a------ C:\Program Files\eMule\Incoming\Harvard Business School Press - Hiring and Keeping the Best_2002.pdf
2006-05-29 15:06 20585489 --a------ C:\Program Files\eMule\Incoming\John Wiley & Sons - Microsoft Office Excel 2003 Bible.pdf
2006-05-29 14:56 6836294 --a------ C:\Program Files\eMule\Incoming\Mohd Rafi, Kishore Kumar & Lata - Janu Meri Jaan.mp3
2006-05-29 14:11 1143358 --a------ C:\Program Files\eMule\Incoming\NFPA - Manual of Style.pdf
2006-05-29 13:48 424330798 --a------ C:\Program Files\eMule\Incoming\CBT Nuggets - Project Management Professional.zip
2006-05-29 13:28 94394818 --a------ C:\Program Files\eMule\Incoming\2005 Nec Handbook(National Electrical Code, Nfpa 70).rar
2006-05-29 13:13 16305745 --a------ C:\Program Files\eMule\Incoming\NFPA National Electrical Code Handbook (2005)-c.pdf
2006-05-29 12:05 2278507 --a------ C:\Program Files\eMule\Incoming\NFPA 15.pdf
2006-05-29 11:46 990974 --a------ C:\Program Files\eMule\Incoming\(eBook) - Harvard Business School - Hiring and Keeping the Best.pdf.rar
2006-05-29 11:31 802592 --a------ C:\Program Files\eMule\Incoming\Harvard Business School Press Working Identity.pdf
2006-05-29 10:46 8260567 --a------ C:\Program Files\eMule\Incoming\McGraw-Hill - How To Do Everything With Adobe Acrobat 6.0.pdf
2006-05-29 09:34 3304118 --a------ C:\Program Files\eMule\Incoming\Talat Mahmood & Shamshad Begum - Duniya badal gayi ( BABUL).mp3
2006-05-29 09:08 2299573 --a------ C:\Program Files\eMule\Incoming\The First 90 Days Critical Success Strategies For New Leaders At All Levels (Watkins) [Harvard Business School].pdf
2006-05-28 22:37 2301112 --a------ C:\Program Files\eMule\Incoming\The.Project.Management.Communications.Toolkit.pdf
2006-05-27 21:39 9702441 --a------ C:\Program Files\eMule\Incoming\Jack.Welch.Winning.pdf
2006-05-27 20:36 1620469 --a------ C:\Program Files\eMule\Incoming\Career Press - Coaching, Mentoring And Managing - Breakthrough Strategies To Solve Performance Problems And Build Winning Teams(1).pdf
2006-05-27 20:28 2580864 --a------ C:\Program Files\eMule\Incoming\McGraw Hill - The Manager's Guide to Effective Meetings Ebook-fly.pdf
2006-05-27 20:20 5750522 --a------ C:\Program Files\eMule\Incoming\Ebook - Management - Negotiation - The Science Of Influence.pdf
2006-05-27 19:56 47959 --a------ C:\Program Files\eMule\Incoming\Nolo Press - How to Safely and Legally Hire Independent Contractors - Contract Agreements.pdf
2006-05-27 19:29 3089671 --a------ C:\Program Files\eMule\Incoming\CRM McGraw Hill - Customer Relationship Management (2002).pdf
2006-05-27 19:29 1769472 --a------ C:\Program Files\eMule\Incoming\Harvard Business Review - Leadership Lessons Of Mount Everest.pdf
2006-05-27 19:21 1430722 --a------ C:\Program Files\eMule\Incoming\Time and Stress Management - 013036.pdf
2006-05-27 19:16 3464615 --a------ C:\Program Files\eMule\Incoming\Resume Writing & Interviews Mcgraw-Hil.pdf
2006-05-27 19:11 6864026 --a------ C:\Program Files\eMule\Incoming\Hindi (OLD) - Bobby - Lata & Mukesh - Chabi Kho Jai.mp3
2006-05-27 18:51 1685829 --a------ C:\Program Files\eMule\Incoming\Winning.The.Interview.Game.Everything.You.Need.To.Know.To.Land.The.Job.NIERENBERG.AMACOM.0814472796.2005.YYePG.pdf
2006-05-27 18:51 1204430 --a------ C:\Program Files\eMule\Incoming\Management - The.Essential.Peter.Drucker.Complete.ebook.rar
2006-05-27 18:46 2557385 --a------ C:\Program Files\eMule\Incoming\How To Sell Yourself - Winning Techniques For Selling Yourself Your Ideas Your Message.pdf
2006-05-27 18:41 2025031 --a------ C:\Program Files\eMule\Incoming\Wiley - Essentials Of Knowledge Management.pdf
2006-05-27 18:38 38983603 --a------ C:\Program Files\eMule\Incoming\2003 International Building Code.pdf
2006-05-27 18:16 4260077 --a------ C:\Program Files\eMule\Incoming\Absolute Beginner's Guide to Winning Presentations (Que-2004).pdf
2006-05-26 23:25 2511320 --a------ C:\Program Files\eMule\Incoming\Harvard Business School Press Value Sweep Mapping Corporate Growth Opportunities.pdf
2006-05-26 23:13 7824122 --a------ C:\Program Files\eMule\Incoming\[management]McGraw-Hill - How to Write Better Business Letters.pdf
2006-05-26 23:05 2539960 --a------ C:\Program Files\eMule\Incoming\Career.Press-10.Insider.Secrets.to.a.winning.Job.Search-2004.(By.Laxxuss).pdf
2006-05-26 23:02 1662893 --a------ C:\Program Files\eMule\Incoming\AMACOM,.Winning.The.Interview.Game.(2005).YYePG.LotB.pdf
2006-05-26 22:48 0 --a------ C:\Program Files\eMule\Temp\030.part
2006-05-26 22:48 0 --a------ C:\Program Files\eMule\Temp\012.part
2006-05-26 12:00 12629770 --a------ C:\Program Files\eMule\Temp\204.part
2006-05-26 11:41 35506642 --a------ C:\Program Files\eMule\Incoming\Letter to CEOs - Harvard Business School.pdf
2006-05-25 22:55 1319424 --a------ C:\Program Files\eMule\Incoming\Project Management Professional (PMI) study guide(2).ppt
2006-05-25 22:42 2510953 --a------ C:\Program Files\eMule\Incoming\(2003) Time Management - Mcgraw Hill (Ebook-177P).pdf
2006-05-25 22:35 45114745 --a------ C:\Program Files\eMule\Incoming\[????.2006?1-5?].Harvard.Business.Review.200603.pdf
2006-05-25 22:32 45935895 --a------ C:\Program Files\eMule\Incoming\[????.2006?1-5?].Harvard.Business.Review.200604.pdf
2006-05-25 21:58 1639957 --a------ C:\Program Files\eMule\Incoming\NFPA 79 Electrical Standard for Industrial Machinery.pdf
2006-05-25 21:38 491420 --a------ C:\Program Files\eMule\Incoming\Peter F. Drucker - Management.pdf
2006-05-25 21:35 35615834 --a------ C:\Program Files\eMule\Incoming\[????.2006?1-4?].Harvard.Business.Review.200601.pdf
2006-05-25 21:34 1332710 --a------ C:\Program Files\eMule\Incoming\2003 International Mechanical Code 2Nd Edition.pdf
2006-05-25 21:32 38164721 --a------ C:\Program Files\eMule\Incoming\2003 International Building Code 2Nd Edition.pdf
2006-05-25 21:17 409449 --a------ C:\Program Files\eMule\Incoming\NFPA 50B-1999.pdf
2006-05-25 21:09 130057 --a------ C:\Program Files\eMule\Incoming\Management - The Manager's Guide to Effective Meetings.pdf
2006-05-25 21:08 2120164 --a------ C:\Program Files\eMule\Incoming\Harvard.Geeks.And.Geezers.How.Era.Values.And.Defining.Moments.Shape.Leaders.(2002).Fly.[2,02.MB_www.netz.ru].pdf
2006-05-25 21:07 689790 --a------ C:\Program Files\eMule\Incoming\Project Management - New Six Sigma - A Leader Guide To Achieving Rapid Business (Prentice Hall).chm
2006-05-25 20:58 25888926 --a------ C:\Program Files\eMule\Incoming\Harvard Business School Press - Leading Quietly.pdf
2006-05-25 20:56 2897305 --a------ C:\Program Files\eMule\Incoming\NFPA 8501 Operación de calderas de un quemador.pdf
2006-05-25 20:54 31088822 --a------ C:\Program Files\eMule\Incoming\Wiley - Project Management - A Systems Approach to Planning, Scheduling, and Controlling.pdf
2006-05-25 20:52 12567832 --a------ C:\Program Files\eMule\Incoming\Harvard Business Review 2006-02.pdf
2006-05-25 20:49 788020 --a------ C:\Program Files\eMule\Incoming\(eBook) - Harvard Business School - Working Identity Unconventional Strategies For Reinventing Your Career.chm
2006-05-25 20:47 82025 --a------ C:\Program Files\eMule\Incoming\Harvard Business School-Michael Porter's Prescription for High Cost of Health Care.pdf
2006-05-25 20:43 7231680 --a------ C:\Program Files\eMule\Incoming\NC Building Code (Mechanical, 2002, ICC).pdf
2006-05-25 20:42 76 --a------ C:\Program Files\eMule\Incoming\Serial Microsoft Project Profesional 2003.txt
2006-05-25 20:40 325262 --a------ C:\Program Files\eMule\Incoming\2 Harvard Business School - Project Management Manual.pdf
2006-05-25 20:34 186757 --a------ C:\Program Files\eMule\Incoming\Project Management - The Project Manager's MBA.pdf
2006-05-25 20:34 16866390 --a------ C:\Program Files\eMule\Incoming\Hungry Minds - Access 2002 Bible [2001].pdf
2006-05-25 20:21 313078 --a------ C:\Program Files\eMule\Incoming\Harvard Business School Project Management Manual.pdf
2006-05-25 20:17 41211440 --a------ C:\Program Files\eMule\Incoming\MS Press - Microsoft Access 2002 Inside Out [2002].chm
2006-05-25 20:16 317162 --a------ C:\Program Files\eMule\Incoming\Articles.-.Harvard.Business.Review.-.Mass.Customization.pdf
2006-05-25 20:16 2945681 --a------ C:\Program Files\eMule\Incoming\Wiley - Strategic Planning for Project Management Using a Project Management Maturity Model.pdf
2006-05-25 20:15 534612 --a------ C:\Program Files\eMule\Incoming\Life Skills - Time Management - Academic Development.pdf
2006-05-25 20:12 3187576 --a------ C:\Program Files\eMule\Incoming\Wiley - Getting Started in Project Management.pdf
2006-05-25 20:12 2981794 --a------ C:\Program Files\eMule\Incoming\AMACOM - Preparing for the Project Management Professional (PMP) Exam 0-814.pdf
2006-05-25 20:08 225749 --a------ C:\Program Files\eMule\Incoming\Project Management - Best Practices In Workflow.pdf
2006-05-25 20:03 46595 --a------ C:\Program Files\eMule\Incoming\Jim Owens PMP Exam Tips on Procurement Management.pdf
2006-05-25 20:03 1422914 --a------ C:\Program Files\eMule\Incoming\NFPA 20 Installation of Stationary Pumps for Fire Protection.pdf
2006-05-25 19:52 4926306 --a------ C:\Program Files\eMule\Incoming\2003 International Building Code Plan Review Record(IBC, ICC).pdf
2006-05-25 19:49 10898424 --a------ C:\Program Files\eMule\Incoming\Harvard.Business.Review.Magazine.January.2006.PDF.eBook-YYePG.pdf
2006-05-25 19:40 923315 --a------ C:\Program Files\eMule\Incoming\Article - Harvard Business Review - What Makes A Leader.pdf
2006-05-25 19:31 19677184 --a------ C:\Program Files\eMule\Temp\028.part
2006-05-25 19:26 0 --a------ C:\Program Files\eMule\Temp\023.part
2006-05-25 19:21 5324601 --a------ C:\Program Files\eMule\Temp\064.part
2006-05-25 19:15 1136326 --a------ C:\Program Files\eMule\Incoming\Daniel Goleman et al - Primal Leadership -The hidden driver of great performance (Harvard Business Review, 2001).pdf
2006-05-25 19:10 5031822 --a------ C:\Program Files\eMule\Incoming\NFPA 85-2001 - Boiler & Combustion Systems Hazards Code.pdf
2006-05-25 18:39 798544 --a------ C:\Program Files\eMule\Incoming\Harvard.Business.School.Press.Managing.Change.And.Transition.eBook-LiB.pdf
2006-05-25 18:38 8945990 --a------ C:\Program Files\eMule\Incoming\??????.Harvard.Business.Review.June.2005.pdf
2006-05-25 18:36 13555431 --a------ C:\Program Files\eMule\Incoming\Harvard.Business.Review.Magazine.March.2006.PDF.eBook-YYePG.pdf
2006-05-25 18:33 671571 --a------ C:\Program Files\eMule\Incoming\Harvard-Game Theory.pdf
2006-05-25 18:32 865621 --a------ C:\Program Files\eMule\Incoming\Harvard Business School Press - Working Identity - Unconventional Strategies For Reinventing Your Career.pdf
2006-05-25 18:19 2962459 --a------ C:\Program Files\eMule\Incoming\Harvard Business Review - How information gives you competitive advantage - Michael Porter.pdf
2006-05-25 18:12 8339876 --a------ C:\Program Files\eMule\Incoming\??????.Harvard.Business.Review.July-August.2005.pdf
2006-05-25 18:05 244979 --a------ C:\Program Files\eMule\Incoming\Peter F. Drucker - Harvard Business Review - Effective_executive.pdf
2006-05-25 18:03 221676 --a------ C:\Program Files\eMule\Incoming\Harvard Business Review-How To Write A Great Business Plan.pdf
2006-05-25 18:00 3219465 --a------ C:\Program Files\eMule\Incoming\Harvard Business Review - Article - Why Good Companies Go Bad.pdf
2006-05-25 17:52 957403 --a------ C:\Program Files\eMule\Incoming\Harvard Business Review - How To Pitch A Brilliant Idea - (2003-09)(1).pdf
2006-05-25 17:52 71697 --a------ C:\Program Files\eMule\Incoming\Harvard Business Review - Guide To Stress Management(GERAS).pdf
2006-05-25 17:50 1850377 --a------ C:\Program Files\eMule\Incoming\Harvard Business School - IT Doesn't Matter.pdf
2006-05-25 17:45 750765 --a------ C:\Program Files\eMule\Incoming\Harvard Business School Notes On Commodity Futures.pdf
2006-05-25 17:37 15000000 --a------ C:\Program Files\eMule\Incoming\Verbal Advantage Harvard Vocabulary Training Advanced CDs 13-24.rar
2006-05-25 17:35 1972563 --a------ C:\Program Files\eMule\Incoming\The Smart Way to Sell Information_Harvard Business Review 1998 11 Nov-Dec pp 106-14.pdf
2006-05-25 17:34 800000 --a------ C:\Program Files\eMule\Incoming\Official[1].HBU.MBA.Case.Study.Harvard.Management.Company.part1.rar
2006-05-25 17:30 14191218 --a------ C:\Program Files\eMule\Incoming\??????.Harvard.Business.Review.May.2005.pdf
2006-05-25 17:22 11067097 --a------ C:\Program Files\eMule\Incoming\Harvard Business Review - 2006 - April.pdf
2006-05-25 17:17 384463 --a------ C:\Program Files\eMule\Incoming\Harvard Business Review - Knowing A Winning Business Idea When You See One.pdf
2006-05-25 17:13 5471977 --a------ C:\Program Files\eMule\Incoming\Tom Henry - 2005 National Electrical Code Key Word Index(Nfpa 70, Nec).pdf
2006-05-25 17:04 31081681 --a------ C:\Program Files\eMule\Incoming\John Wiley & Sons - Project Management - A Systems Approach To Planning, Scheduling, And Controlling.pdf
2006-05-25 16:58 865488 --a------ C:\Program Files\eMule\Incoming\Michael Porter - Harvard Business Review - What is Strategy.pdf
2006-05-25 16:58 324412 --a------ C:\Program Files\eMule\Incoming\Harvard Business Review - Corporate Strategy - A Manager's Guide.pdf
2006-05-25 16:57 266362 --a------ C:\Program Files\eMule\Incoming\Harvard.Business.Review,.The.5.Stages.of.Small.Business.Growth.(1983);.OCR.7.0-2.6.LotB.pdf
2006-05-25 16:56 1205715 --a------ C:\Program Files\eMule\Incoming\2000 - Harvard Business Review - Preventing The Premature Death Of Relationship Marketing.pdf
2006-05-25 16:56 10935362 --a------ C:\Program Files\eMule\Incoming\Harvard.Business.Review.Magazine.January.2006.PDF.eBook.pdf
2006-05-25 16:53 1938554 --a------ C:\Program Files\eMule\Incoming\Harvard Business School Press - Hiring and Keeping the Best.pdf
2006-05-25 16:49 251000 --a------ C:\Program Files\eMule\Incoming\Harvard Business Review - Simple Truths about Innovations.pdf
2006-05-25 16:42 997298 --a------ C:\Program Files\eMule\Incoming\Zbigniew Brzezinski - The Grand Chess Board [Harvard International Review].pdf
2006-05-25 16:42 1194980 --a------ C:\Program Files\eMule\Incoming\Article - Harvard Business Review - Case Study - Harvard Management Company.pdf
2006-05-25 16:41 1989193 --a------ C:\Program Files\eMule\Incoming\Harvard Business School Case - Iridium Llc.pdf
2006-05-25 16:34 923648 --a------ C:\Program Files\eMule\Incoming\Harvard Business Review - What Makes a Leader.pdf
2006-05-25 16:33 365568 --a------ C:\Program Files\eMule\Incoming\Harvard Business Review - What Is The Right Supply Chain.pdf
2006-05-25 16:33 14884897 --a------ C:\Program Files\eMule\Incoming\Harvard Business Review Dec 2003.pdf
2006-05-25 16:27 1536739 --a------ C:\Program Files\eMule\Incoming\Bootstrap Finance The Art Of Startups Harvard Business Review.pdf
2006-05-25 16:21 331816 --a------ C:\Program Files\eMule\Incoming\(Ebook) - Harvard Business Review - The Balanced Scorecard - Measures That Drive Performance Pdf.rar
2006-05-25 16:13 1418296 --a------ C:\Program Files\eMule\Incoming\Harvard Business Revue-Primal Leadership - The Hidden Driver Of Great Performance.pdf
2006-05-25 16:12 25895672 --a------ C:\Program Files\eMule\Temp\015.part
2006-05-25 16:04 765410 --a------ C:\Program Files\eMule\Incoming\Harvard Business School - Case Rohm & Haas New Product Marketing Strategy.pdf
2006-05-25 16:00 994506 --a------ C:\Program Files\eMule\Incoming\Harvard Business School Press Value Sweep 2002.pdf
2006-05-25 16:00 2122127 --a------ C:\Program Files\eMule\Incoming\Harvard Business Review - Having Trouble With Your Strategy Then Map It - Kaplan & Norton - 2000.pdf
2006-05-25 16:00 162538 --a------ C:\Program Files\eMule\Incoming\harvard-mba-application-2002.pdf
2006-05-25 16:00 1364412 --a------ C:\Program Files\eMule\Incoming\Harvard University Press - Philosophy - 2005.pdf
2006-05-25 15:59 486193 --a------ C:\Program Files\eMule\Incoming\Business - Game Theory - Using Game Theory to Shape Strategy (1995 Harvard Review).pdf
2006-05-25 15:59 204030 --a------ C:\Program Files\eMule\Incoming\Harvard Business School - Institute For Strategy And Competitiveness Porter.pdf
2006-05-25 15:58 818032 --a------ C:\Program Files\eMule\Incoming\Harvard Business Review - Barriers. &. Gateways To Communication.pdf
2006-05-25 15:58 600700 --a------ C:\Program Files\eMule\Incoming\Harvard Business Review - Understanding What Customers Value.pdf
2006-05-25 15:58 252229 --a------ C:\Program Files\eMule\Incoming\Peter F. Drucker - Harvard Business Review - How Information Gives You Competitve Advantage.pdf
2006-05-25 15:56 365333 --a------ C:\Program Files\eMule\Incoming\Harvard business Review - Kaplan & Norton - The Balanced Scorecard - Measures That Drive Performance.pdf
2006-05-25 15:56 1422255 --a------ C:\Program Files\eMule\Incoming\Management - Harvard Business Review - Primal Leadership - The Hidden Driver Of Great Performance.pdf
2006-05-25 15:35 13135238 --a------ C:\Program Files\eMule\Incoming\Harvard.Business.Review.Mar.2005.pdf
2006-05-25 15:29 323695 --a------ C:\Program Files\eMule\Incoming\Article - Harvard Business Review - Market Research.pdf
2006-05-25 15:24 88489 --a------ C:\Program Files\eMule\Incoming\Harvard Business School - How Tide Cleaned Up The Competition.pdf
2006-05-25 15:22 316991 --a------ C:\Program Files\eMule\Incoming\Harvard Business School-The Pharma Giants - Ready For The 2Ist Century.pdf
2006-05-25 15:11 12335193 --a------ C:\Program Files\eMule\Incoming\??????.Harvard.Business.Review.Feb.2005.pdf
2006-05-25 15:06 835584 --a------ C:\Program Files\eMule\Incoming\Harvard Business Review - How to pitch a brilliant idea - (2003-09).pdf
2006-05-25 15:05 1610545 --a------ C:\Program Files\eMule\Incoming\Harvard Business Review - McKinsey Awards for Best HBR Articles.pdf
2006-05-25 15:04 9728000 --a------ C:\Program Files\eMule\Temp\027.part
2006-05-25 15:02 869472 --a------ C:\Program Files\eMule\Incoming\Harvard Business Review - What is Strategy - Michael Porter.pdf
2006-05-25 14:53 158208 --a------ C:\Program Files\eMule\Incoming\Business - Pm - Harvard Business Review - Project Management - Balanced Scorecard Templates.xls
2006-05-25 14:45 0 --a------ C:\Program Files\eMule\Temp\050.part
2006-05-25 12:29 63497983 --a------ C:\Program Files\eMule\Incoming\Wiley.Microsoft_Office_Excel_2003_Bible.2003.pdf
2006-05-25 11:09 60 --a------ C:\Program Files\eMule\Incoming\CD-KEY del Microsoft Office FrontPage 2003, One Note 2003, Visio Note 2003 y Project Professional 2004.txt
2006-05-25 10:41 79392215 --a------ C:\Program Files\eMule\Incoming\Project Management Casebook.pdf
2006-05-25 10:35 19902247 --a------ C:\Program Files\eMule\Incoming\MS_Press_-_Microsoft_Project_Version_2002_Inside_Out.chm
2006-05-25 05:22 88751794 --a------ C:\Program Files\eMule\Incoming\2005 NEC Handbook(National Electrical Code, NFPA 70).pdf
2006-05-25 05:06 12639646 --a------ C:\Program Files\eMule\Incoming\Marvel Super Heroes - MHAC5 (1985) - Project Wideawake.pdf
2006-05-25 05:02 17460132 --a------ C:\Program Files\eMule\Incoming\2005 Nec Handbook(National Electrical Code Nfpa).pdf
2006-05-25 04:35 437946467 --a------ C:\Program Files\eMule\Incoming\Microsoft Office Access 2003 VBA Programmers Reference.doc
2006-05-25 04:23 41211440 --a------ C:\Program Files\eMule\Incoming\MS Press - Microsoft-Access Version 2002 Inside Out.chm
2006-05-25 04:20 1319424 --a------ C:\Program Files\eMule\Incoming\Project Management Professional (PMI) study guide.ppt
2006-05-25 03:55 97 --a------ C:\Program Files\eMule\Incoming\PS2 Project Snowblind pass.txt
2006-05-25 03:16 98516207 --a------ C:\Program Files\eMule\Incoming\Access Tutorial 2003 1.pdf
2006-05-25 01:44 8048064 --a------ C:\Program Files\eMule\Incoming\Mcgraw Hill - Microsoft Office Access 2003 - The Complete Reference.pdf
2006-05-25 00:42 41707957 --a------ C:\Program Files\eMule\Incoming\Que Publishing - Special Edition - Using Microsoft Office Access 2003 (2003).chm
2006-05-25 00:32 34996224 --a------ C:\Program Files\eMule\Incoming\Wiley.-.Project.Management.-.A.Systems.Approach.To.Planning,.Scheduling,.And.Controlling.-.Fly.pdf
2006-05-25 00:02 44191050 --a------ C:\Program Files\eMule\Incoming\Implementing Enterprise Portfolio Management with Microsoft Project Server 2002.[Apress,2003-07,1590591186,LiB].(eBook,eng).InFALL.chm
2006-05-24 23:58 21073636 --a------ C:\Program Files\eMule\Incoming\Addison Wesley - Software Project Management - A Unified Framework.pdf
2006-05-24 22:44 44724609 --a------ C:\Program Files\eMule\Incoming\MS Press - Microsoft-Excel Version 2002 Inside Out.chm
2006-05-24 22:21 30763673 --a------ C:\Program Files\eMule\Incoming\Viescas - Microsoft Office Access 2003 Inside Out (Ms Press, 2004)(1).pdf
2006-05-24 22:09 177480 --a------ C:\Program Files\eMule\Incoming\Tom Henry - Electrical Formulas and Calculations(2005 National Electrical Code - NFPA 70 - NEC).pdf
2006-05-24 21:35 33510084 --a------ C:\Program Files\eMule\Incoming\Excel 2003 Avanzado CEPI-BASE.rtf
2006-05-24 21:20 74576869 --a------ C:\Program Files\eMule\Incoming\Charles River Media, Corporate Software Project Management (2005) Ddu Lotb.pdf
2006-05-24 21:19 9596416 --a------ C:\Program Files\eMule\Incoming\Project Management Professional (PMP) Study Guide.doc
2006-05-24 20:08 13106514 --a------ C:\Program Files\eMule\Incoming\Premier.Press.Microsoft.Office.Excel.2003.Fast.and.Easy.eBook-LiB.chm
2006-05-24 19:26 12247040 --a------ C:\Program Files\eMule\Incoming\04 - Monsoon Wedding - Aaj Mausam Bada Beimann Hai (Today the Weather Plays Tricks on Me) - Mohammed Rafi.mp3
2006-05-24 18:14 73990269 --a------ C:\Program Files\eMule\Incoming\The Ultimate Marketing Plan - Dan Kennedy.pdf
2006-05-24 17:35 9831216 --a------ C:\Program Files\eMule\Incoming\Microsoft Office Ecxel - Mcgraw Hill - How to do everything with excel (2003).pdf
2006-05-24 16:59 26507451 --a------ C:\Program Files\eMule\Incoming\Microsoft Office Access 2003 Bible.pdf
2006-05-24 16:25 10418458 --a------ C:\Program Files\eMule\Incoming\HBR 2006 March Harvard Business Review.pdf
2006-05-24 16:09 8352142 --a------ C:\Program Files\eMule\Incoming\Teach your self Excel 2000 (mau).pdf
2006-05-24 16:07 17340205 --a------ C:\Program Files\eMule\Incoming\Wiley, Excel 2003 VBA Programmers Reference (2004) DDU BM OCR 7.0-2.6 LotB.pdf
2006-05-24 16:01 57884672 --a------ C:\Program Files\eMule\Incoming\John Wiley & Sons - Excel Data Analysis - Your Visual Blueprint To Analyzing Data, Charts And Pivot Tables(1).pdf
2006-05-24 15:53 6277142 --a------ C:\Program Files\eMule\Incoming\Wiley - Project Management Methodologies (2007).pdf
2006-05-24 15:42 11966534 --a------ C:\Program Files\eMule\Incoming\Kluwer Academic Publishers Project Management For Telecommunication Managers Ebook-Lib.pdf
2006-05-24 15:27 5521408 --a------ C:\Program Files\eMule\Incoming\Dost Dost Na Raha - Sangam - Mukesh, Lata Mangeshkar.mp3
2006-05-24 14:58 21247175 --a------ C:\Program Files\eMule\Incoming\Wrox Press - Expert One-On-One Microsoft Access Application Development(1).pdf
2006-05-24 14:46 13470782 --a------ C:\Program Files\eMule\Incoming\Biquad Antenna Construction Project.doc
2006-05-24 14:24 6059557 --a------ C:\Program Files\eMule\Incoming\OReilly - Writing Excel Macros with VBA.pdf
2006-05-24 14:21 8029903 --a------ C:\Program Files\eMule\Incoming\John Wiley - Effective.Project.Management.Traditional.Adaptive.Extreme.3rd.Ed.chm
2006-05-24 14:01 46654743 --a------ C:\Program Files\eMule\Incoming\John Wiley And Sons Project Management A Systems Approach To Planning Scheduling And Controlling Eighth Edition Ebook-Lib.chm
2006-05-24 14:01 14043142 --a------ C:\Program Files\eMule\Incoming\Modern Project Management.pdf
2006-05-24 13:59 45187960 --a------ C:\Program Files\eMule\Incoming\Msproject - Microsoft Office Project 2003 Bible.pdf
2006-05-24 13:54 27039092 --a------ C:\Program Files\eMule\Incoming\Que Publishing - Special Edition - Using Microsoft Office Excel 2003 (2003).chm
2006-05-24 13:47 7175871 --a------ C:\Program Files\eMule\Incoming\Access Tutorial 2003(1).pdf
2006-05-24 13:41 25807412 --a------ C:\Program Files\eMule\Temp\084.part
2006-05-24 13:39 15659931 --a------ C:\Program Files\eMule\Incoming\The Morrow Project - Armory.pdf
2006-05-24 13:35 3878912 --a------ C:\Program Files\eMule\Incoming\Awaara - (Raj Kapoor) - Awara Hoon (Mukesh).mp3
2006-05-24 13:31 3958912 --a------ C:\Program Files\eMule\Incoming\Nitin Mukesh - Dil Ne Dil Se Kya Kahan.mp3
2006-05-24 13:31 23991838 --a------ C:\Program Files\eMule\Incoming\Manual Microsoft Access 2003 (615136).pdf
2006-05-24 13:25 17644365 --a------ C:\Program Files\eMule\Incoming\Marketing & Sales - Marketing Planning And Strategy - Subhash C. Jain - 6th.pdf
2006-05-24 13:15 53813248 --a------ C:\Program Files\eMule\Incoming\Project Management Practitioner's Handbook.pdf
2006-05-24 13:05 6327091 --a------ C:\Program Files\eMule\Incoming\ Excel_VBA_Macro_Programming.2004.McGraw-Hill-Osborne.chm
2006-05-24 12:27 13210793 --a------ C:\Program Files\eMule\Incoming\HBR 2006-03.rar
2006-05-24 12:18 9344103 --a------ C:\Program Files\eMule\Incoming\McGraw.Hill.Microsoft.Office.Access.2003.Professional.Results.eBook-LiB.pdf
2006-05-24 11:56 1460453 --a------ C:\Program Files\eMule\Incoming\Management.Concepts.Project.Leadership.eBook-LiB.chm
2006-05-24 10:49 5128192 --a------ C:\Program Files\eMule\Incoming\Wiley - Project Management Methodologies (2005).chm
2006-05-24 10:44 10317921 --a------ C:\Program Files\eMule\Incoming\Excel Programming Microsoft Visual Basic 6.pdf
2006-05-24 10:31 7241141 --a------ C:\Program Files\eMule\Incoming\The Rough Guide to Bollywood - 04 - Lata Mangeshkar & Mukesh - Kabhi Kabhi Mere Dil Mein Khayal Aata(1).mp3
2006-05-24 10:26 10818070 --a------ C:\Program Files\eMule\Incoming\Excel VBA Programming(1).pdf
2006-05-24 10:08 7999715 --a------ C:\Program Files\eMule\Incoming\Easy Office Access 2003.chm
2006-05-24 09:58 19670403 --a------ C:\Program Files\eMule\Incoming\Excel Sybex Inc - Mastering Excel 2003 Programming With Vba (Mar 2004).pdf
2006-05-24 09:43 6336987 --a------ C:\Program Files\eMule\Incoming\Porter, Michael - From competitive advantage to corporate strategy - 2001 [HBR].rar
2006-05-24 09:43 4153543 --a------ C:\Program Files\eMule\Incoming\Mukesh & Lata - Bol Radha Bol.mp3
2006-05-24 08:50 96780660 --a------ C:\Program Files\eMule\Incoming\Wiley,.Project.Risk.Management.Guidelines.(2005).YYePG.LotB(1).pdf
2006-05-24 08:38 88497 --a------ C:\Program Files\eMule\Incoming\2003.07.15 - Bomb before you buy - Scott Harris and Naomi Klein of Between the lines [truth.inside.free.fr].pdf
2006-05-24 08:33 63497983 --a------ C:\Program Files\eMule\Incoming\(ebook) Office Excel 2003 Bible.pdf
2006-05-24 08:33 2126755 --a------ C:\Program Files\eMule\Incoming\Project Management Under Risk.pdf
2006-05-24 08:13 217 --a------ C:\Program Files\eMule\Incoming\Microsoft Office 2003 Serial - Frontpage 2003 - Visio 2003 Pro - Project 2003 Pro - Onenote 2003 (Español).txt
2006-05-24 07:54 3973120 --a------ C:\Program Files\eMule\Incoming\(Hindi) Geeta Dutt & Mukesh - Yeh Hai Bombay Meri Jaan(1).mp3
2006-05-24 07:47 515072 --a------ C:\Program Files\eMule\Incoming\Project Management - Pmp Certification.pdf
2006-05-24 07:40 10955214 --a------ C:\Program Files\eMule\Incoming\[eBook - ITA] Visual Basic per Excel(1)2.pdf
2006-05-24 07:01 252 --a------ C:\Program Files\eMule\Incoming\Serial Project 5 Cakewalk.txt
2006-05-24 06:56 5528681 --a------ C:\Program Files\eMule\Incoming\Mukesh - Raj Kapoor - Dost Dost Na Raha.mp3
2006-05-22 00:05 6041600 --a------ C:\Program Files\eMule\Incoming\Hindi Oldies - Ramia vatavia - Mohammed Rafi & Lata Mangeshkar & Mukesh.mp3
2006-05-22 00:05 144 --a------ C:\Program Files\eMule\Incoming\2 Microsoft Office 2003 Professional Serial (Word, Excel, Powerpoint, Access, Frontpage, Outlook, Infopath, Visio, Project)(2).txt
2006-05-21 23:52 5557028 --a------ C:\Program Files\eMule\Incoming\Lata Mangeshkar & Mohammed Rafi - Yeh dil tum bin lag.mp3
2006-05-21 23:43 1400453 --a------ C:\Program Files\eMule\Incoming\Finance Management Project Strategic - Handbook for small business.pdf
2006-05-21 23:42 1689701 --a------ C:\Program Files\eMule\Incoming\Project Management Planning-Planning Process & Project Plan.pdf
2006-05-21 23:37 124113 --a------ C:\Program Files\eMule\Incoming\Project Management and ISO 9001.PDF
2006-05-21 23:35 50365599 --a------ C:\Program Files\eMule\Incoming\Microsoft Office Excel 2003 Curso Aprendizaje.pdf
2006-05-21 23:33 325926 --a------ C:\Program Files\eMule\Incoming\Harvard Business School - Project Management Manual(1).pdf
2006-05-21 23:31 4259968 --a------ C:\Program Files\eMule\Incoming\Zinda hoon Is Tarha - Mukesh.mp3
2006-05-21 23:30 2997631 --a------ C:\Program Files\eMule\Incoming\Project Management Methodologies Selecting, Implementing, and Supporting Methodologies.Wiley.2003.pdf
2006-05-21 23:28 2557389 --a------ C:\Program Files\eMule\Incoming\Amacom - Your Successful Project Management Career - 2005 - (By Laxxuss).pdf
2006-05-21 23:24 5404672 --a------ C:\Program Files\eMule\Incoming\Amar Akbar Anthony - Humko Tum Se Hogaya - Lata Mangeshkar & Rafi & Mukesh & Kishore Kumar.mp3
2006-05-21 23:24 1460453 --a------ C:\Program Files\eMule\Incoming\Management Concepts - Project Leadership - 2003 - (By Laxxuss).chm
2006-05-21 23:14 3099873 --a------ C:\Program Files\eMule\Incoming\Wiley - Project Management Methodologies (2006).pdf
2006-05-21 23:13 2293635 --a------ C:\Program Files\eMule\Incoming\Mckinsey Project Management Practitioner's Handbook.pdf
2006-05-21 23:11 8096440 --a------ C:\Program Files\eMule\Incoming\Mohd Rafi & Mukesh & Lata Mangeshkar - Naseeb - Zindagi Imtihaan Leti Hai.mp3
2006-05-21 23:00 43979786 --a------ C:\Program Files\eMule\Incoming\Microsoft_Office_Project_2003_Bible.Jan2004.Wiley.RR.pdf
2006-05-21 22:58 2776718 --a------ C:\Program Files\eMule\Incoming\J Ross Publishing Achieving Project Management Success Using Virtual Teams Ebook-Lib.chm
2006-05-21 22:52 92 --a------ C:\Program Files\eMule\Incoming\Microsoft - Office 2003 Pro - 5 in 1 - Frontpage 2003, Visio 2003 Professional, Project 2003 Pro and OneNote 2003 (Dutch)-keys.txt
2006-05-21 22:51 3958912 --a------ C:\Program Files\eMule\Incoming\Hindi Oldies-Lata Mangeshkar & Nitin Mukesh-Dil Ne Dil Se Kya Kahan.mp3
2006-05-21 22:42 143 --a------ C:\Program Files\eMule\Incoming\Serial Microsoft Office 2003 (Frontpage, Visio, Project, Onenote) - CD Key.txt
2006-05-21 22:32 34 --a------ C:\Program Files\eMule\Incoming\CDKEY MS Project Professional 2003 BR.txt
2006-05-21 22:30 11558666 --a------ C:\Program Files\eMule\Incoming\PMP-A Guide to the Project Management Body of Knowledge Third 3rd Edition 2004 PMBOK PMI.pdf.pdf
2006-05-21 22:22 8048064 --a------ C:\Program Files\eMule\Incoming\McGraw-Hill - Microsoft Office Access 2003 - The Complete Reference - 2003 - (By Laxxuss).pdf
2006-05-21 22:21 9775542 --a------ C:\Program Files\eMule\Temp\017.part
2006-05-21 22:21 5973559 --a------ C:\Program Files\eMule\Incoming\TALAT MAHMOOD & MUKESH - Woh jo roothen HUMRADEEF GHAZAL DUET.mp3
2006-05-20 21:06 31 --a------ C:\Program Files\eMule\Incoming\2 Serial Microsoft Office 2003 (Frontpage, Visio, Project, Onenote) - Cd Key(1).txt
2006-05-20 21:06 0 --a------ C:\Program Files\eMule\Temp\090.part
2006-05-20 21:06 0 --a------ C:\Program Files\eMule\Temp\087.part
2006-05-20 21:05 176 --a------ C:\Program Files\eMule\Incoming\Microsoft Project Server 2003 Serial(1).txt
2006-05-20 19:58 73 --a------ C:\Program Files\eMule\Incoming\SERIAL Microsoft.Office.Project.Professional.2003.esp..txt
2006-05-20 19:55 36 --a------ C:\Program Files\eMule\Incoming\MS.Office2003.ProJect.Pro.CHT.SN.txt
2006-05-20 19:53 5935554 --a------ C:\Program Files\eMule\Incoming\Amacom - The Project Management Question And Answer Book - 2004 - (By Laxxuss).chm
2006-05-20 19:52 1230756 --a------ C:\Program Files\eMule\Incoming\Addison Wesley - Software Project Management in Practice.chm
2006-05-19 22:31 8160275 --a------ C:\Program Files\eMule\Incoming\Absolute Beginners Guide To Microsoft Access 2002 1st Ed.chm
2006-05-19 22:30 16161171 --a------ C:\Program Files\eMule\Incoming\(2003)(McGraw-Hill) - Hotspot Networks; WiFi for Public Access Locations.chm
2006-05-19 22:28 1513597 --a------ C:\Program Files\eMule\Incoming\Artech - Project Management Process Improvement.pdf
2006-05-19 22:26 135 --a------ C:\Program Files\eMule\Incoming\Microsoft.-.Office.2003.Pro.-.5.in.1.-.Frontpage.2003,.Visio.2003.Professional,.Project.2003.Pro.and.OneNote.2003.(English).Serial.txt
2006-05-19 22:25 39 --a------ C:\Program Files\eMule\Incoming\Office 2003 Project & Visio PRO ??? Serial.txt
2006-05-19 22:25 167 --a------ C:\Program Files\eMule\Incoming\SERIAL Microsoft.Office.Project.Professional.2003.esp.(3).txt
2006-05-19 22:21 11504572 --a------ C:\Program Files\eMule\Incoming\Wrox Press - Expert One-On-One Microsoft Access Application Development.pdf
2006-05-19 22:15 92478 --a------ C:\Program Files\eMule\Incoming\PMBOK PROJECT MANAGEMENT PROCESSES.pdf
2006-05-19 22:10 281 --a------ C:\Program Files\eMule\Incoming\Microsoft Office 2003 Ita (Office,Frontpage,Visio,Project,Onenote) Seriale(1).txt
2006-05-19 22:04 2321487 --a------ C:\Program Files\eMule\Incoming\(ebook-pdf) - The Little Black Book of Project Management.pdf
2006-05-19 22:01 52375204 --a------ C:\Program Files\eMule\Temp\044.part
2006-05-19 22:01 24 --a------ C:\Program Files\eMule\Incoming\PS2-Project.Zero.3.The.Tormented.PAL_Multi5_DVDFull_[www.ps2rip.net].txt
2006-05-19 21:59 272 --a------ C:\Program Files\eMule\Incoming\Ms Office 2003 (Frontpage, Visio, Project, Onenote) - Cd Key.txt
2006-05-19 21:58 38 --a------ C:\Program Files\eMule\Incoming\2 Microsoft Office 2003 Professional SERIAL (Word, Excel, Powerpoint, Access, Frontpage, Outlook, Infopath, Visio, Project)(1).txt
2006-05-19 21:57 155 --a------ C:\Program Files\eMule\Incoming\[Serial] CD-KEY del Microsoft Office FrontPage 2003, One Note 2003, Visio Note 2003 y Project Profession.txt
2006-05-19 21:56 126 --a------ C:\Program Files\eMule\Incoming\[Serial] Microsoft Office Project 2003 Product Key.txt
2006-05-19 21:55 172 --a------ C:\Program Files\eMule\Incoming\CD-KEY Ms Office 2003 FrontPage 2003, One Note 2003, Visio Note 2003 & Project Professional 2003.txt
2006-05-19 21:46 11532522 --a------ C:\Program Files\eMule\Temp\174.part
2006-05-19 21:43 1513880 --a------ C:\Program Files\eMule\Incoming\Mcgraw-Hill - The Six Sigma Project Planner - 2003 - (By Laxxuss).pdf
2006-05-19 21:37 96 --a------ C:\Program Files\eMule\Incoming\2 Microsoft Office 2003 (Frontpage, Visio, Project, Onenote) - Cd Key.txt
2006-05-19 21:36 29 --a------ C:\Program Files\eMule\Incoming\Microsoft Office 2003 (Frontpage, Visio, Project, Onenote) - CD Key(1).txt
2006-05-19 21:35 1188866 --a------ C:\Program Files\eMule\Incoming\PMI Project Mind Mapping.PDF
2006-05-19 21:34 40 --a------ C:\Program Files\eMule\Incoming\2 Microsoft Office 2003 Professional SERIAL (Word, Excel, Powerpoint, Access, Frontpage, Outlook, Infopath, Visio, Project).txt
2006-05-19 21:33 32 --a------ C:\Program Files\eMule\Incoming\2 Serial Microsoft Office Project Professional 2003.txt
2006-05-19 21:31 1407640 --a------ C:\Program Files\eMule\Incoming\Sybex,.Project.Managers.Spotlight.on.Change.Management.(2005).LinG.LotB.pdf
2006-05-19 21:30 34 --a------ C:\Program Files\eMule\Incoming\Microsoft Project Server 2003 Serial.txt
2006-05-19 21:30 33 --a------ C:\Program Files\eMule\Incoming\Project_004_PC_Bug_Doctor.v1.0.0.3 cd_key.txt
2006-05-19 21:27 95 --a------ C:\Program Files\eMule\Incoming\Microsoft Office 2003 (Frontpage, Visio, Project, Onenote) - CD Key.txt
2006-05-19 21:25 131782 --a------ C:\Program Files\eMule\Incoming\Pmp Exam Preparation Study Guide - Project Cost Management.pdf
2006-05-19 21:25 117442 --a------ C:\Program Files\eMule\Incoming\Pmp Exam Preparation Study Guide - Project Communication Management.pdf
2006-05-07 17:53 6187397 --a------ C:\Program Files\eMule\Incoming\McGraw.Hill.PMP.Project.Management.Professional.Study.Guide.eBook-DDU.pdf
2006-05-07 17:44 10119615 --a------ C:\Program Files\eMule\Incoming\McGraw.Hill.Microsoft.Office.Access.2003.The.Complete.Reference.eBook-LiB.pdf
2006-05-07 17:23 10172126 --a------ C:\Program Files\eMule\Incoming\(Ebooks) - Mcgraw Hill - How To Do Everything With Microsoft Office Excel 2003.pdf
2006-05-07 11:39 53654528 --a------ C:\Program Files\eMule\Temp\024.part
2006-05-07 11:28 12387699 --a------ C:\Program Files\eMule\Incoming\ms.press-.programming.micrososft.visual.basic..net.for.microsoft.access.databases.chm
2006-05-07 11:24 25962447 --a------ C:\Program Files\eMule\Incoming\MS - Microsoft Office Access 2003 VBA Programmer's Reference.pdf
2006-05-07 11:15 29858820 --a------ C:\Program Files\eMule\Incoming\Expert_One-on-One_Microsoft_Access_Application_Development.2004.WroxPress.chm
2006-05-07 11:14 29963923 --a------ C:\Program Files\eMule\Incoming\Expert One-on-One Microsoft Access Application Development.chm
2006-05-07 11:04 17616241 --a------ C:\Program Files\eMule\Incoming\Microsoft Press Programming Microsoft Office Access 2003.chm
2006-05-07 11:02 7489377 --a------ C:\Program Files\eMule\Incoming\O'Reilly - Access Cookbook 2nd Edition.chm
2006-05-07 10:56 34864421 --a------ C:\Program Files\eMule\Incoming\Project Management - A Systems Approach to Planning, Scheduling, and Controlling.pdf
2006-05-07 10:41 8274379 --a------ C:\Program Files\eMule\Incoming\Absolute Beginner's Guide To Microsoft Office Access 2003.chm
2006-05-07 10:37 11981146 --a------ C:\Program Files\eMule\Temp\167.part
2006-05-07 10:28 85836311 --a------ C:\Program Files\eMule\Incoming\A Guide To The Project Management Body Of Knowledge Third 3Rd Edition 2004 Pmbok Pmi.doc
2006-05-07 10:21 22428117 --a------ C:\Program Files\eMule\Incoming\MS Press - Microsoft Access 2003 Inside Out [2004].pdf
2006-05-07 10:18 7920598 --a------ C:\Program Files\eMule\Incoming\McGraw Hill - Microsoft Office Access 2003 Professional Results.pdf
2006-05-07 10:11 27279645 --a------ C:\Program Files\eMule\Incoming\Formation Excel 2000 Fonctions avancees FR.pdf
2006-05-07 10:10 6366245 --a------ C:\Program Files\eMule\Incoming\Access Tutorial 2003.pdf
2006-05-07 10:07 28396833 --a------ C:\Program Files\eMule\Incoming\Astd, Project Management Training (2004) Lib Shareconnector.chm
2006-05-07 10:06 11914582 --a------ C:\Program Files\eMule\Incoming\Microsoft Access 2000 Developer's Handbook.pdf
2006-05-07 09:51 10818029 --a------ C:\Program Files\eMule\Incoming\Wiley - Microsoft Office Excel Programming - Your Visual Blueprint For Creating Interactive Spreadsheets.pdf
2006-05-06 22:24 8171749 --a------ C:\Program Files\eMule\Incoming\John Wiley & Sons - Firewalls For Dummies - 2003.pdf
2006-05-06 22:11 15995531 --a------ C:\Program Files\eMule\Incoming\Show.Me.Microsoft.Office.Excel.2003.ShareConnector.chm
2006-05-06 22:10 11604344 --a------ C:\Program Files\eMule\Temp\170.part
2006-05-06 21:43 14853699 --a------ C:\Program Files\eMule\Incoming\Microsoft Access 2000 Power Programming(vba).pdf
2006-05-06 21:34 16973583 --a------ C:\Program Files\eMule\Incoming\WROX - ISBN 0764571664 - Access 2003 VBA Programmer's Reference.pdf
2006-05-06 21:23 6009157 --a------ C:\Program Files\eMule\Incoming\Microsoft Access 2000 - Manual.PDF
2006-05-06 21:19 35653772 --a------ C:\Program Files\eMule\Incoming\Microsoft Office 2003 Guide (Word, Excel, Access, PowerPoint, Outlook, Publisher).pdf
2006-05-06 21:03 5033288 --a------ C:\Program Files\eMule\Incoming\Hindi - Mohammed rafi - hum tum se juda hoke.mp3
2006-05-06 21:03 16844800 --a------ C:\Program Files\eMule\Incoming\Securing Exchange Server and Outlook Web Access 2003.pdf
2006-05-06 20:50 28626952 --a------ C:\Program Files\eMule\Incoming\Microsoft Office Access 2003 Manual.pdf
2006-05-06 19:59 7239366 --a------ C:\Program Files\eMule\Incoming\PMP Exam Prep - Rita Mulcahy (part 2).pdf
2006-05-06 19:50 19688340 --a------ C:\Program Files\eMule\Incoming\Wiley - Microsoft Office Visio 2003 Bible.pdf
2006-05-06 19:43 16439458 --a------ C:\Program Files\eMule\Incoming\Microsoft Office Excel 2003 Manual-COPIA.pdf
2006-05-05 22:53 7003482 --a------ C:\Program Files\eMule\Incoming\Asha Bhosle - Rafi - Shammi Kapoor - dil use Do.mp3
2006-05-05 22:43 20788142 --a------ C:\Program Files\eMule\Incoming\McGraw Hill - How to Do Everything with Microsoft Office Access 2003.pdf
2006-05-05 22:30 13122576 --a------ C:\Program Files\eMule\Incoming\Resource Allocation in Project Management (Springer).pdf
2006-05-05 22:28 14152011 --a------ C:\Program Files\eMule\Incoming\Microsoft.Excel.VBA.Professional.Projects.(2003).LiB.chm
2006-05-05 21:58 9728000 --a------ C:\Program Files\eMule\Temp\198.part
2006-05-05 21:58 12902539 --a------ C:\Program Files\eMule\Incoming\Pic Microcontroller Project Book(Mcgraw) -- Iovine.pdf
2006-05-05 21:55 21126728 --a------ C:\Program Files\eMule\Temp\124.part
2006-05-05 21:44 10832656 --a------ C:\Program Files\eMule\Incoming\Excel VBA Programming.pdf
2006-05-05 21:40 12772409 --a------ C:\Program Files\eMule\Temp\189.part
2006-05-05 21:38 10605022 --a------ C:\Program Files\eMule\Incoming\Microsoft Office Access 2003 step by step - Ms Press - 2004.pdf
2006-04-30 11:05 414326702 --a------ C:\Program Files\eMule\Incoming\Chip Sonderheft - Excel.zip
2006-04-30 10:58 35275179 --a------ C:\Program Files\eMule\Incoming\[Book][Software Engineering][McGraw Hill][PDF] Software Project Management - Second Edition.zip
2006-04-30 10:56 116553752 --a------ C:\Program Files\eMule\Incoming\Excel 2002 VBA Programming.zip
2006-04-17 18:30 16778356 --a------ C:\Program Files\eMule\Incoming\eBook_Microsoft.Access.2002.Bible.ShareReactor.pdf
2006-04-17 18:24 44191050 --a------ C:\Program Files\eMule\Temp\154.part
2006-04-17 18:12 21468638 --a------ C:\Program Files\eMule\Incoming\Project Management Training (2004).pdf
2006-04-17 18:07 68096000 --a------ C:\Program Files\eMule\Temp\009.part
2006-04-17 01:44 13761024 --a------ C:\Program Files\eMule\Incoming\Wordware - Learn Microsoft Excel 2002 VBA Programming with XML and ASP - 2003 - (By Laxxuss).pdf
2006-04-17 01:43 15312684 --a------ C:\Program Files\eMule\Incoming\Citrix MetaFrame Access Suite for Windows Server 2003 The Official Guide.chm
2006-04-17 01:37 19382187 --a------ C:\Program Files\eMule\Incoming\Access_Hacks_(O'Reilly-2005).chm
2006-04-17 01:34 21500049 --a------ C:\Program Files\eMule\Incoming\[2004][Apress]Definitive Guide to Excel VBA, Second Edition.chm
2006-04-17 01:29 9728000 --a------ C:\Program Files\eMule\Temp\025.part
2006-04-17 01:29 7320238 --a------ C:\Program Files\eMule\Incoming\Pmp Exam Prep - Rita Mulcahy (Part 2)(1).pdf
2006-04-17 01:27 28230439 --a------ C:\Program Files\eMule\Incoming\OReilly - Access Cookbook.pdf
2006-04-17 01:25 6922246 --a------ C:\Program Files\eMule\Incoming\Sam's, Formulas and Functions with Microsoft Excel 2003 (2005) YYePG OCR 7.0 LotB.pdf
2006-04-17 01:25 10609648 --a------ C:\Program Files\eMule\Temp\224.part
2006-04-17 01:09 19670401 --a------ C:\Program Files\eMule\Incoming\Excel 2003 Programming with VBA.PDF
2006-04-17 01:07 8921224 --a------ C:\Program Files\eMule\Incoming\HBR 2006-01.pdf
2006-04-16 21:00 6055936 --a------ C:\Program Files\eMule\Incoming\I Love Bollywood - 04 Asha Bhosle & Mohd Rafi - O Mera Sona.mp3
2006-04-16 18:31 5169029 --a------ C:\Program Files\eMule\Incoming\Mohammad Rafi & Asha Bhosle - jis din se maine tumko dekha.mp3
2006-04-16 18:29 5403655 --a------ C:\Program Files\eMule\Incoming\Old Hindi Songs - Humko Tum Se Hogaya - Lata Mangeshkar & Rafi & Mukesh & Kishore Kumar.mp3
2006-04-16 18:28 12022357 --a------ C:\Program Files\eMule\Incoming\Sams.Teach.Yourself.MS.Office.Access.2003.In.24Hours.chm
2006-04-16 18:27 6558710 --a------ C:\Program Files\eMule\Incoming\[info - ita - EXCEL] Funzioni avanzate - Array - Archivi esterni - Pivot.pdf
2006-04-16 18:27 5308416 --a------ C:\Program Files\eMule\Incoming\Mohammed Rafi - Jaan Pehechaan Ho.mp3
2006-04-16 18:16 23940573 --a------ C:\Program Files\eMule\Incoming\Viescas - Microsoft Office Access 2003 Inside Out (Ms Press, 2004).pdf
2006-04-16 18:09 18963843 --a------ C:\Program Files\eMule\Incoming\Microsoft.Press.Microsoft.Excel.2003.Programming.Inside.Out.eBook-DDU.chm
2006-04-16 18:08 24368128 --a------ C:\Program Files\eMule\Incoming\Visual Basic and Database access.doc
2006-04-16 17:58 12720990 --a------ C:\Program Files\eMule\Incoming\Wordware - Access 2003 Programming By Example With Vba, Xml And Asp - 2005 - (By Laxxuss).pdf
2006-04-16 17:57 17949209 --a------ C:\Program Files\eMule\Incoming\Formulas and Functions with Microsoft Excel 2003 [en_US].pdf
2006-04-16 17:53 11585310 --a------ C:\Program Files\eMule\Incoming\(2004)(McGraw-Hill) - PMP Project Management Professional Study Guide.chm
2006-04-16 17:50 12183777 --a------ C:\Program Files\eMule\Incoming\Wordware,.Access.2003.Programming.by.Example.with.VBA.XML.and.ASP.(2005).DDU.pdf
2006-04-16 17:47 6511255 --a------ C:\Program Files\eMule\Incoming\Microsoft Office Excel 2003 - cz.pdf
2006-04-16 17:45 26600799 --a------ C:\Program Files\eMule\Incoming\Beginning Access 2002 VBA.chm
2006-04-16 17:43 7056485 --a------ C:\Program Files\eMule\Incoming\Que,.Manage.Your.Money.and.Investments.with.Microsoft.Excel.(2005).DDU.LotB.chm
2006-04-16 17:42 0 --a------ C:\Program Files\eMule\Temp\026.part
2006-04-16 17:41 10804855 --a------ C:\Program Files\eMule\Incoming\Ms Access 2003 Tutorial.pdf
2006-04-16 17:41 0 --a------ C:\Program Files\eMule\Temp\013.part
2006-04-16 17:40 6595554 --a------ C:\Program Files\eMule\Incoming\(Ebook Pdf) - Pmp - The Ama Handbook Of Project Management.pdf
2006-04-16 17:37 28631965 --a------ C:\Program Files\eMule\Incoming\John Wiley & Sons - Access 2003 Bible.pdf
2006-04-16 17:29 10641498 --a------ C:\Program Files\eMule\Incoming\Microsoft Access Vba Programming For The Absolute Beginner Second Edition.pdf
2006-04-16 17:26 6633529 --a------ C:\Program Files\eMule\Incoming\John.Wiley.And.Sons.Effective.Project.Management.Traditional.Adaptive.Extreme.eBook-LiB.pdf
2006-04-16 17:23 19002308 --a------ C:\Program Files\eMule\Incoming\Excel 2003 VBA Programmer's Reference - 2004 - (By Laxxuss).pdf
2006-04-16 17:17 10605022 --a------ C:\Program Files\eMule\Incoming\Mspress Step By Step Ms Office Access 2003 Ebook(2).pdf
2006-04-16 17:14 12218148 --a------ C:\Program Files\eMule\Incoming\Bernd Held - Excel-Vba-Programmierung - Kompendium.pdf
2006-04-16 17:13 26511270 --a------ C:\Program Files\eMule\Incoming\Microsoft Office Access 2003 Bible (Wiley).pdf
2006-04-16 17:12 8164666 --a------ C:\Program Files\eMule\Incoming\[Office.Books].Excel.2000.VBA.pdf
2006-04-16 17:06 19456000 --a------ C:\Program Files\eMule\Temp\081.part
2006-04-16 17:03 20749493 --a------ C:\Program Files\eMule\Incoming\Galileo.Computing.Excel.2003.Pro.Anwenden.German.2004.eBook.pdf
2006-04-16 17:01 15746370 --a------ C:\Program Files\eMule\Incoming\Guide To Hacking DirecTV - DSS - Satellite Access Card Programming (3).doc
2006-04-16 17:00 6150219 --a------ C:\Program Files\eMule\Incoming\Sams Teach Yourself Microsoft Access 2000 in 24 Hours.pdf
2006-04-16 16:59 36468777 --a------ C:\Program Files\eMule\Incoming\Microsoft Excel Data Analysis and Business modeling (2004).chm
2006-04-16 16:58 31086411 --a------ C:\Program Files\eMule\Incoming\PMI - Wiley - Project Management - A Systems Approach to Planning, Scheduling, and Controlling.pdf
2006-04-16 16:57 18972051 --a------ C:\Program Files\eMule\Incoming\wrox,.excel.2003.vba.programmers.reference.(2004).ddu.pdf
2006-04-16 16:56 12378965 --a------ C:\Program Files\eMule\Incoming\Rita Mulcahy PMP Exam Prep.pdf
2006-04-16 16:54 12157623 --a------ C:\Program Files\eMule\Incoming\Pmi- A Guide To The Project Management Body Of Knowledge.pdf
2006-04-16 16:53 17175361 --a------ C:\Program Files\eMule\Incoming\Wiley-Project Risk Management Guidelines (2006).pdf
2006-04-16 16:51 9418118 --a------ C:\Program Files\eMule\Incoming\Excel VBA in 14 Tagen - MT - Bernd Held - Neue Auflage 2004 eBook.pdf
2006-04-16 16:50 8593304 --a------ C:\Program Files\eMule\Incoming\Project Management Professional (PMP) Study Guide - Sybex.pdf
2006-04-16 16:50 12130567 --a------ C:\Program Files\eMule\Incoming\Markt & Technik Excel VBA Programmierung Kompendium.pdf
2006-04-16 16:49 15255706 --a------ C:\Program Files\eMule\Incoming\Newnes - 2005 - Excel.by.Example-.A.Mcrosoft.Excel.Cookbook.for.Electronic.Engineers.pdf
2006-04-16 16:47 11124736 --a------ C:\Program Files\eMule\Incoming\MSPress Step By Step MS Office Access 2003 EBook(1).pdf
2006-04-16 16:46 7762300 --a------ C:\Program Files\eMule\Incoming\MS Press - Programming Access 2000 [1999].chm
2006-04-16 16:44 21790636 --a------ C:\Program Files\eMule\Incoming\Addison.Wesley.Professional.Excel.Development.Feb.2005.eBook-LiB.chm
2006-04-16 16:35 10468438 --a------ C:\Program Files\eMule\Incoming\Wideman - Project And Program Risk Management, A Guide To Managing Project Risk And Opportunities - Pmi.pdf
2006-04-16 16:31 8337202 --a------ C:\Program Files\eMule\Incoming\E-Buch - Excel Geheime Tricks (Held).pdf
2006-04-16 16:30 17175047 --a------ C:\Program Files\eMule\Incoming\Wiley, Project Risk Management Guidelines (2005).pdf
2006-04-16 16:29 12316659 --a------ C:\Program Files\eMule\Incoming\Excel 2003 Avanzado CEPI-BASE.pdf
2006-04-16 16:26 14330549 --a------ C:\Program Files\eMule\Incoming\Wordware.Publishing.Learn.Microsoft.Excel.2002.VBA.Programming.With.XML.And.ASP.eBook-LiB.pdf
2006-04-16 16:26 10759264 --a------ C:\Program Files\eMule\Incoming\Sams Teach Yourself Microsoft Access 2000 in 21 Days(1).pdf
2006-04-16 16:24 6108762 --a------ C:\Program Files\eMule\Incoming\eBook - O'Reilly - Access Database Design & Programming.pdf
2006-04-16 16:23 16046067 --a------ C:\Program Files\eMule\Incoming\Wiley,.Excel.Timesaving.Techniques.for.Dummies.(2005).YYePG.pdf
2006-04-16 16:13 9644081 --a------ C:\Program Files\eMule\Incoming\Project Management for Construction.pdf
2006-04-16 16:07 84937611 --a------ C:\Program Files\eMule\Incoming\Excel 2003 Power Programming with VBA (by John Walkenbach).pdf
2006-04-16 15:57 18888964 --a------ C:\Program Files\eMule\Incoming\Knowledgenet.Building.Cisco.Remote.Access.Networks.BCRAN.Student.Guide.v2.2.2005.pdf
2006-04-16 15:57 10126348 --a------ C:\Program Files\eMule\Incoming\DC Heroes - Project Prometheus (1985).pdf
2006-04-16 15:52 14055831 --a------ C:\Program Files\eMule\Incoming\MICROSOFT_PRESS-Microsoft_Office_Access_2003_Inside_Track.pdf
2006-04-16 15:48 22254023 --a------ C:\Program Files\eMule\Incoming\Tips&Tricks - Office Excel, Outlook, Powerpoint, Windows, Word, Access.pdf
2006-04-16 15:33 9562495 --a------ C:\Program Files\eMule\Incoming\Syngress - CYA Securing Exchange Server 2003 and Outlook Web Access - 2004.pdf
2006-04-16 15:29 19239687 --a------ C:\Program Files\eMule\Incoming\MS Press.Office_Excel_2003_Inside_Out.2004.pdf
2006-04-16 15:28 27786400 --a------ C:\Program Files\eMule\Incoming\Oreilly-Writing Excel Macros with VBA, 2nd Edition.pdf
2006-04-16 15:25 10759264 --a------ C:\Program Files\eMule\Incoming\SAMS Teach Yourself Microsoft Access 2000 in 21 Days.pdf
2006-04-16 15:23 13485255 --a------ C:\Program Files\eMule\Incoming\Wiley,.Excel.Advanced.Report.Development.(2005).DDU.LotB.pdf
2006-04-16 15:20 19269329 --a------ C:\Program Files\eMule\Incoming\Microsoft Office Excel 2003 Manual.pdf
2006-04-16 15:20 16265626 --a------ C:\Program Files\eMule\Incoming\Wiley - Project Risk Management Guidelines - 2005 - (By Laxxuss).pdf
2006-04-16 15:17 11251509 --a------ C:\Program Files\eMule\Incoming\Thomson,.Microsoft.Excel.VBA.Programming.for.the.Absolute.Beginner.(2005).2ED.DDU;.OCR.7.0-2.6.LotB.pdf
2006-04-16 15:13 379392000 --a------ C:\Program Files\eMule\Temp\008.part
2006-04-16 15:12 8379969 --a------ C:\Program Files\eMule\Incoming\E-Buch - Excel-VBA in 14 Tagen (Held).pdf
2006-04-16 15:12 10923917 --a------ C:\Program Files\eMule\Incoming\EXCEL.2002.FORMULAS..pdf
2006-04-16 15:11 15280705 --a------ C:\Program Files\eMule\Incoming\MS Press - Microsoft Excel 2002 Visual Basic for Applications Step by Step.chm
2006-04-16 15:07 7460110 --a------ C:\Program Files\eMule\Incoming\ARRL HANDBOOK-Antenna Project(Cap20).pdf
2006-04-16 15:04 10189675 --a------ C:\Program Files\eMule\Incoming\Prentice.Hall.PTR.Passing.the.PMP.Exam.How.to.Take.It.and.Pass.It.Jul.2005..pdf
2006-04-16 15:02 7839013 --a------ C:\Program Files\eMule\Incoming\Wizkids 10991 - Mechwarrior - Technical Readout Project Phoenix (Classic Battletech).pdf
2006-04-16 15:01 17718231 --a------ C:\Program Files\eMule\Incoming\[Book][Software Engineering][McGraw Hill][PDF] Software Project Management - Second Edition.pdf
2006-04-16 15:00 10168367 --a------ C:\Program Files\eMule\Incoming\How to do Everything with Microsoft Office Excel 2003 - Guy Hart-Davis.pdf
2006-04-16 14:59 12286600 --a------ C:\Program Files\eMule\Incoming\Wrox - 0764556592 - Beginning Access 2003 VBA - fly.pdf
2006-04-16 14:42 12786000 --a------ C:\Program Files\eMule\Incoming\John Wiley & Sons - Excel Data Analysis - Your Visual Blueprint To Analyzing Data, Charts And Pivot Tables.pdf
2006-04-16 14:39 34864421 --a------ C:\Program Files\eMule\Incoming\Wiley - Project Management - A Systems Approach To Planning, Scheduling, And Controlling [2001].pdf
2006-04-16 14:38 9574306 --a------ C:\Program Files\eMule\Incoming\Project Management With Sap r3(1).pdf
2006-04-16 14:38 11405138 --a------ C:\Program Files\eMule\Incoming\A Guide to the Project Management Body of Knowledge Third 3rd Edition 2004 PMBOK PMI.pdf
2006-04-16 14:22 6007842 --a------ C:\Program Files\eMule\Incoming\Excel 2000 Step by Step.chm
2006-04-16 14:21 8495939 --a------ C:\Program Files\eMule\Incoming\Microsoft Office - eBook - Excel Programming 2003 - Inside Out.pdf
2006-04-16 14:21 13816563 --a------ C:\Program Files\eMule\Incoming\MS Press - Microsoft Office Excel 2003 - Step by step.pdf
2006-04-16 14:18 9437304 --a------ C:\Program Files\eMule\Incoming\(ebook) - J Ross; Quantitative Methods in Project Management.chm
2006-04-16 14:13 9881978 --a------ C:\Program Files\eMule\Incoming\John.Wiley.and.Sons.Excel.Best.Practices.for.Business.eBook-DDU.pdf
2006-04-16 14:13 12023402 --a------ C:\Program Files\eMule\Incoming\Excel 2003 Formulas.pdf
2006-04-16 14:10 20831946 --a------ C:\Program Files\eMule\Incoming\Prentice Hall Ptr Passing The Pmp Exam How To Take It And Pass It Jul 2005.pdf
2006-04-16 14:08 11981146 --a------ C:\Program Files\eMule\Incoming\PMBOK - Guide to the Project Management Body of Knowledge.pdf
2006-04-16 14:05 211316761 --a------ C:\Program Files\eMule\Temp\106.part
2006-04-16 14:02 16369144 --a------ C:\Program Files\eMule\Incoming\John Wiley And Sons Project Risk Management Guidelines Managing Risk In Large Projects Andplex Procureme.pdf
2006-04-16 13:53 17052663 --a------ C:\Program Files\eMule\Temp\148.part
2006-04-16 13:51 10324425 --a------ C:\Program Files\eMule\Temp\181.part
2006-04-16 13:50 12199481 --a------ C:\Program Files\eMule\Incoming\2_Markt & Technik Excel VBA Programmierung Kompendium.pdf
2006-04-16 13:48 20609719 --a------ C:\Program Files\eMule\Incoming\Microsoft Office Excel 2003 Bible.pdf
2006-04-16 13:46 6765276 --a------ C:\Program Files\eMule\Incoming\O'Reilly - Analyzing Business Data with Excel.(2006).BBL.LotB.chm
2006-04-16 13:40 29951763 --a------ C:\Program Files\eMule\Temp\207.part
2006-04-16 13:36 5601432 --a------ C:\Program Files\eMule\Incoming\[eBook] Project Management Nation - Tools, Techniques, and Goals for the New and Practicing IT Project Manager (Wiley).pdf
2006-04-16 13:34 6751191 --a------ C:\Program Files\eMule\Incoming\Que Absolute Beginners Guide MS Excel 2003.chm
2006-04-16 13:32 19670403 --a------ C:\Program Files\eMule\Incoming\Sybex Inc. - Mastering Excel 2003 Programming with Vba (Mar 2004).pdf
2006-04-16 13:28 17357181 --a------ C:\Program Files\eMule\Incoming\Microsoft.Press.Accessing.and.Analyzing.Data.with.Microsoft.Excel.eBook-LiB.chm
2006-04-16 13:28 11181911 --a------ C:\Program Files\eMule\Incoming\Mt - Excel-Vba Programmierung - Kompendium (850 Makros Für Excel 97, 2000, 2002) 2002 - (By Laxxuss).pdf
2006-04-16 13:27 11585310 --a------ C:\Program Files\eMule\Incoming\McGraw.Hill.PMP.Project.Management.Professional.Study.Guide.eBook-DDU.chm
2006-04-16 13:24 8034035 --a------ C:\Program Files\eMule\Incoming\McGraw-Hill-Osborne.How_to_Do_Everything_with_Microsoft_Office_Excel_2003.2003.pdf
2006-04-16 13:21 5120208 --a------ C:\Program Files\eMule\Incoming\John.Wiley.And.Sons.Project.Management.Methodologies.eBook-LiB.chm
2006-04-16 13:21 126464000 --a------ C:\Program Files\eMule\Temp\111.part
2006-04-16 13:18 7552512 --a------ C:\Program Files\eMule\Incoming\Excel (tablas dinámicas avanzadas II. Datos).doc
2006-04-16 13:18 17052663 --a------ C:\Program Files\eMule\Incoming\Chip Sonderheft - Excel.pdf
2006-04-16 13:16 13402156 --a------ C:\Program Files\eMule\Incoming\International Institute for Learning - Dynamic scheduling with Microsoft Project.PDF
2006-04-16 13:14 7435084 --a------ C:\Program Files\eMule\Incoming\Rita Pmp Exam Prep 2005 Fifth Edition.pdf
2006-04-16 13:05 6002560 --a------ C:\Program Files\eMule\Incoming\O'Reilly - Writing Excel Macros with VBA, 2nd Edition Ebook -fly(1).pdf
2006-04-16 13:02 12314687 --a------ C:\Program Files\eMule\Incoming\Addison.Wesley.Visual.Studio.Tools.for.Office.Using.C.Sharp.with.Excel.Word.Outlook.and.InfoPath.Sep.2005.chm
2006-04-16 12:54 17290209 --a------ C:\Program Files\eMule\Incoming\Innovative.Training.Works,.Microsoft.Excel.Whiz.2002.Official.Certification.Guide.for.Microsoft.Office.Specialist.Core.Exam.(2003).LiB.chm
2006-04-16 12:53 5885733 --a------ C:\Program Files\eMule\Incoming\Writing Excel Macros with VBA (2nd Ed 2002) - Steven Roman O'REILLY.pdf
2006-04-16 12:47 9728000 --a------ C:\Program Files\eMule\Temp\197.part
2006-04-16 12:46 11664243 --a------ C:\Program Files\eMule\Incoming\RMC - Pmp Exam Prep - Rita Mulcahy - 4ed, 2002.pdf
2006-04-16 12:42 10793150 --a------ C:\Program Files\eMule\Incoming\VBA-Excel in 21 Tagen.pdf
2006-04-16 12:38 6149130 --a------ C:\Program Files\eMule\Incoming\FSM - Issue 11 - March, April 2006.[content.emule-project.net].pdf
2006-04-16 12:18 13950928 --a------ C:\Program Files\eMule\Incoming\Nestor Z80 Microcomputer - Full Project (ptg-br).pdf
2006-04-16 01:42 14335505 --a------ C:\Program Files\eMule\Temp\078.part
2006-04-16 01:34 5128192 --a------ C:\Program Files\eMule\Incoming\Wiley - Project Management Methodologies (2006).chm
2006-04-16 01:29 9471053 --a------ C:\Program Files\eMule\Incoming\(EBook - NLP) Neuro Linguistic Programming WorkBook - Excel.pdf
2006-04-16 01:27 6721585 --a------ C:\Program Files\eMule\Incoming\MCGraw-Hill Osborne PMP Project Management Professional Study Guide.pdf
2006-04-16 01:24 9831216 --a------ C:\Program Files\eMule\Incoming\McGraw-Hill - How to Do Everything with Microsoft Office Excel 2003.pdf
2006-04-16 01:23 14116606 --a------ C:\Program Files\eMule\Incoming\Pic Microcontroller Project Book.pdf
2006-04-16 01:22 15447370 --a------ C:\Program Files\eMule\Incoming\[PMBOK.2004..A_Guide_to_the_Project_Management_Body_of_Knowledge_(PMBOK_Guide)_Third_Edition.2004.ProjectManagementInstitute.chm
2006-04-16 01:22 13537155 --a------ C:\Program Files\eMule\Incoming\Wiley,.Escape.from.Excel.Hell.Fixing.Problems.in.Excel.2003.2002.2000.(2006).BBL.LotB.pdf
2006-04-16 01:17 9728000 --a------ C:\Program Files\eMule\Temp\173.part
2006-04-16 01:15 9276234 --a------ C:\Program Files\eMule\Incoming\Microsoft Excel VBA Programming for the Absolute Beginner - fly.pdf
2006-04-16 01:07 9483053 --a------ C:\Program Files\eMule\Incoming\Project Management With Sap r3 2.pdf
2006-04-16 01:02 5633621 --a------ C:\Program Files\eMule\Incoming\McGraw-Hill - Brealey & Myers - Finance - Financial Analysis With Excel.pdf
2006-04-16 00:57 9374545 --a------ C:\Program Files\eMule\Incoming\John Wiley & Sons - Excel 2002 Power Programming with VBA.pdf
2006-04-16 00:53 12157623 --a------ C:\Program Files\eMule\Temp\205.part
2006-04-16 00:49 8646378 --a------ C:\Program Files\eMule\Incoming\[eBook] Sybex - ISBN 0 7821-4106-4 - Project Management Professional (PMP) Study Guide by Kim Heldman.pdf
2006-04-16 00:47 17164989 --a------ C:\Program Files\eMule\Incoming\[AMACOM] The AMA Handbook of Project Management, 2nd Edition (2006) - DDU.pdf
2006-04-16 00:46 11970772 --a------ C:\Program Files\eMule\Temp\168.part
2006-04-16 00:44 15485813 --a------ C:\Program Files\eMule\Temp\038.part
2006-04-16 00:42 36468777 --a------ C:\Program Files\eMule\Temp\042.part
2006-04-16 00:41 15463532 --a------ C:\Program Files\eMule\Incoming\Limelight.Media.F1.Get.the.Most.out.of.Excel.The.Ultimate.Excel.Tip.Help.Guide.Aug.2004.eBook-DDU.pdf
2006-04-16 00:40 10399336 --a------ C:\Program Files\eMule\Incoming\Wiley - IT Project Management.pdf
2006-04-16 00:39 7120066 --a------ C:\Program Files\eMule\Incoming\Excel 2003 Programming A Developer's Notebook (2004) OReilly.chm
2006-04-16 00:37 6327091 --a------ C:\Program Files\eMule\Incoming\McGraw-Hill - Excel VBA Macro Programming - 2004.chm
2006-04-16 00:36 13793416 --a------ C:\Program Files\eMule\Temp\010.part
2006-04-16 00:34 20873262 --a------ C:\Program Files\eMule\Temp\066.part
2006-04-16 00:32 9827840 --a------ C:\Program Files\eMule\Temp\183.part
2006-04-16 00:32 9347898 --a------ C:\Program Files\eMule\Incoming\Excel 2002 VBA Programming.pdf
2006-04-16 00:32 10174888 --a------ C:\Program Files\eMule\Temp\065.part
2006-04-16 00:29 16554701 --a------ C:\Program Files\eMule\Temp\190.part
2006-04-16 00:27 9728000 --a------ C:\Program Files\eMule\Temp\005.part
2006-04-16 00:24 10219665 --a------ C:\Program Files\eMule\Incoming\OReilly.-.Excel.Scientific.and.Engineering.Cookbook.[2006].chm
2006-04-16 00:22 0 --a------ C:\Program Files\eMule\Temp\177.part
2006-04-16 00:22 0 --a------ C:\Program Files\eMule\Temp\176.part
2006-04-16 00:21 22642772 --a------ C:\Program Files\eMule\Incoming\C# - Addison Wesley - Visual Studio Tools For Office Using C# With Excel Word Outlook And Infopath - 2005.pdf
2006-04-16 00:19 9490397 --a------ C:\Program Files\eMule\Incoming\Teach Yourself Microsoft Office Excel 2003 In 24 Hours.chm
2006-04-16 00:16 38912000 --a------ C:\Program Files\eMule\Temp\123.part
2006-04-16 00:01 0 --a------ C:\Program Files\eMule\Temp\122.part
2006-04-16 00:01 0 --a------ C:\Program Files\eMule\Temp\115.part
2006-04-16 00:01 0 --a------ C:\Program Files\eMule\Temp\114.part
2006-04-16 00:01 0 --a------ C:\Program Files\eMule\Temp\112.part
2006-04-16 00:01 0 --a------ C:\Program Files\eMule\Temp\103.part
2006-04-16 00:01 0 --a------ C:\Program Files\eMule\Temp\059.part
2006-04-16 00:01 0 --a------ C:\Program Files\eMule\Temp\055.part
2006-04-16 00:01 0 --a------ C:\Program Files\eMule\Temp\035.part
2006-04-16 00:01 0 --a------ C:\Program Files\eMule\Temp\031.part
2006-04-16 00:01 0 --a------ C:\Program Files\eMule\Temp\020.part
2006-04-16 00:01 0 --a------ C:\Program Files\eMule\Temp\018.part


((((((((((((((((((((((((((((( snapshot@2008-09-08_18.44.04.28 )))))))))))))))))))))))))))))))))))))))))
.
+ 2005-10-21 02:02:28 163,328 ----a-w C:\WINDOWS\erdnt\subs\ERDNT.EXE
- 2008-09-09 00:28:45 4,224 -c--a-w C:\WINDOWS\system32\dllcache\beep.sys
+ 2008-09-10 00:12:14 4,224 -c--a-w C:\WINDOWS\system32\dllcache\beep.sys
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]
"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\daemon.exe" [2008-04-01 486856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nTrayFw"="C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nTrayFw.exe" [2005-07-29 270336]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2005-10-10 7286784]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2005-10-10 86016]
"SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [2005-05-19 925696]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2006-05-10 180269]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 144784]
"D-Link Wireless G WDA-1320"="C:\Program Files\D-Link\Wireless G WDA-1320\AirGCFG.exe" [2005-12-14 2711552]
"ANIWZCS2Service"="C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe" [2005-11-30 49152]
"Athan"="C:\Program Files\Athan\Athan.exe" [2006-09-17 978944]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2005-09-25 155648]
"KONICA MINOLTA PagePro 1350WStatusDisplay"="C:\WINDOWS\system32\MSTMON_Q.EXE" [2004-11-21 163840]
"lxdjamon"="C:\Program Files\Lexmark 1400 Series\lxdjamon.exe" [2007-03-05 20480]
"LXDJCATS"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXDJtime.dll" [2007-02-09 102400]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-05-27 413696]
"nwiz"="nwiz.exe" [2005-10-10 C:\WINDOWS\system32\nwiz.exe]
"High Definition Audio Property Page Shortcut"="HDAShCut.exe" [2004-10-27 C:\WINDOWS\system32\HdAShCut.exe]
"MsmqIntCert"="mqrt.dll" [2007-07-06 C:\WINDOWS\system32\mqrt.dll]

C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Startup\
Acrobat Assistant.lnk - C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe [2003-04-07 217190]
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 29696]
Belkin 802.11g Wireless PCI Card Configuration Utility.lnk - C:\Program Files\Belkin\Belkin 802.11g Wireless PCI Card Configuration Utility\utility.exe [2006-04-30 340054]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 83360]
Personal Phone Gateway.lnk - C:\WINDOWS\Installer\{00F95E0F-F99D-41B8-82C5-ADAAEF272D46}\_78EC8E5CF1616364F8F203.exe [2008-08-31 10134]
Service Manager.lnk - C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe [2002-12-17 74308]
Wireless Configuration Utility HW.32.lnk - C:\WINDOWS\Installer\{BDC88E5A-F47B-4314-AB38-994592E32C95}\NewShortcut1.exe [2006-09-02 40960]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.wmv3"= C:\PROGRA~1\COMBIN~1\Filters\wmv9vcm.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\NVIDIA Corporation\\NetworkAccessManager\\Apache Group\\Apache2\\bin\\Apache.exe"=
"C:\\WINDOWS\\system32\\dpvsetup.exe"=
"C:\\Program Files\\NetMeeting\\conf.exe"=
"C:\\Program Files\\Software IP Phone Center\\TjBuddy.exe"=
"C:\\Program Files\\Software IP Phone Center\\Pc2PcCall.exe"=
"C:\\Program Files\\Software IP Phone Center\\IPCRelay.exe"=
"C:\\Program Files\\Personal Phone Gateway\\Listener.exe"=
"C:\\Program Files\\Personal Phone Gateway\\PhoneGateway.exe"=
"C:\\Program Files\\VoipCheap\\VoipCheap.exe"=
"C:\\WINDOWS\\system32\\mqsvc.exe"=
"C:\\WINDOWS\\system32\\lxdjcoms.exe"=
"C:\\Program Files\\Lexmark 1400 Series\\lxdjamon.exe"=
"C:\\Program Files\\Lexmark 1400 Series\\App4R.exe"=
"C:\\WINDOWS\\system32\\lxdjcfg.exe"=
"C:\\Program Files\\Lexmark 1400 Series\\Wireless\\lxdjwpss.exe"=
"C:\\Program Files\\Winamp Remote\\bin\\Orb.exe"=
"C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"=
"C:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"=
"C:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\lxdjjswx.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\Program Files\\Voipwise.com\\Voipwise\\Voipwise.exe"=
"C:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\lxdjpswx.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=
"C:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\lxdjtime.exe"=

R2 MLPTDR_Q;MLPTDR_Q;C:\WINDOWS\system32\MLPTDR_Q.SYS [2004-11-18 18848]
R2 MSSQL$PRIMAVERA;MSSQL$PRIMAVERA;C:\Program Files\Microsoft SQL Server\MSSQL$PRIMAVERA\Binn\sqlservr.exe [2002-12-17 7520337]
S3 A3AB;D-Link AirPro 802.11a/b Wireless Adapter Service(A3AB);C:\WINDOWS\system32\DRIVERS\A3AB.sys [2005-08-25 466880]
S3 DNINDIS5;DNINDIS5 NDIS Protocol Driver;C:\PROGRA~1\Belkin\BELKIN~1.11G\DNINDIS5.SYS [2003-07-24 17149]
S3 SIS163u;SiS 163 usb Wireless LAN Adapter Driver;C:\WINDOWS\system32\DRIVERS\sis163u.sys [2004-12-31 167424]
S3 SQLAgent$PRIMAVERA;SQLAgent$PRIMAVERA;C:\Program Files\Microsoft SQL Server\MSSQL$PRIMAVERA\Binn\sqlagent.EXE [2002-12-17 311872]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a812ea76-a5c9-11dc-aacf-806d6172696f}]
\Shell\AutoRun\command - D:\SETUP.EXE
.
Contents of the 'Scheduled Tasks' folder
.

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-09 18:36:00
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\WINDOWS\system32\msdtc.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\Apache.exe
C:\WINDOWS\system32\lxdjcoms.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcIp.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcLog.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\Apache.exe
C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\SiSWLSvc.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcAppFlt.exe
C:\WINDOWS\system32\mqsvc.exe
C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\WlanCU.exe
C:\WINDOWS\system32\mqtgsvc.exe
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\Personal Phone Gateway\Manager.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Winamp\winamp.exe
.
**************************************************************************
.
Completion time: 2008-09-09 18:40:05 - machine was rebooted
ComboFix-quarantined-files.txt 2008-09-10 00:39:44
ComboFix2.txt 2008-09-09 00:44:44

Pre-Run: 159,274,278,912 bytes free
Post-Run: 159,172,657,152 bytes free

1079 --- E O F --- 2008-08-24 12:58:03





SteelWerX Registry Console Tool 2.0
Written by Bobbi Flekman 2006 (C)

HKEY_LOCAL_MACHINE\software\trendmicro\hijackthis
Version REG_SZ 202
LanguageFile REG_SZ (Default)
ShowIntroFrame REG_SZ 1
WinHeight REG_SZ 7995
WinWidth REG_SZ 9000
AutoSelect REG_SZ 0
Confirm REG_SZ 1
MakeBackup REG_SZ 1
IgnoreSafe REG_SZ 1
LogProcesses REG_SZ 1
DefStartPage REG_SZ http://www.msn.com/
DefSearchPage REG_SZ http://www.microsoft.com/isapi/redir.dl ... r=iesearch
DefSearchAss REG_SZ http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
DefSearchCust REG_SZ http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IgnoreNum REG_SZ 0
1337z0r
Active Member
 
Posts: 8
Joined: September 4th, 2008, 7:35 pm

Re: WoW trojan

Unread postby ndmmxiaomayi » September 11th, 2008, 7:33 am

Hi 1337z0r,

You have a lot of copyrighted books in your eMule folder.

If you've the bought the books and is entitled to download them, they can be kept. However, if no, it's against our policies.

Please see here - viewtopic.php?t=550

You can choose to keep them and our help ends here, or you remove them and we continue our help.
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: WoW trojan

Unread postby NonSuch » September 16th, 2008, 1:49 pm

Due to lack of response, this topic is now closed.

If you still require help, please open a new thread in the Infected? Virus, malware, adware, ransomware, oh my! forum, include a fresh FRST log, and wait for a new helper.
User avatar
NonSuch
Administrator
Administrator
 
Posts: 28747
Joined: February 23rd, 2005, 7:08 am
Location: California
Advertisement
Register to Remove


  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 603 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware