Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

explorer.exe and winlogon.exe infection

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

explorer.exe and winlogon.exe infection

Unread postby biggt1976 » September 16th, 2010, 6:16 pm

Hey guys, Id very much appriciate some help getting rid of a virus on my laptop that seems to have attached itself to the explorer.exe and winlogon.exe files. When I scan with avast the results come up as:

C:\\WINDOWS\explorer.exe
C:\\WINDOWS\System32\winlogon.exe
C:\\WINDOWS\explorer.exe

But if I try and 'move to chest' it says not possible, and if i click 'repar' it says not possible cos file is in use. When i do a boot-time scan it picks these same files up as being infected and gives a number of options to do like Repair, Move To Chest, Delete, Ignore etc. Is there any of these options that will remove the virus? when i click repair it says not possible and gives error code 42060. Everytime i turn the laptop on and get to the desktop or open a new window when im browing i get a message from avast saying virus detected and also when im clicking links i get redirected to different websites sometimes.

I am getting very frustrated as I dont know how to get rid of it and with the files being called explorer.exe and winlogon.exe im guessing ive got to be pretty careful!

here is my Hijack This Scan anyway...

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:13:03, on 16/09/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\OA012Mon.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\WSED\WSED.exe
C:\Program Files\Battery Meter\BTMeter.exe
C:\Program Files\CapsLKNotify\CapsLKNotify.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\Program Files\O2 Assistant\bin\sprtcmd.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\Program Files\O2 Assistant\bin\sprtsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\O2 Assistant\bin\tgsrvc.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/USCON/2
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://login.yahoo.com/config/login_verify2?&.src=ym
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = http://g.uk.msn.com/USCON/2
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://g.uk.msn.com/USCON/2
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\16.0.0.125\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\16.0.0.125\IPSBHO.DLL
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: FlashGetBHO - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - C:\Documents and Settings\me\Application Data\FlashGetBHO\FlashGetBHO3.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\16.0.0.125\coIEPlg.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [OA012Mon] C:\WINDOWS\OA012Mon.exe
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe
O4 - HKLM\..\Run: [WSED] C:\Program Files\WSED\WSED.exe
O4 - HKLM\..\Run: [BTMeter] C:\Program Files\Battery Meter\BTMeter.exe
O4 - HKLM\..\Run: [CapsLKNotify] C:\Program Files\CapsLKNotify\CapsLKNotify.exe
O4 - HKLM\..\Run: [dellsupportcenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P dellsupportcenter
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [O2DA] "C:\Program Files\O2 Assistant\bin\sprtcmd.exe" /P O2DA
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [FlashGet 3] "C:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe" -minimize
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: Download all by FlashGet3 - C:\Documents and Settings\me\Application Data\FlashGetBHO\GetAllUrl.htm
O8 - Extra context menu item: Download by FlashGet3 - C:\Documents and Settings\me\Application Data\FlashGetBHO\GetUrl.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://software.kuaiche.com
O15 - Trusted Zone: http://*.broadband.o2.co.uk
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/s ... DEXAXO.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: Norton Internet Security - Symantec Corporation - C:\Program Files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe
O23 - Service: SupportSoft Sprocket Service (DellSupportCenter) (sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: SupportSoft Sprocket Service (O2DA) (sprtsvc_O2DA) - SupportSoft, Inc. - C:\Program Files\O2 Assistant\bin\sprtsvc.exe
O23 - Service: SupportSoft RemoteAssist - SupportSoft, Inc. - C:\Program Files\Common Files\supportsoft\bin\ssrc.exe
O23 - Service: SupportSoft Repair Service (O2DA) (tgsrvc_O2DA) - SupportSoft, Inc. - C:\Program Files\O2 Assistant\bin\tgsrvc.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

--
End of file - 12682 bytes

Any help would be greatly appriciated so thanks in advance!

CHeers
T
biggt1976
Regular Member
 
Posts: 17
Joined: September 16th, 2010, 6:01 pm
Advertisement
Register to Remove

Re: explorer.exe and winlogon.exe infection

Unread postby MWR 3 day Mod » September 19th, 2010, 11:17 pm

Hi,

We are sorry to see your topic is over three days old and no one has yet been able to respond and offer help.

If you still require assistance, please post a link to your topic in our Waiting for help with malware removal? forum, and our staff will make an effort to assist you as promptly as possible. Only post a LINK to this topic, DO NOT post your DDS log!

Please do not reply to this topic.

If you haven't posted within two days in the "Waiting for help with malware removal?" forum, we will assume you have been able to get assistance in other ways and this topic will be closed.
MWR 3 day Mod
MRU Undergrad
MRU Undergrad
 
Posts: 2534
Joined: April 4th, 2008, 8:40 am

Re: explorer.exe and winlogon.exe infection

Unread postby deltalima » September 20th, 2010, 3:45 pm

Hi biggt1976,

Welcome to the forum.

My nickname is deltalima and I will be helping you with your computer problems.

The logs can take some time to research, so please be patient with me.

Please be aware that removing Malware is a potentially hazardous undertaking. I will take care not to knowingly suggest courses of action that might damage your computer. However it is impossible for me to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection, and I cannot guarantee the safety of your system. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system, or to necessitate you taking your computer to a repair shop.


Please note the following:
  • I will be working be on your Malware issues, this may or may not, solve other issues you have with your machine.
  • The fixes are specific to your problem and should only be used for this issue on this machine.
  • Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
  • If after 3 days you have not responded to this topic, it will be closed, and you will need to start a new one.
  • It's often worth reading through these instructions and printing them for ease of reference.
  • If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
  • Please reply to this thread. Do not start a new topic.

I see that you have two antivirus programs installed, Norton Internet Security and AVAST. It is vital that you only use one antivirus program. Please uninstall one of them.

Uninstall List
  • Open HijackThis.
  • Look under System tools.
  • Click on the Open Uninstall Manager... button.
  • Click on the Save list... button.
  • It will prompt you to save. Save this log in a convenient location. By default it's named uninstall_list.txt.
  • Notepad will open. Please copy and paste the contents of this log in your next reply.
User avatar
deltalima
Admin/Teacher
Admin/Teacher
 
Posts: 7614
Joined: February 28th, 2009, 4:38 pm
Location: UK

Re: explorer.exe and winlogon.exe infection

Unread postby biggt1976 » September 20th, 2010, 5:07 pm

Thanks for the reply. I have uninstalled Norton, i never used it anyway. Here is the results from what you asked for in your last message:

32 Bit HP CIO Components Installer
3Connect
Acrobat.com
Acrobat.com
Ad-Aware
Ad-Aware
Ad-Aware Email Scanner for Outlook
Adobe AIR
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Reader 8.2.4
Advanced Audio FX Engine
Advertising Center
Apple Application Support
Apple Mobile Device Support
Apple Software Update
Ask Toolbar
avast! Free Antivirus
Battery Meter
BitTorrent
Bonjour
CapsLKNotify
Combined Community Codec Pack 2009-09-09
Compatibility Pack for the 2007 Office system
Dell Support Center (Support Software)
Dell Touchpad
Dell Video Chat
Dell Webcam Central
Dell Wireless WLAN Card Utility
DolbyFiles
eBay Icon
EMSC
Eusing Free Registry Cleaner
FlashGet 3.5
Free Mp3 Wma Converter V 1.81
Google Toolbar for Internet Explorer
Google Toolbar for Internet Explorer
GoToAssist 8.0.0.514
HiJackThis
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB915800-v4)
Hotfix for Windows XP (KB954708)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB976098-v2)
Hotfix for Windows XP (KB979306)
Hotfix for Windows XP (KB981793)
HP Deskjet F2400 All-In-One Driver 13.0 Rel .6
Huawei modem
Integrated Webcam Driver (1.05.01.0820)
Intel(R) Graphics Media Accelerator Driver
iTunes
Java(TM) 6 Update 21
Junk Mail filter update
Live! Cam Avatar Creator
Macromedia Fireworks MX 2004
Malwarebytes' Anti-Malware
Menu Templates - Starter Kit
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1
Microsoft Choice Guard
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office Excel MUI (English) 2007
Microsoft Office Home and Student 2007
Microsoft Office Home and Student 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Suite Activation Assistant
Microsoft Office Word MUI (English) 2007
Microsoft Search Enhancement Pack
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Sync Framework Runtime Native v1.0 (x86)
Microsoft Sync Framework Services Native v1.0 (x86)
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Works
Movie Templates - Starter Kit
MSVCRT
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 6.0 Parser (KB927977)
My O2
Nero 9 Trial
Nero BurnRights
Nero ControlCenter
Nero CoverDesigner
Nero DiscSpeed
Nero DriveSpeed
Nero InfoTool
Nero Installer
Nero PhotoSnap
Nero Recode
Nero Rescue Agent
Nero ShowTime
Nero StartSmart
Nero Vision
Nero WaveEditor
NeroBurningROM
NeroExpress
neroxml
office Convert Pdf to Jpg Jpeg Tiff Free 6.4
PCFriendly
QuickTime
Realtek High Definition Audio Driver
Security Update for 2007 Microsoft Office System (KB2277947)
Security Update for 2007 Microsoft Office System (KB2288621)
Security Update for 2007 Microsoft Office System (KB969559)
Security Update for 2007 Microsoft Office System (KB976321)
Security Update for 2007 Microsoft Office System (KB982312)
Security Update for 2007 Microsoft Office System (KB982331)
Security Update for CAPICOM (KB931906)
Security Update for CAPICOM (KB931906)
Security Update for Microsoft Office Excel 2007 (KB982308)
Security Update for Microsoft Office InfoPath 2007 (KB979441)
Security Update for Microsoft Office PowerPoint 2007 (KB982158)
Security Update for Microsoft Office system 2007 (972581)
Security Update for Microsoft Office system 2007 (KB974234)
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
Security Update for Microsoft Office Word 2007 (KB2251419)
Security Update for Windows Internet Explorer 8 (KB2183461)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB976325)
Security Update for Windows Internet Explorer 8 (KB978207)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Internet Explorer 8 (KB982381)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Search 4 - KB963093
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2160329)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB976325)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982665)
Security Update for Windows XP (KB982802)
Segoe UI
Sound Forge Pro 10.0
SoundTrax
Switch Sound File Converter
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft Office OneNote 2007 (KB980729)
Update for Windows Internet Explorer 8 (KB975364)
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows Internet Explorer 8 (KB980182)
Update for Windows XP (KB2141007)
Update for Windows XP (KB898461)
Update for Windows XP (KB955759)
Update for Windows XP (KB961503)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
VDownloader 1.12
Visual C++ 2008 x86 Runtime - (v9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01
VLC media player 1.1.3
WAV MP3 Converter v4.0 build 1159
Windows Internet Explorer 8
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Essentials
Windows Live Mail
Windows Live Messenger
Windows Live Photo Gallery
Windows Live Sign-in Assistant
Windows Live Sync
Windows Live Toolbar
Windows Live Upload Tool
Windows Live Writer
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Player 11
Windows Presentation Foundation
Windows Search 4.0
WinRAR archiver

Thanks a lot!
T
biggt1976
Regular Member
 
Posts: 17
Joined: September 16th, 2010, 6:01 pm

Re: explorer.exe and winlogon.exe infection

Unread postby deltalima » September 20th, 2010, 5:14 pm

Hi biggt1976,

Remove P2P Programs

  • I notice there are signs of one or more P2P (Peer to Peer) File Sharing Programs on your computer.

    BitTorrent


  • Please read the Guidelines for P2P Programs where we explain why it's not a good idea to have them.
  • Note: Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The bad guys use P2P filesharing as a major conduit to spread their wares.

  • Click on start
  • Then Run
  • In the open text entry box please copy/paste appwiz.cpl Then click enter.
  • Press the "Remove" or "Change/Remove"...button to uninstall the programs listed above (in red) and any other P2P you have installed NOW.
  • Take care when answering any questions posed by an uninstaller. Some questions may be worded to deceive you into keeping the program.


Run Combofix

Temporarily disable any antispyware, antivirus and or antimalware real-time protection as they may interfere with running of ComboFix.

Download ComboFix from here to your Desktop.

For more information about Combofix please see here.

Close all programs.

Double click combofix.exe and follow the prompts.

If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it’s malware removal procedures, if not, then follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console. Once installed, you should see the following message:

The recovery console was successfuly installed.
Click ‘YES’ to continue scanning for malware
Click ‘NO’ for exit

Click the YES button.

The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop. Even when ComboFix appears to be doing nothing, look at your “drive access” light. If it is flashing, Combofix is still at work.

When finished ComboFix will produce a log file. Please post the contents of this log in your next reply.
User avatar
deltalima
Admin/Teacher
Admin/Teacher
 
Posts: 7614
Joined: February 28th, 2009, 4:38 pm
Location: UK

Re: explorer.exe and winlogon.exe infection

Unread postby biggt1976 » September 23rd, 2010, 10:52 am

Sorry for taking a little longer to reply, the Combofix took 15 hours to complete! The log in its entirity is too long to post as a reply. Its starts off with the following:

ComboFix 10-09-21.03 - me 22/09/2010 18:34:33.2.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1014.148 [GMT 1:00]
Running from: c:\documents and settings\me\Desktop\ComboFix.exe
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat
c:\documents and settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat
c:\documents and settings\me\Application Data\BITS
c:\documents and settings\me\Application Data\BITS\BITS.ini
c:\documents and settings\me\Application Data\BITS\DHTTable.dat
c:\documents and settings\me\Application Data\BITS\Torrent\20100503190527.torrent
c:\documents and settings\me\Application Data\BITS\Torrent\20100503190527.torrent.filelist
c:\documents and settings\me\Application Data\BITS\Torrent\20100503190528.torrent
c:\documents and settings\me\Application Data\BITS\Torrent\20100503190528.torrent.filelist

And the bulk of the log is taken up by the .torrent and .torrent.filelist as above. Do you need to see all of these entries or is it ok for me to post you the rest of the log after these? The final .torrent entry is:

c:\documents and settings\me\Application Data\BITS\Torrent\20100706161722.torrent.filelist
c:\documents and settings\me\Application Data\BITS\Torrent\20100706161723.torrent

Then it goes to:

c:\documents and settings\me\Application Data\BITS\UPnP.ini
c:\documents and settings\me\Application Data\Desktopicon
c:\documents and settings\me\Application Data\Desktopicon\eBay.ico
c:\documents and settings\me\Application Data\Desktopicon\uninst.exe
c:\documents and settings\me\Application Data\FlashGetBHO
c:\documents and settings\me\Application Data\FlashGetBHO\FlashGetBHO3.dll
c:\documents and settings\me\Application Data\FlashGetBHO\FlashGetHook.dll
c:\documents and settings\me\Application Data\FlashGetBHO\FlashGetHook1.dll
c:\documents and settings\me\Application Data\FlashGetBHO\GetAllUrl.htm
c:\documents and settings\me\Application Data\FlashGetBHO\GetUrl.htm
c:\program files\FlashGet Network
c:\program files\FlashGet Network\FlashGet 3\20100325194514.torrent
c:\program files\FlashGet Network\FlashGet 3\20100325194514.torrent.filelist
c:\program files\FlashGet Network\FlashGet 3\20100706171547.torrent
c:\program files\FlashGet Network\FlashGet 3\20100706171547.torrent.filelist
c:\program files\FlashGet Network\FlashGet 3\20100728180339.torrent
c:\program files\FlashGet Network\FlashGet 3\20100728180339.torrent.filelist
c:\program files\FlashGet Network\FlashGet 3\adns.dll
c:\program files\FlashGet Network\FlashGet 3\btcoreu.dll
c:\program files\FlashGet Network\FlashGet 3\BugReport.dll
c:\program files\FlashGet Network\FlashGet 3\BugReport.exe
c:\program files\FlashGet Network\FlashGet 3\cd1.ico
c:\program files\FlashGet Network\FlashGet 3\ckcore.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\14_43260.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\28_83260.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\atrc.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\Codecs.zip
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\cook.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\ddnt3260.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\dnet3260.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\drv1.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\drv2.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\drvc.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\hxltcolor.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\raac.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\ralf.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\rv10.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\rv20.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\rv30.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\rv40.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\sipr.dll
c:\program files\FlashGet Network\FlashGet 3\commonlib.dll
c:\program files\FlashGet Network\FlashGet 3\componentskrnl.dll
c:\program files\FlashGet Network\FlashGet 3\config\clients.met
c:\program files\FlashGet Network\FlashGet 3\config\clients.met.bak
c:\program files\FlashGet Network\FlashGet 3\config\cryptkey.dat
c:\program files\FlashGet Network\FlashGet 3\config\emfriends.met
c:\program files\FlashGet Network\FlashGet 3\config\known.met
c:\program files\FlashGet Network\FlashGet 3\config\known2_64.met
c:\program files\FlashGet Network\FlashGet 3\config\preferences.dat
c:\program files\FlashGet Network\FlashGet 3\config\preferences.ini
c:\program files\FlashGet Network\FlashGet 3\config\server.met
c:\program files\FlashGet Network\FlashGet 3\config\server_met.old
c:\program files\FlashGet Network\FlashGet 3\config\upload.met
c:\program files\FlashGet Network\FlashGet 3\corestat.dll
c:\program files\FlashGet Network\FlashGet 3\dat\Appsetting.cfg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\client_123.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\client_1309444450.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\client_236.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\client_2MKeHuDuan.JPG
c:\program files\FlashGet Network\FlashGet 3\dat\directui\client_55269.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\client_5566.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\client_icon03.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\client_icon04.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\client_km.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\client_llk1.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\client_sc.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\client_WeiBiaoTi-120.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\dian.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\directui_new_1280385579.zip
c:\program files\FlashGet Network\FlashGet 3\dat\directui\gameall.gif
c:\program files\FlashGet Network\FlashGet 3\dat\directui\gametop.gif
c:\program files\FlashGet Network\FlashGet 3\dat\directui\newgame.gif
c:\program files\FlashGet Network\FlashGet 3\dat\directui\newmovie.gif
c:\program files\FlashGet Network\FlashGet 3\dat\directui\p1.gif
c:\program files\FlashGet Network\FlashGet 3\dat\directui\p2.gif
c:\program files\FlashGet Network\FlashGet 3\dat\directui\p3.gif
c:\program files\FlashGet Network\FlashGet 3\dat\directui\p4.gif
c:\program files\FlashGet Network\FlashGet 3\dat\directui\p5.gif
c:\program files\FlashGet Network\FlashGet 3\dat\directui\p6.gif
c:\program files\FlashGet Network\FlashGet 3\dat\directui\p7.gif
c:\program files\FlashGet Network\FlashGet 3\dat\directui\p8.gif
c:\program files\FlashGet Network\FlashGet 3\dat\directui\reom.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\rescenter.txt
c:\program files\FlashGet Network\FlashGet 3\dat\directui\soft.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\tab.gif
c:\program files\FlashGet Network\FlashGet 3\dat\FlashGet3db.bak
c:\program files\FlashGet Network\FlashGet 3\dat\FlashGet3db.db
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\0D797C52_99BD_6F75_4699_CCFC1B98C1F7.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\38FD93BC_F3C5_6449_8382_1E3E98E67027.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\3A1BF900_7B06_EB3A_7079_5921C9251C2F.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\433D7634_D3E4_D214_7685_F8641D6E3B53.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\49B611F0_1616_6837_5D84_220469D71543.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\4AC30BF9_6ED5_F755_6512_464A7FFFCA42.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\607D88E4_2B2A_E85B_C47C_A0585A2B7FA8.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\7046B143_069E_2159_8399_1E915406DE99.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\704D6452_EBB1_3CC2_4486_B0C58FCE7759.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\706991A0_97C1_7AAD_B77A_0A601DFDE6DB.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\7CEB430B_E5A7_343D_F30C_0073E03A467D.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\A76F614F_883A_A9E9_F2B0_B385042719CF.gif
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\adconfig.ini
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\BF0065D9_6A1F_3B20_AC48_4AC14A302D3A.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\D0A07B53_017E_B92E_B449_5B6F564D59CA.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\d299ad48fa00d2f0c0f080f2d626c7cc.zip
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\D579F826_2362_2E5B_0FDF_B8D3DAC0A034.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\D918270C_4CC2_C602_3BCE_77EA2D01111A.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\domain_url_list.ini
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\E2CE7927_3024_2F9C_9985_93C927E8F81B.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\EA762DF4_4DC3_2AA3_40CB_68C7B9E60CC3.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\F3AAC497_788B_FBBB_39A1_0B47251D14C1.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\F6D62402_2FAB_F065_B355_D1958A3A0CC7.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\FE00511A_2778_7CCE_5459_A6528766DA37.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\FFF2C89C_73A5_7747_B5EF_7D214C6A0CA3.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\fg_gaokao.bmp
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\fg32587game.bmp
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\fg36new.bmp
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\fg40733game.bmp
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\fg40789game.bmp
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\fg40796game.bmp
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\fg40824game.bmp
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\fg40900game.bmp
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\fg40921game.bmp
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\fg40930game.bmp
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\fg40932game.bmp
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\fg40974game.bmp
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\fg40980game.bmp
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\fg40993game.bmp
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\fg41020game.bmp
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\fg41040game.bmp
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\fg41045game.bmp
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\fg714movie.bmp
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\fg771move.bmp
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\fg77star.bmp
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\fgmovie71.bmp
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\log_dll.ini
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\maintree.ini
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\port.ini
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\rescenter.txt
c:\program files\FlashGet Network\FlashGet 3\dat\stat\skinpreview\preview_blue.png
c:\program files\FlashGet Network\FlashGet 3\dat\stat\skinpreview\preview_blue3.png
c:\program files\FlashGet Network\FlashGet 3\dat\stat\skinpreview\preview_classic.png
c:\program files\FlashGet Network\FlashGet 3\dat\stat\skinpreview\preview_red.png
c:\program files\FlashGet Network\FlashGet 3\dat\stat\skinpreview\preview_red3.png
c:\program files\FlashGet Network\FlashGet 3\dat\stat\skinpreview\preview_white.png
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\3D58BA71_A14B_BEB8_9DC7_5420CF6FA6D2.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\450FF4A8_A4B3_3B27_6AFA_2DF0CAD755EE.gif
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\4C2AFBF6_867B_FDB1_0701_04EA7BF436CF.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\52011842_4DCC_0A45_9CB5_A709EAF0C000.gif
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\52E0C6D2_A90C_023E_161D_6D6F52F3F9A4.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\607D88E4_2B2A_E85B_C47C_A0585A2B7FA8.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\60E64E10_024E_016F_2DD9_7FA3854ABE04.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\62B93601_DA26_41A8_D2A0_39128F486A8E.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\6E94276B_A7AA_C68A_D710_77BE7FA8A5F2.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\73543160_A163_9C23_558C_D8762E258788.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\7899611E_E520_4CAA_0882_76745742F7C8.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\7A0F248C_C09C_0C79_1446_5D69C021BF75.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\7C323D39_49EC_2B6D_86DB_F7F5F9F6495A.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\7D599371_8CD2_A09E_5A9B_C19A3FC11E2F.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\82D6EF68_9A95_1894_38DE_B2297AEF6994.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\8466B375_F06C_74A2_195F_3FA1BF48741D.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\877936BA_04D4_56CB_B376_B349658A18B9.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\8A9630E6_5DB8_D6FB_B89F_FFF3D1AC9269.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\937505A8_3D05_C5D5_CC15_B28ED16D866C.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\942BEE06_C360_0C4F_0474_4E615DB4043C.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\994BA4FA_AD01_FA3C_33A9_CD9465960513.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\9C251E9B_CD01_99E1_7A33_807A8B8DF8D8.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\A46B0624_88BA_244E_D5F8_F69179E140B3.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\A5FE0302_12EA_C783_F71A_A6589EAFAB22.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\A76F614F_883A_A9E9_F2B0_B385042719CF.gif
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\A77B3321_94AA_7599_D51B_8B39FCC8478A.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\AE3D0B65_55FD_ECC2_E6E2_03B9DAEF92A5.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\AFA57E93_42D4_DF5C_0AC1_E42E7C72C685.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\BFBD407B_AAD8_CC25_2C55_B2B8B907A45D.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\C8BB3FFD_FE08_AA90_B29D_345BA23234C2.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\C9F17022_D361_C02A_DF2F_5472DA9F72C9.gif
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\CC04C709_975C_702D_F92C_3AD5A542BA29.gif
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\CDCB9098_36D2_B921_D992_FD2DB0EFB57D.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\1970\0101\39443.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\2009\1105\39361.html

This carried on and on until the final entries for this section:

c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\2010\0728\42990.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\2010\0728\42993.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\css\c_down.css
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\css\c_down0.css
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\css\c_down1.css
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\hotgame.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\index.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_249_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_249_10.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_249_2.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_249_3.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_249_4.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_249_5.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_249_6.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_249_7.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_249_8.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_249_9.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_251_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_254_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_254_10.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_254_11.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_254_12.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_254_13.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_254_14.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_254_15.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_254_16.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_254_17.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_254_18.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_254_19.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_254_2.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_254_3.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_254_4.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_254_5.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_254_6.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_254_7.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_254_8.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_254_9.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_255_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_255_2.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_255_3.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_255_4.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_256_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_256_2.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_257_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_264_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_265_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_266_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_267_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_271_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_271_2.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_271_3.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_272_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_272_2.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_272_3.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_273_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_273_2.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_273_3.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_274_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_275_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_275_2.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_276_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_276_2.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_276_3.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_277_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_277_2.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_279_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_280_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_281_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_282_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_283_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_284_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_285_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_286_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_287_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_289_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_290_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_291_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_292_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_293_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_294_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_295_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_296_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_297_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_298_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_299_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_300_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_301_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_302_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_303_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_304_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_305_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_306_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_307_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_308_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_317_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_318_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_319_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_320_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_321_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_322_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_322_2.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_323_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_324_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_325_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_326_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_327_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_328_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_329_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_340_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_345_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_349_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_350_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\list_357_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\recommend.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\shurufa\index.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\shurufa\list_324_1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\soft1.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\soft2.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\soft3.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\soft4.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\soft5.html
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\softicon\0.png
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\xml\InstallRequired.xml
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\xml\PhoneRequired.xml
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\cisoft\xml\RecommendRequired.xml
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\client_001.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\client_1309444450.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\client_2MKeHuDuan.JPG
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\client_523.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\client_55289_5.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\client_icon03.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\client_icon04.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\client_km.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\client_OL-2.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\client_WeiBiaoTi-100.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\client_WeiBiaoTi-120.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\client_WeiBiaoTi-3.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\D214AD18_DF3B_2015_7219_F6D5544A554F.gif
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\D283BAF5_0B44_D288_78FB_DB8AB3F3ED28.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\D579F826_2362_2E5B_0FDF_B8D3DAC0A034.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\DA47151C_31DC_F576_8DB5_FA2BB535B8CA.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\DC385101_8BFD_E928_A060_481BAD5A70A7.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\dian.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\domain_url_list.ini
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\E22894EB_76D0_9775_AC55_EA52F1C5707B.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\E6BA4EBE_C3AB_D689_4780_18AD35E2EAD3.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\F2457B6D_2084_0AB8_FF74_CF8F0CAE195B.gif
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\F3A88940_4A85_C807_E4D6_2DC894EFFFA2.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\F54082A7_7F54_AA5D_4DE2_4BB535F9540B.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\F6B9934B_9BDD_F44F_7CB1_87C56F8F7C23.gif
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\F9FD3A44_CF7F_92E4_1785_287DABF8ECEB.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\FB960908_59D3_569A_A0DA_B55ED2EBF90A.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\FF7084FF_3F49_4A4E_B131_3AC79D1FF2C0.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\FFF24EB3_C6FC_0A80_2E44_E42119A3BF26.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\FFFF5084_9665_C927_288F_0A84905CC9DA.swf
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\gametop.gif
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\newgame.gif
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\newmovie.gif
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\p1.gif
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\p2.gif
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\p3.gif
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\p4.gif
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\p5.gif
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\p6.gif
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\p7.gif
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\p8.gif
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\reom.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\rescenter.txt
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\soft.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\software.zip
c:\program files\FlashGet Network\FlashGet 3\dat\stat\softwareinfo\tab.gif
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\[isoHunt] download.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\[isoHunt] Holy Rollers [2010]DvDrip-aXXo[Rated].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\[isoHunt] Holy Rollers 2010 Dvdrip Xvid Max.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\1025578_National.Geographic.Extreme.Universe.4of6.Edge.of.Space.XviD.AC3.[MVGroup.org][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\10364140_Dan.For.Mayor.S01E01.HDTV.XviD-CHGRP.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\10407546_Its.Always.Sunny.in.Philadelphia.S06E01.Mac.Fights.Gay.Marriage.HDTV.XviD-FQM.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\1043921_True.Blood.S03E06.I.Got.a.Right.to.Sing.the.Blues.HDTV.XviD-FQM.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\10538375_Justified.S01E08.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\10554890_The.Border.S03E01.HDTV.XviD-2HD.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\1055703_The.Simpsons.S21E11.HDTV.XviD-XII.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\1106531_Hung.S02E04.Sing.it.Again.Ray.or.Home.Plate.HDTV.XviD-FQM.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\1110406_Chuck.S03E16.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\11161765_[isoHunt] Four Lions DVDRip XviD-NeDiVx[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\11296000_[isoHunt] 2ff0a7498e3a099148f193b9b7f8ae9299f8a05b[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\1184218_True.Blood.S03E05.Trouble.HDTV.XviD-FQM.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\1199250_True.Blood.S03E12.Evil.Is.Going.On.HDTV.XviD-FQM.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\1225828_Discovery.Ch.Into.The.Universe.with.Steven.Hawking.2of3.Time.Travel.PDTV.XviD.[MVGroup.org][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\1236625_Hung.S02E03.HDTV.XviD-NoTV.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\12533578_24.S07E13.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\1254250_Discovery.Ch.Scandals.of.the.Ancient.World.Egypt.XviD.AC3.[MVGroup.org][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\1286171_[SUMOTorrent.com]_When_Youre_Strange_HD_720p_rip_(good)_KA3990272[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\12973046_Underbelly.The.Golden.Mile.S03E07.Full.Force.Gale.HDTV.XviD-BWB.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\1303890_The.Border.S03E08.Dark.Ride.HDTV.XviD-2HD.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\13061796_Breaking.Bad.S03E06.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\13139375_Underbelly.The.Golden.Mile.S03E04.Fall.Guy.HDTV.XviD-HDCP.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\13408453_torrentdownloads net Holy Rollers (2010) Telesync Xvid Maxspeed.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\13571187_torrentdownloads net Holy Rollers (2010)dvdrip (eng) Sirius Share.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\13652859_Joy_Division_Live_(Complete)_1979-1980.4325254.TPB[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\13706406_National.Geographic.Extreme.Universe.6of6.Star.Gates.XviD.AC3.[MVGroup.org][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\1417296_[SUMOTorrent.com]_Holy_Rollers[2010][Unrated_Edition]-DvDrip[Eng]-FXG_KA4158237[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\1443218_=[SUMOTorrent.com]=_Holy_Rollers[2010][Unrated_Edition]-DvDrip[Eng]-FXG_KA4158237.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\1443546_torrentdownloads net Takers 2010 XviD-aAF avi[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\14448890_The.Event.S01E01.720p.HDTV.X264-DIMENSION.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\14503718_Lone.Star.S01E01.HDTV.XviD-LOL.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\1482656_Justified.S01E13.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\14928171_24.7x14.(HDTV-LOL)[VTV][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\15303234_The.Middle.S01E01.HDTV.XviD-2HD.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\15454921_24.S07E01.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\15458953_Underbelly.The.Golden.Mile.S03E09.Dog.Eat.Dog.HDTV.XviD-BWB.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\15670968_24.S07E02.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\16300515_Breaking.Bad.S03E05.HDTV.XviD-FEVER.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\16427890_The.Border.S02E11.HDTV.XviD-2HD.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\16452734_The.Border.S02E12.HDTV.XVID-BAJSKORV.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\16542937_The.Simpsons.S20E04.PDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\16578078_The.Simpsons.S20E06.PDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\1667703_Hung.S02E09.Fat.Off.My.Love.or.Im.the.Allergen.HDTV.XviD-FQM.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\1682218_Sons.of.Anarchy.S03E02.Oiled.HDTV.XviD-FQM.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\16906281_The.Event.S01E01.HDTV.XviD-LOL.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\1716843_True.Blood.S03E08.HDTV.XviD-NoTV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\17264296_Oz.S06.DVDRip.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\1734375_torrentdownloads net True Blood S03e12 Evil Is Going On Hdtv Xvid Fqm[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\1747500_Hung.S02E06.HDTV.XviD-NoTV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\17541828_0D55CAB12D208DA9D276E783F17544D7B1A64310[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\17622109_Brotherhood_-_Season_2_-_NOMAD13666.4495692.TPB[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\17703921_The.Pacific.Pt..X.(HDTV-NoTV)[VTV].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\18220859_Black%20Grape%20-%2022nd%20October%201995,%20Club%20Gino,%20Stockholm,%20Sweden[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\1891625_DBEF78A36BAB11A15FF286A288DF54F4D4DABC87[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\18974171_24.S07E15.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\19474843_Dan.For.Mayor.S01E02.HDTV.XviD-2HD.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\19496140_Dan.For.Mayor.S01E03.HDTV.XviD-2HD.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\1956703_When.You039re.Strange.A.Film.About.the.Doors.(2010).DVDSCR.XviD-MAX[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\19583234_The.Border.S03E02.Broken.HDTV.XviD-2HD.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\19608953_The.Border.S03E03.HDTV.XviD-CHGRP.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\19765031_Burn.Notice.3x15.(HDTV-XII)[VTV][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\19795156_Burn.Notice.3x16.(HDTV-FQM)[VTV][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\1998843_Boardwalk.Empire.S01E01.Boardwalk.Empire.HDTV.XviD-FQM.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\20260000_Joy%20Division%201979-11-02%20Winter%20Gardens,%20Bournemouth,%20UK%20(Dante's%20Inferno)[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\20402640_681A16FFB8F30D735F45D032874E5D82730F2214[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\20700921_24.S07E06.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\20788890_24.S07E07.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\20832078_24.S07E08.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\2091687_Holy.Rollers.2010.R5.XviD.LiNE-ViSiON[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\20963343_Holy.Rollers.2010.PROPER.TS.XviD.LKRG[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\20967656_o{SUMOTorrent.com}o_Carnivale_Season_2_(2005)_incl_NLSubs-DouweDabbert_ST2751231[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\21148843_-{SUMOTorrent.com}-_[xtremespeeds_net]_Carnivale_Season_2_ST2699739[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\21487593_Holy.Rollers.2010.TS.XViD.-.IMAGiNE.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\21723984_The.Simpsons.S21E08.O.Brother.Where.Bart.Thou.HDTV.XviD-FQM.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\21804375_(SUMOTorrent.com)_Holy_Rollers.2010.R5.LiNE.Xvid_1337x-Noir_KA4067366[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\21818515_Holy_Rollers[2010]dVdrip[Eng]-FXG.torrent[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\21860984_The.Simpsons.S20E08.The.Burns.and.the.Bees.PDTV.XviD-FQM.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\21878515_Memphis.Beat.S01E01.HDTV.XviD-BANG.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\21883484_Holy_Rollers.2010.R5.LiNe.XviD{1337x}-Noir[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\21919093_[SUMOTorrent.com]_Holy_Rollers.2010.R5.LiNE.Xvid_1337x-Noir_KA4067366.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\22080000_I_Love_You_Phillip_Morris_(2010)_[R5_LINE]_DivX_H264_-_[PriSM][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\22091703_Dan.for.Mayor.S01E05.HDTV.XviD-2HD.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\22170437_The.Border.S03E09.HDTV.XviD-2HD.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\22605828_Holy.Rollers.2010.TS.XViD.-.IMAGiNE.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\22629406_Holy.Rollers.2010.TS.XViD.-.IMAGiNE.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\22711843_Holy.Rollers.(2010).DvDrip.(Eng).HQ-Uncut-.FXM.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\23342781_Knight_And_Day_TS_XViD_-_IMAGiNE.5669006.TPB[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\23387984_24.S07E16.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\23416046_24.S07E17.Day.7.12.00.A.M.-1.00.A.M.HDTV.XviD-FQM.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\2342125_True.Blood.S03E07.Hitting.the.Ground.HDTV.XviD-FQM.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\23614421_Sons.of.Anarchy.S03E01.So.HDTV.XviD-FQM.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\23993312_Discovery.Ch.Mystery.Investigator.2of8.Ark.of.the.Covenant.PDTV.XviD.MP3.[MVGroup.org].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\24027906_Stone%20Roses%20-%2006.09.1990%20-%20Glasgow%20Green[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\2403281_Sons.of.Anarchy.S02E06.HDTV.XviD-SYS.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\24033734_Chuck.S03E13.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\24425046_F02BB1D460D8FCB0A9D16FE14F4A404C69163BBF[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\2451875_Sons.of.Anarchy.S02E07.HDTV.XviD-SYS.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\24596703_Brotherhood.3x06.(HDTV-aAF)[VTV][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\24628578_Brotherhood.3x07.(HDTV-SYS)[VTV][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\24655187_Brotherhood.3x08.(HDTV-aAF)[VTV][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\24734062_Happy.Town.S01E01.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\2508078_The.Simpsons.S21E07.Rednecks.and.Broomsticks.HDTV.XviD-FQM.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\25206093_Dan.For.Mayor.S01E08.HDTV.XviD-2HD.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\25237718_Dan.For.Mayor.S01E09.HDTV.XviD-2HD.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\25409421_PayPal_Bruteforcer_Hack_v1.0.b1.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\25540312_Justified.S01E01.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\25794828_24.S07E18.HDTV.XviD-NoTV.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\25829015_The.Border.S02E13.HDTV.XviD-MiNT.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\25894953_Dan.For.Mayor.S01E10.HDTV.XviD-2HD.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\25915781_Chuck.S03E13.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\25926718_Justified.S01E09.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\26084390_Breaking.Bad.S03E07.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\26206921_-=[SUMOTorrent.com]=-_Paypal_Bruteforcer_1.3.4_private.rar_PB4251384[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\26400062_Dexter.S04E01.PROPER.720p.HDTV.x264-ORENJi.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\26436484_Dexter.S04E02.Remains.to.Be.Seen.HDTV.XviD-FQM.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\26484765_Dexter.S04E01.720p.HDTV.x264-aAF.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\26531875_Dexter.S04E01.HDTV.XviD-NoTV.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\27289375_[isoHunt] download.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\27325218_[isoHunt] Holy Rollers 2010 Dvdrip Xvid Max.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\27366640_Holy.Rollers.2010.DVDSCR.XViD.-.IMAGiNE.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\27471531_24.S07E19.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\27719750_The.Border.S03E04.HDTV.XviD-CHGRP.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\27739203_The.Pacific.Pt.I.HDTV.XviD-SYS.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\27745937_The.Border.S03E05.HDTV.XviD-2HD.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\27759140_The.Office.6x10.(HDTV-LOL)[VTV][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\27803062_The.Office.6x15.(HDTV-LOL)[VTV][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\27872843_The.Pacific.Pt.II.HDTV.XviD-NoTV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\2808453_Breaking.Bad.S03E13.Full.Measure.HDTV.XviD-FQM.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\28356765_[isoHunt] Taking.Woodstock.DVDRip.XviD-DiAMOND.avi.5193277.TPB[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\2843625_True.Blood.S03E01.HDTV.XviD-NoTV.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\28666312_Dexter_Season_4.5252524.TPB[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\29130343_The.Office.6x16.(HDTV-LOL)[VTV][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\29561109_24.S07E20.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\29594375_24.S07E21.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\2972562_Oz__Season_5_(Divx__TV-rip).3235687.TPB[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\29812281_Justified.S01E02.REPACK.HDTV.XviD-XII.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\29853968_Justified.S01E03.HDTV.XviD-XII.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\29881781_Justified.S01E04.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\29905625_Justified.S01E05.HDTV.XviD-XII.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\30242812_Dexter.S04E03.HDTV.XviD-SYS.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\30260343_Sons.of.Anarchy.S02E01.Albification.HDTV.XviD-FQM.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\30300093_Sons.of.Anarchy.S02E02.Small.Tears.HDTV.XviD-FQM.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\30387953_Dexter.S04E04.HDTV.XviD-SYS.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\3066828_Hung.S02E05.A.Man.A.Plan.or.Thank.You.Jimmy.Carter.HDTV.XviD-FQM.[eztv](1).torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\30673296_The.Good.Guys.1x01.(HDTV-LOL)[VTV][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\30737578_The.Good.Guys.1x02.(HDTV-LOL)[VTV][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\31183359_Underbelly.The.Golden.Mile.S03E01E02.Into.The.Mystic-The.Crucible.HDTV.XviD-BWB.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\316406_Chuck.3x17.(HDTV-FQM)[VTV][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\31737031_Brotherhood.3x01.(HDTV-2HD)[VTV][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\31769296_Brotherhood.3x02.(HDTV-LOL)[VTV][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\31797781_Brotherhood.3x03.(HDTV-LOL)[VTV][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\31973734_Underbelly.S03E11.Beauty.And.The.Beast.HDTV.XviD-FQM.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\32437328_24.S07E22.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\324437_Breaking.Bad.S03E09.Kafkaesque.HDTV.XviD-FQM.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\32448812_The.Office.6x22.(HDTV-2HD)[VTV][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\32469609_24.S07E23.PREAIR.DVDRip.XviD-TOPAZ.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\32475062_Underbelly.The.Golden.Mile.S03E13.Alpha.And.Omega.HDTV.XviD-BWB.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\32499250_The.Office.6x23.(HDTV-LOL)[VTV][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\3258921_Chuck.S04E01.HDTV.XviD-LOL.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\32695421_The.Office.6x18.(HDTV-LOL)[VTV][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\33099187_Justified.S01E06.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\33141828_Justified.S01E07.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\33625718_The.Office.5x15.(HDTV-LOL)[VTV][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\33717250_The.Pacific.Pt.III.HDTV.XviD-NoTV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\33949890_The.Pacific.Pt.IV.HDTV.XviD-NoTV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\34024343_Underbelly.The.Golden.Mile.S03E10.Hurt.On.Duty.HDTV.XviD-BWB.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\34107796_BBC.Timewatch.2010.Atlantis.The.Evidence.PDTV.XviD.MP3.[MVGroup.org][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\34483593_Spiral.(Engrenages).BBC.Series.1.Complete.5209431.TPB[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\34506406_24.S07E24.PREAIR.DVDRip.XviD-TOPAZ.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\346906_Breaking.Bad.S03E10.Fly.HDTV.XviD-FQM.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\34722046_The.Office.6x24.(HDTV-LOL)[VTV][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\35075515_Sons.of.Anarchy.S02E03.HDTV.XviD-SYS.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\355671_Underbelly.The.Golden.Mile.S03E05E06.Saving.Face-Women.In.Uniform.HDTV.XviD-BWB.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\35737140_Breaking.Bad.S03E04.Green.Light.HDTV.XviD-FQM.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\35769015_Underbelly.The.Golden.Mile.S03E03.Kingdom.Come.HDTV.XviD-BWB.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\3626000_Hung.S02E07.The.Middle.East.Is.Complicated.HDTV.XviD-FQM.[eztv](1).torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\3654890_Hung.S02E07.The.Middle.East.Is.Complicated.HDTV.XviD-FQM.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\3684640_The.IT.Crowd.4x01.(PDTV-RiVER)[VTV].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\37250781_Dan.For.Mayor.S01E11.HDTV.XviD-CHGRP.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\373203_Breaking.Bad.S03E11.Abiquiu.HDTV.XviD-FQM.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\3739734_The.IT.Crowd.4x03.(PDTV-RiVER)[VTV].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\37501078_24.S07E03.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\3775781_The.IT.Crowd.4x04.(PDTV-CaRaT)[VTV].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\3803640_The.IT.Crowd.4x05.(PDTV-FoV)[VTV].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\38079312_The.Pacific.Pt.V.HDTV.XviD-NoTV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\38600718_Brotherhood.3x04.(HDTV-LOL)[VTV][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\386593_True.Blood.S03E03.HDTV.XviD-NoTV.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\3874093_The.IT.Crowd.4x06.(PDTV-REPACK-FoV)[VTV].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\396906_Sons.of.Anarchy.S02E04.HDTV.XviD-SYS.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\39738156_The.Pacific.Pt.VI.PROPER.HDTV.XviD-NoTV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\40075015_The.Border.S03E10.HDTV.XviD-2HD.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\40206640_24.S07E04.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\40715843_The.Office.6x19.(HDTV-LOL)[VTV][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\40767015_Ol Dirty Bastard Amsterdam Netherlands 1996_04_22.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\40788046_24.S07E09.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\40788750_Brotherhood_Season_1.4513642.TPB[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\40822593_24.S07E10.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\40877531_The.Border.S03E06.Kiss.and.Cry.WS.XviD-err0001.avi.5163562.TPB[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\40889812_Wu Tang Clan 1993_12_31 New York NY.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\40947000_The.Office.6x20.(HDTV-LOL)[VTV][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\41035843_eminem_oxegen_2010.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\41151984_The.Office.6x22.(HDTV-2HD)[VTV][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\41262359_Charlatans UK - 1991-02-14, San Diego, CA.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\41313156_Charlatans UK 1995-06-25 Glastonbury FM.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\41384843_The.Pacific.Pt.VII.HDTV.XviD-NoTV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\41642000_Breaking.Bad.S03E03.I.F.T.HDTV.XviD-FQM.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\41646296_Brotherhood.3x05.(HDTV-0TV)[VTV][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\416906_Hung.S02E01.Just.the.Tip.HDTV.XviD-FQM.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\417046_Breaking.Bad.S03E08.I.See.You.HDTV.XviD-FQM.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\42235640_24.S07E05.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\42589687_The.Border.S03E07.Bride.Price.HDTV.XviD-2HD.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\429312_Sons.of.Anarchy.S02E05.HDTV.XViD-SAMCRO.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\43154843_Brotherhood_-_Season_3.4927974.TPB[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\43199296_How.Not.To.Live.Your.Life.S02E01.HDTV.XviD-BiA.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\43231953_How.Not.To.Live.Your.Life.2x02.Don.Dates.A.Cougar.HDTV.XviD-FoV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\43262734_How.Not.To.Live.Your.Life.2x03.Don.The.Singer.HDTV.XviD-FoV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\43292546_How.Not.To.Live.Your.Life.2x04.Don.Goes.Gay.HDTV.XviD-FoV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\43329921_How.Not.To.Live.Your.Life.2x05.Don.Gets.Healthy.HDTV.XviD-FoV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\43366656_How.Not.To.Live.Your.Life.2x06.Don.And.The.Wedding.HDTV.XviD-FoV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\43371359_White.Collar.S01E01.Pilot.HDTV.XviD-FQM.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\43393140_White.Collar.S01E02.HDTV.XviD-XII.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\43627437_Burn.Notice.3x14.(HDTV-FQM)[VTV][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\44429453_The.Pacific.Pt.VIII.HDTV.XviD-NoTV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\450515_Justified.S01E11.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\46523578_The.Simpsons.S21E01.Homer.the.Whopper.HDTV.XviD-FQM.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\465687_True.Blood.S03E04.9.Crimes.HDTV.XviD-FQM.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\46583906_The.Simpsons.S21E02.Bart.Gets.A.Z.HDTV.XviD-FQM.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\470796_True.Blood.S03E09.Everything.is.Broken.HDTV.XviD-FQM.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\47622281_Crash.S01E01.READNFO.HDTV.XviD-2HD.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\482687_Chuck.S03E19.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\49139484_The.Pacific.Pt.IX.HDTV.XviD-NoTV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\494593_Boardwalk.Empire.S01E01.720p.HDTV.x264-IMMERSE.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\4946671_24.S07E11.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\49719265_The.Simpsons.S20E21.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\49756234_The.Simpsons.S20E20.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\4980312_24.S07E12.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\501156_Hung.S02E02.HDTV.XviD-NoTV.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\5027906_Underbelly.The.Golden.Mile.S03E08.Crossroads.HDTV.XviD-BWB.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\50637875_The.Simpsons.S20E19.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\50776703_The.Simpsons.S21E06.Pranks.and.Greens.HDTV.XviD-FQM.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\50945453_The.Simpsons.S21E13.HDTV.XviD-2HD.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\51111640_The.Simpsons.S21E14.Postcards.from.the.Wedge.PROPER.HDTV.XviD-FQM.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\5114453_The.Simpsons.S21E23.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\51275046_The.Simpsons.S21E15.HDTV.XviD-XII.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\5302640_The.Simpsons.S21E22.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\5457062_The.Simpsons.S21E21.Moe.Letter.Blues.PROPER.HDTV.XviD-FQM.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\5667828_Treme.S01E01.HDTV.XviD-NoTV.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\568343_Chuck.S03E18.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\5713062_Treme.S01E02.HDTV.XviD-NoTV.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\589703_Memphis.Beat.S01E02.HDTV.XviD-aAF.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\597218_Justified.S01E10.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\610000_Sons.of.Anarchy.S02E08.HDTV.XviD-XII.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\6166765_Trailer_Park_Boys_Season_7.3723537.TPB[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\6244281_IAN%20BROWN%202010-02-16%20%20Palladium-Warszawa-Poland[1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\6252515_Breaking.Bad.S03E12.Half.Measures.HDTV.XviD-FQM.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\6262281_The.Forgotten.2009.S01E01.HDTV.XviD-2HD.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\6284171_IAN BROWN 2010-02-16 Palladium-Warszawa-Poland.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\654859_Sons.of.Anarchy.S02E09.HDTV.XviD-SYS.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\6550765_Sons.of.Anarchy.S02E10.HDTV.XviD-SYS.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\6684187_Sons.of.Anarchy.S02E11.HDTV.XviD-SYS.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\6830937_Holy.Rollers.2010.DVDSCR.XViD.-.IMAGiNE(1).torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\6868421_Holy.Rollers.2010.TS.XviD-ECO.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\692859_True.Blood.S03E02.HDTV.XviD-NoTV.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\700234_Ch4.Our.Drugs.War.3of3.Birth.of.a.Narco.State.PDTV.XviD.MP3.[MVGroup.org].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\7059437_[isoHunt] Holy Rollers [2010]DvDrip-aXXo[Rated].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\748296_Hung.S02E08.Third.Base.or.The.Rash.HDTV.XviD-FQM.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\774171_Hung.S02E10.Even.Steven.or.Luckiest.Kid.in.Detroit.HDTV.XviD-FQM.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\785359_True.Blood.S03E11.Fresh.Blood.HDTV.XviD-FQM.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\803125_Justified.S01E12.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\808156_Underbelly.The.Golden.Mile.S03E12.The.Good.Lieutenant.HDTV.XviD-NANO.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\8132828_National.Geographic.Extreme.Universe.1of6.Is.Anyone.Out.There.XviD.AC3.[MVGroup.org][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\8148625_The.Forgotten.2009.S01E02.HDTV.XviD-2HD.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\816093_Chuck.S03E14.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\839203_Chuck.S03E15.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\8680468_The.Office.6x25.(HDTV-LOL)[VTV][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\8879890_Chase.2010.S01E01.HDTV.XviD-LOL.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\91358656_Oz.S06.DVDRip.XviD-TOPAZ.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\9248765_Dan.for.Mayor.S01E06.HDTV.XviD-2HD.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\9274843_Dan.for.Mayor.S01E07.HDTV.XviD-2HD.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\9509250_Sons.of.Anarchy.S02E12.The.Culling.HDTV.XviD-FQM.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\958484_National.Geographic.Machu.Picchu.Decoded.XviD.AC3.[MVGroup.org][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\966531_True.Blood.S03E10.I.Smell.a.Rat.HDTV.XviD-FQM.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\9856703_Chuck.S03E11.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\9888593_How.Not.to.Live.Your.Life.S01.Season.1.DVDRip.XviD-AFFiNiTY.5144826.TPB.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\9906375_Chuck.S03E12.HDTV.XviD-LOL.[eztv][1].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\Boardwalk.Empire.S01E01.720p.HDTV.x264-IMMERSE.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\Boardwalk.Empire.S01E01.Boardwalk.Empire.HDTV.XviD-FQM.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\Ch4.Our.Drugs.War.3of3.Birth.of.a.Narco.State.PDTV.XviD.MP3.[MVGroup.org](1).torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\Ch4.Our.Drugs.War.3of3.Birth.of.a.Narco.State.PDTV.XviD.MP3.[MVGroup.org].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\Charlatans UK - 1991-02-14, San Diego, CA.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\Charlatans UK 1995-06-25 Glastonbury FM.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\Chase.2010.S01E01.HDTV.XviD-LOL.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\Chuck.S04E01.HDTV.XviD-LOL.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\Discovery.Ch.Mystery.Investigator.2of8.Ark.of.the.Covenant.PDTV.XviD.MP3.[MVGroup.org].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\eminem_oxegen_2010.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\Holy.Rollers.2010.DVDSCR.XViD.-.IMAGiNE(1).torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\Holy.Rollers.2010.DVDSCR.XViD.-.IMAGiNE.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\Holy.Rollers.2010.TS.XviD-ECO.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\How.Not.To.Live.Your.Life.2x02.Don.Dates.A.Cougar.HDTV.XviD-FoV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\How.Not.To.Live.Your.Life.2x03.Don.The.Singer.HDTV.XviD-FoV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\How.Not.To.Live.Your.Life.2x04.Don.Goes.Gay.HDTV.XviD-FoV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\How.Not.To.Live.Your.Life.2x05.Don.Gets.Healthy.HDTV.XviD-FoV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\How.Not.To.Live.Your.Life.2x06.Don.And.The.Wedding.HDTV.XviD-FoV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\How.Not.to.Live.Your.Life.S01.Season.1.DVDRip.XviD-AFFiNiTY.5144826.TPB.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\How.Not.To.Live.Your.Life.S02E01.HDTV.XviD-BiA.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\Hung.S02E05.A.Man.A.Plan.or.Thank.You.Jimmy.Carter.HDTV.XviD-FQM.[eztv](1).torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\Hung.S02E05.A.Man.A.Plan.or.Thank.You.Jimmy.Carter.HDTV.XviD-FQM.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\Hung.S02E06.HDTV.XviD-NoTV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\Hung.S02E07.The.Middle.East.Is.Complicated.HDTV.XviD-FQM.[eztv](1).torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\Hung.S02E07.The.Middle.East.Is.Complicated.HDTV.XviD-FQM.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\Hung.S02E08.Third.Base.or.The.Rash.HDTV.XviD-FQM.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\Hung.S02E09.Fat.Off.My.Love.or.Im.the.Allergen.HDTV.XviD-FQM.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\Hung.S02E10.Even.Steven.or.Luckiest.Kid.in.Detroit.HDTV.XviD-FQM.[eztv](1).torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\Hung.S02E10.Even.Steven.or.Luckiest.Kid.in.Detroit.HDTV.XviD-FQM.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\Its.Always.Sunny.in.Philadelphia.S06E01.Mac.Fights.Gay.Marriage.HDTV.XviD-FQM.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\Lone.Star.S01E01.HDTV.XviD-LOL.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\Ol Dirty Bastard Amsterdam Netherlands 1996_04_22.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\Sons.of.Anarchy.S03E01.So.HDTV.XviD-FQM.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\Sons.of.Anarchy.S03E02.Oiled.HDTV.XviD-FQM.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\The.Event.S01E01.720p.HDTV.X264-DIMENSION.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\The.Event.S01E01.HDTV.XviD-LOL.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\The.IT.Crowd.4x01.(PDTV-RiVER)[VTV].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\The.IT.Crowd.4x03.(PDTV-RiVER)[VTV].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\The.IT.Crowd.4x04.(PDTV-CaRaT)[VTV].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\The.IT.Crowd.4x05.(PDTV-FoV)[VTV].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\The.IT.Crowd.4x06.(PDTV-REPACK-FoV)[VTV].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\The.Pacific.Pt..X.(HDTV-NoTV)[VTV].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\The.Pacific.Pt.I.HDTV.XviD-SYS.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\The.Pacific.Pt.II.HDTV.XviD-NoTV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\The.Pacific.Pt.III.HDTV.XviD-NoTV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\The.Pacific.Pt.IV.HDTV.XviD-NoTV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\The.Pacific.Pt.IX.HDTV.XviD-NoTV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\The.Pacific.Pt.V.HDTV.XviD-NoTV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\The.Pacific.Pt.VI.PROPER.HDTV.XviD-NoTV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\The.Pacific.Pt.VII.HDTV.XviD-NoTV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\The.Pacific.Pt.VIII.HDTV.XviD-NoTV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\True.Blood.S03E07.Hitting.the.Ground.HDTV.XviD-FQM.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\True.Blood.S03E08.HDTV.XviD-NoTV.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\True.Blood.S03E09.Everything.is.Broken.HDTV.XviD-FQM.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\True.Blood.S03E10.I.Smell.a.Rat.HDTV.XviD-FQM.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\True.Blood.S03E11.Fresh.Blood.HDTV.XviD-FQM.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\True.Blood.S03E12.Evil.Is.Going.On.HDTV.XviD-FQM.[eztv].torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\True.Blood.S03E12.Evil.Is.Going.On.HDTV.XviD_Repack.torrent
c:\program files\FlashGet Network\FlashGet 3\dat\torrent\Wu Tang Clan 1993_12_31 New York NY.torrent
c:\program files\FlashGet Network\FlashGet 3\dbghelp.dll
c:\program files\FlashGet Network\FlashGet 3\fg.ico
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\default.htm
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\FGResDetector.conf
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\images\banner.gif
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\images\bullet.gif
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\images\close.gif
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\images\closelabel.gif
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\images\download-icon.gif
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\images\explorer.gif
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\images\ftp.gif
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\images\image.gif
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\images\introTextBg.gif
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\images\loading.gif
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\images\nextlabel.gif
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\images\prevlabel.gif
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\images\software.gif
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\images\vod.gif
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\FGResDetector.exe
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\image\about.png
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\image\ftplist_tree_icon.png
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\image\option_icon.png
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\image\quickop_hide.png
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\image\quickop_show.png
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\image\statusbar_bk.png
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\image\tasktab_close.png
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\image\toolbar_back.png
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\image\toolbar_bk.png
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\image\toolbar_close.png
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\image\toolbar_forward.png
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\image\toolbar_refresh.png
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\lang\l.eng.xml
c:\program files\FlashGet Network\FlashGet 3\FGSoftware.exe
c:\program files\FlashGet Network\FlashGet 3\Flashget3.exe
c:\program files\FlashGet Network\FlashGet 3\FlashGet3.xpi
c:\program files\FlashGet Network\FlashGet 3\FlashGetBHO3.dll
c:\program files\FlashGet Network\FlashGet 3\FlashGetHook.dll
c:\program files\FlashGet Network\FlashGet 3\fnsArchive.dll
c:\program files\FlashGet Network\FlashGet 3\fnsDirectuix.dll
c:\program files\FlashGet Network\FlashGet 3\fnsLanguage.dll
c:\program files\FlashGet Network\FlashGet 3\fnslanguage_en.dll
c:\program files\FlashGet Network\FlashGet 3\fnsScheduler.dll
c:\program files\FlashGet Network\FlashGet 3\fnsSecurity.dll
c:\program files\FlashGet Network\FlashGet 3\fnsSkinX.dll
c:\program files\FlashGet Network\FlashGet 3\fnsStatistics.dll
c:\program files\FlashGet Network\FlashGet 3\game.ico
c:\program files\FlashGet Network\FlashGet 3\gb2312-unicode.dic
c:\program files\FlashGet Network\FlashGet 3\gdiplus.dll
c:\program files\FlashGet Network\FlashGet 3\GetAllUrl.htm
c:\program files\FlashGet Network\FlashGet 3\GetUrl.htm
c:\program files\FlashGet Network\FlashGet 3\GoogleToolbarInstaller_download_signed.exe
c:\program files\FlashGet Network\FlashGet 3\libem.dll
c:\program files\FlashGet Network\FlashGet 3\license.txt
c:\program files\FlashGet Network\FlashGet 3\lst_tz.bin
c:\program files\FlashGet Network\FlashGet 3\P2PCfg.ini
c:\program files\FlashGet Network\FlashGet 3\P2PCore.dll
c:\program files\FlashGet Network\FlashGet 3\P2SCore.dll
c:\program files\FlashGet Network\FlashGet 3\perf.ini
c:\program files\FlashGet Network\FlashGet 3\pncrt.dll
c:\program files\FlashGet Network\FlashGet 3\pstat.dat
c:\program files\FlashGet Network\FlashGet 3\pup.dat
c:\program files\FlashGet Network\FlashGet 3\RdOldDb.dll
c:\program files\FlashGet Network\FlashGet 3\RealMediaSplitter.ax
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\BarSet.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\bmsgbox_clock.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\bmsgbox_disk.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\btn_check.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\btn_normal.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\btn_radio.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\desktoplink.ico
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\login_line.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\menu_icon.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\option_line.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\option_page_line.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\skin.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\SuspendLogo.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\SuspendNoLogo.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\toolbar_backgrand.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\toolbar_cancle.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\toolbar_catgroy.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\toolbar_group.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\toolbar_new.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\toolbar_open.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\toolbar_option.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\toolbar_pause.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\toolbar_recly.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\toolbar_start.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\toolbarbutton_left.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\toolbarbutton_middle.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\toolbarbutton_right.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\top_logotitle.gif
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\torrent.ico
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\userinfo_head.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\VistaStyleListItems.bmp
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\preview.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\skin.xml
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\sound\notify.wav
c:\program files\FlashGet Network\FlashGet 3\skin\international\Gray\BarSet.png
c:\program files\FlashGet Network\FlashGet 3\storage.dll
c:\program files\FlashGet Network\FlashGet 3\SysOptimize.exe
c:\program files\FlashGet Network\FlashGet 3\uninst.exe
c:\program files\FlashGet Network\FlashGet 3\VodCore.dll
c:\program files\FlashGet Network\FlashGet 3\zlib.dll
c:\windows\system32\office.exe
c:\windows\system32\secushr.dat
c:\windows\system32\secustat.dat
----- BITS: Possible infected sites -----

hxxp://sync.mobilebroadband.o2.co.uk:8080
c:\windows\system32\winlogon.exe . . . is infected!!
c:\windows\explorer.exe . . . is infected!!
.
((((((((((((((((((((((((( Files Created from 2010-08-23 to 2010-09-23 )))))))))))))))))))))))))))))))
.
2010-09-22 16:38 . 2010-09-22 16:38 109128 ----a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2010-09-21 17:37 . 2010-09-21 17:37 -------- d-----w- c:\documents and settings\me\Application Data\VDownloader
2010-09-21 17:37 . 2010-09-21 17:37 -------- d-----w- c:\program files\VDownloader
2010-09-20 22:41 . 2010-09-20 22:42 -------- d-----w- c:\documents and settings\me\Application Data\DivX
2010-09-20 22:38 . 2010-09-21 15:15 -------- d-----w- c:\program files\DivX
2010-09-20 22:37 . 2010-09-20 23:03 -------- d-----w- c:\documents and settings\All Users\Application Data\DivX
2010-09-15 17:37 . 2010-09-15 17:37 -------- d-----w- c:\program files\Trend Micro
2010-09-15 15:31 . 2010-09-15 17:36 -------- d-----w- c:\program files\Eusing Free Registry Cleaner
2010-09-11 16:06 . 2010-09-11 16:06 -------- d-----w- c:\documents and settings\me\Local Settings\Application Data\Sony
2010-09-11 16:03 . 2010-09-11 16:03 -------- d-----w- c:\documents and settings\All Users\Application Data\Sony
2010-09-11 16:02 . 2010-09-11 16:03 -------- d-----w- c:\program files\Sony
2010-09-11 16:01 . 2010-09-11 16:06 -------- d-----w- c:\documents and settings\me\Application Data\Sony
2010-09-09 21:46 . 2010-09-09 21:46 -------- d-----w- c:\windows\system32\tempdir
2010-09-09 21:46 . 2009-03-18 13:54 1103360 ----a-w- c:\windows\system32\cidfont.dll
2010-09-09 21:46 . 2005-05-31 02:25 1503232 ----a-w- c:\windows\system32\ptj.exe
2010-09-09 21:46 . 2007-06-27 15:15 4369408 ----a-w- c:\windows\system32\pdftk.exe
2010-09-09 21:46 . 2010-09-09 22:57 -------- d-----w- c:\program files\office Convert Pdf to Jpg Jpeg Tiff Free
2010-09-09 21:24 . 2010-09-09 21:30 -------- d-----w- c:\program files\PDF To Image Converter
2010-09-09 16:29 . 2010-09-09 17:36 -------- d-----w- c:\documents and settings\me\Application Data\Inscriptio
2010-09-09 16:22 . 2010-09-09 16:23 -------- d-----w- c:\program files\Burn CD Now
2010-09-02 17:00 . 2010-09-02 17:00 -------- d-----w- c:\program files\iPod
2010-09-02 17:00 . 2010-09-02 17:01 -------- d-----w- c:\program files\iTunes
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-20 20:53 . 2009-11-02 23:56 -------- d-----w- c:\documents and settings\All Users\Application Data\Norton
2010-09-17 03:54 . 2009-12-22 21:46 122 ----a-w- c:\documents and settings\me\Application Data\wklnhst.dat
2010-09-17 01:38 . 2010-08-20 23:10 -------- d-----w- c:\documents and settings\me\Application Data\vlc
2010-09-16 02:22 . 2009-11-03 00:01 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2010-09-09 19:24 . 2010-05-24 21:02 -------- d-----w- c:\program files\NCH Swift Sound
2010-09-08 10:50 . 2009-11-03 00:11 -------- d-----w- c:\program files\Microsoft Silverlight
2010-09-07 15:12 . 2010-08-15 11:30 38848 ----a-w- c:\windows\avastSS.scr
2010-09-07 15:11 . 2009-12-22 00:16 167592 ----a-w- c:\windows\system32\aswBoot.exe
2010-09-07 14:52 . 2009-12-22 00:16 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-09-07 14:52 . 2009-12-22 00:16 165584 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-09-07 14:47 . 2009-12-22 00:16 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-09-07 14:47 . 2009-12-22 00:16 100176 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-09-07 14:47 . 2009-12-22 00:16 94544 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-09-07 14:47 . 2009-12-22 00:16 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-09-07 14:46 . 2009-12-22 00:16 28880 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2010-09-07 01:20 . 2010-04-10 19:01 -------- d-----w- c:\documents and settings\me\Application Data\dvdcss
2010-09-04 17:52 . 2009-12-10 12:47 -------- d-----w- c:\documents and settings\All Users\Application Data\Dell
2010-09-02 17:00 . 2010-07-08 21:23 -------- d-----w- c:\program files\Common Files\Apple
2010-08-19 23:49 . 2010-05-15 22:59 -------- d-----w- c:\program files\PCFriendly
2010-08-19 16:27 . 2010-08-19 16:25 -------- d-----w- c:\program files\QuickTime
2010-08-18 19:00 . 2010-08-18 19:00 -------- d-----w- c:\program files\Common Files\Java
2010-08-18 18:57 . 2010-04-07 20:19 -------- d-----w- c:\program files\Java
2010-08-17 13:17 . 2008-04-25 20:33 58880 ----a-w- c:\windows\system32\spoolsv.exe
2010-08-11 19:21 . 2009-11-02 23:55 -------- d-----w- c:\program files\Microsoft Works
2010-07-29 20:23 . 2010-05-24 21:02 -------- d-----w- c:\documents and settings\All Users\Application Data\NCH Swift Sound
2010-07-29 19:36 . 2010-04-03 12:06 -------- d-----w- c:\documents and settings\me\Application Data\FlashgetSetup
2010-07-22 15:49 . 2008-04-25 20:33 590848 ----a-w- c:\windows\system32\rpcrt4.dll
2010-07-22 05:57 . 2009-11-02 23:44 5120 ----a-w- c:\windows\system32\xpsp4res.dll
2010-07-17 04:00 . 2010-04-26 14:10 423656 ----a-w- c:\windows\system32\deployJava1.dll
2010-06-30 12:31 . 2008-04-25 20:33 149504 ----a-w- c:\windows\system32\schannel.dll
2009-11-02 23:59 . 2009-11-02 23:59 75 --sh--r- c:\windows\CT4CET.bin
.
------- Sigcheck -------

[7] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[7] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 . 4AFB3B0919649F95C1964AA1FAD27D73 . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
[-] 2008-04-14 . E19C45BCC472139C279C6E0BFE303511 . 507904 . . [5.1.2600.5512] . . c:\windows\system32\winlogon.exe
[-] 2008-04-14 . D1697857D70DE75D05082538FE042DFD . 1033728 . . [6.00.2900.5512] . . c:\windows\explorer.exe
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-12-09 39408]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-03-15 1434920]
"RTHDCPL"="RTHDCPL.EXE" [2009-03-15 17529856]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-02-15 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-02-15 166424]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-02-15 137752]
"OA012Mon"="c:\windows\OA012Mon.exe" [2009-05-11 24576]
"Broadcom Wireless Manager UI"="c:\windows\system32\WLTRAY.exe" [2009-01-06 2289664]
"WSED"="c:\program files\WSED\WSED.exe" [2009-05-27 247080]
"BTMeter"="c:\program files\Battery Meter\BTMeter.exe" [2009-07-22 623984]
"CapsLKNotify"="c:\program files\CapsLKNotify\CapsLKNotify.exe" [2009-02-23 320808]
"dellsupportcenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2009-06-03 206064]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-09-07 2838912]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2010-06-17 40368]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]
"O2DA"="c:\program files\O2 Assistant\bin\sprtcmd.exe" [2010-04-23 206120]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2010-08-10 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-09-01 421160]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2008-5-27 123904]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-25 304128]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\GoToAssist]
2009-11-02 23:55 10536 ----a-w- c:\program files\Citrix\GoToAssist\514\g2awinlogon.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"RequireSignedAppInit_DLLs"=1 (0x1)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Dell Video Chat\\DellVideoChat.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfcCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Documents and Settings\\me\\Application Data\\FlashgetSetup\\fgmini.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=

R0 EMSC;COMPAL Embedded System Control;c:\windows\system32\drivers\EMSC.sys [03/11/2009 00:51 14248]
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [03/04/2010 17:54 64288]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [22/12/2009 01:16 165584]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [22/12/2009 01:16 17744]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [04/02/2010 16:52 1352832]
R2 sprtsvc_O2DA;SupportSoft Sprocket Service (O2DA);c:\program files\O2 Assistant\bin\sprtsvc.exe [23/04/2010 15:04 206120]
R2 tgsrvc_O2DA;SupportSoft Repair Service (O2DA);c:\program files\O2 Assistant\bin\tgsrvc.exe [23/04/2010 15:04 185640]
R3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\drivers\CtClsFlt.sys [03/11/2009 00:57 143840]
R3 OA012Afx;Provides a software interface to control audio effects of OA012 camera.;c:\windows\system32\drivers\OA012Afx.sys [03/11/2009 02:18 134144]
R3 OA012Ufd;Creative Camera OA012 Upper Filter Driver;c:\windows\system32\drivers\OA012Ufd.sys [03/11/2009 02:18 133632]
R3 OA012Vid;Creative Camera OA012 Function Driver;c:\windows\system32\drivers\OA012Vid.sys [03/11/2009 02:18 272256]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\drivers\RtsUStor.sys [03/11/2009 02:18 162816]
S2 Norton Internet Security;Norton Internet Security;"c:\program files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe" /s "Norton Internet Security" /m "c:\program files\Norton Internet Security\Engine\16.0.0.125\diMaster.dll" /prefetch:1 --> c:\program files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe [?]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [03/11/2009 02:17 1684736]
S3 hwusbfake;Huawei DataCard USB Fake;c:\windows\system32\drivers\ewusbfake.sys [22/01/2010 23:52 102656]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
.
Contents of the 'Scheduled Tasks' folder
2010-09-22 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2010-02-04 16:54]
2010-09-09 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 10:50]
2010-09-17 c:\windows\Tasks\switchShakeIcon.job
- c:\program files\NCH Swift Sound\Switch\switch.exe [2010-05-24 21:02]
.
------- Supplementary Scan -------
.
uStart Page = https://login.yahoo.com/config/login_verify2?&.src=ym
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Download all by FlashGet3 - c:\documents and settings\me\Application Data\FlashGetBHO\GetAllUrl.htm
IE: Download by FlashGet3 - c:\documents and settings\me\Application Data\FlashGetBHO\GetUrl.htm
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
Trusted Zone: kuaiche.com\software
Trusted Zone: o2.co.uk\*.broadband
.
- - - - ORPHANS REMOVED - - - -
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
WebBrowser-{4F11ACBB-393F-4C86-A214-FF3D0D155CC3} - (no file)
HKCU-Run-FlashGet 3 - c:\program files\FlashGet Network\FlashGet 3\FlashGet3.exe
AddRemove-eBay Icon - c:\documents and settings\me\Application Data\Desktopicon\uninst.exe
AddRemove-FlashGet 3.5 - c:\program files\FlashGet Network\FlashGet 3\uninst.exe

**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-09-23 14:47
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successlly
hidden files: 0

**************************************************************************
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Norton Internet Security]
"ImagePath"="\"c:\program files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe\" /s \"Norton Internet Security\" /m \"c:\program files\Norton Internet Security\Engine\16.0.0.125\diMaster.dll\" /prefetch:1"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe,-101"
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe"
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- DLLs Loaded Under Running Processes ---------------------
- - - - - - - > 'winlogon.exe'(872)
c:\program files\Citrix\GoToAssist\514\G2AWinLogon.dll
c:\windows\System32\BCMLogon.dll
- - - - - - - > 'explorer.exe'(1932)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.------------------------ Other Running Processes ------------------------
.c:\windows\System32\WLTRYSVC.EXE
c:\windows\System32\bcmwltry.exe
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\Nero\Nero BackItUp 4\NBService.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\program files\Dell Support Center\bin\sprtsvc.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\igfxsrvc.exe
c:\windows\system32\SearchIndexer.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\wbem\unsecapp.exe
c:\program files\iPod\bin\iPodService.exe
c:\windows\system32\SearchProtocolHost.exe
c:\program files\Lavasoft\Ad-Aware\AAWTray.exe
c:\windows\system32\SearchFilterHost.exe
.
**************************************************************************
.Completion time: 2010-09-23 15:01:52 - machine was rebooted
ComboFix-quarantined-files.txt 2010-09-23 13:59

Pre-Run: 39,313,817,600 bytes free
Post-Run: 41,166,860,288 bytes free
- - End Of File - - A99EFDA473E01630501EE6770DC1DED6
biggt1976
Regular Member
 
Posts: 17
Joined: September 16th, 2010, 6:01 pm

Re: explorer.exe and winlogon.exe infection

Unread postby deltalima » September 23rd, 2010, 3:16 pm

Hi biggt1976,

And the bulk of the log is taken up by the .torrent and .torrent.filelist as above. Do you need to see all of these entries or is it ok for me to post you the rest of the log after these?


No, what you posted gives me all the information that I need.

Please go here and click download to download the Windows XP Service Pack 3 Network Installation Package and save the file.

If any of these instructions are unclear please ask before continuing.

  • Use Windows Explorer to create a folder called sp3 in the root of drive C:
  • Move the service pack install file into that folder
  • Open a command prompt widow (start - run - cmd)
  • At the command prompt
  • Type C: and press enter
  • Type cd \sp3 and press enter
  • Type WindowsXP-KB936929-SP3-x86-ENU.exe -x: c:\sp3 and press enter
  • This should now extract the service pack files into that folder, if it tries to do anything else cancel and let me know.
  • Type cd i386 and press enter
  • Type expand winlogon.ex_ winlogon.exe and press enter
  • Type expand explorer.ex_ explorer.exe and press enter
  • Type exit and press enter to close the command console
  • Create a folder called MRU in the root of drive C:
  • Now use Windows Explorer navigate to the folder c:\sp3\i386 and locate the file winlogon.exe Right click and select copy
  • Paste the file into the folder C:\MRU
  • Now use Windows Explorer navigate to the folder c:\sp3\i386 and locate the file explorer.exe Right click and select copy
  • Paste the file into the folder C:\MRU

Now navigate to the folder C:\MRU

There should be two files, please right click on each and click on properties then version and let me know the File version for each of the file names.
User avatar
deltalima
Admin/Teacher
Admin/Teacher
 
Posts: 7614
Joined: February 28th, 2009, 4:38 pm
Location: UK

Re: explorer.exe and winlogon.exe infection

Unread postby biggt1976 » September 24th, 2010, 8:33 am

hi - I cannot access the |Windows Explorer. When i go to Start > All Programs > Accessories > Windows Explorer i get a message up saying:

'Windows cannot accesss the specified device, path or file. You may not have the appropriate permissions to access the item.'

Can I just go to start > My Computer > OS (C:) then right click New Folder ?

Let me know please and i'll do it straight away.

Thanks
biggt1976
Regular Member
 
Posts: 17
Joined: September 16th, 2010, 6:01 pm

Re: explorer.exe and winlogon.exe infection

Unread postby deltalima » September 24th, 2010, 8:35 am

Can I just go to start > My Computer > OS (C:) then right click New Folder ?


Yes that should work.
User avatar
deltalima
Admin/Teacher
Admin/Teacher
 
Posts: 7614
Joined: February 28th, 2009, 4:38 pm
Location: UK

Re: explorer.exe and winlogon.exe infection

Unread postby biggt1976 » September 24th, 2010, 9:55 am

hi

when i typed expand winlogon.ex_winlogon.exe i got a message saying:

no destination specified for winlogon.ex_winlogon.exe

And I got the same messge for the expand explorer.ex_explorer.exe

Is this normal? Let me know please. I havent typed exit yet as I didnt know if this was ok.

Thanks
biggt1976
Regular Member
 
Posts: 17
Joined: September 16th, 2010, 6:01 pm

Re: explorer.exe and winlogon.exe infection

Unread postby deltalima » September 24th, 2010, 11:46 am

biggt1976 wrote:when i typed expand winlogon.ex_winlogon.exe i got a message saying:

no destination specified for winlogon.ex_winlogon.exe


Hi biggt1976,

There needs to be a space after the _ charachter, that is

expand winlogon.ex_ <SPACE> winlogon.exe

The same for the explorer line.
User avatar
deltalima
Admin/Teacher
Admin/Teacher
 
Posts: 7614
Joined: February 28th, 2009, 4:38 pm
Location: UK

Re: explorer.exe and winlogon.exe infection

Unread postby biggt1976 » September 24th, 2010, 12:23 pm

Thanks

in the MRU folder, the winlogon.exe file is File version 5.1.2600.5512. and explorer.exe is file version 6.0.2900.5512
biggt1976
Regular Member
 
Posts: 17
Joined: September 16th, 2010, 6:01 pm

Re: explorer.exe and winlogon.exe infection

Unread postby deltalima » September 24th, 2010, 1:34 pm

Hi biggt1976,

the winlogon.exe file is File version 5.1.2600.5512. and explorer.exe is file version 6.0.2900.5512


Excellent!

Now you need to show all files and folders

  • Click Start.
  • Open My Computer.
  • Select the Tools menu and click Folder Options.
  • Select the View Tab.
  • Under the Hidden files and folders heading select Show hidden files and folders.
  • Uncheck Hide file extensions for known file types* Uncheck the Hide protected operating system files (recommended) option.
  • Click Apply to confirm.
  • Click OK

Now copy and paste both winlogon.exe and explorer.exe from the folder C:\MRU into the folder

C:\Windows\system32\dllcache

Now run Combofix again and post the log in your next reply.
User avatar
deltalima
Admin/Teacher
Admin/Teacher
 
Posts: 7614
Joined: February 28th, 2009, 4:38 pm
Location: UK

Re: explorer.exe and winlogon.exe infection

Unread postby biggt1976 » September 24th, 2010, 2:24 pm

hi

When i go to uncheck the box for Hide protected operating system files (recommended) I get a warning message up saying:

You have chosen to display protected operating system files (files labelled System and Hidden) in Windows Explorer.
These files are required to start and run windows. deleting or editing them can make your computer unoperable.
Are you sure you want to display these files?
Yes No

what shall i do?
biggt1976
Regular Member
 
Posts: 17
Joined: September 16th, 2010, 6:01 pm

Re: explorer.exe and winlogon.exe infection

Unread postby deltalima » September 24th, 2010, 2:26 pm

Choose YES - we need to make the folder visible while we copy the two files - it will be returned to normal soon after.
User avatar
deltalima
Admin/Teacher
Admin/Teacher
 
Posts: 7614
Joined: February 28th, 2009, 4:38 pm
Location: UK
Advertisement
Register to Remove

Next

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 132 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware