hijackthis log

[maxwellp]

Hi there, I have a toshiba laptop running windows vista, I have a zlob trojan virus. i have used all the usual free removal tools such as avg and spybot search and destroy. I did a system restore also. But i keep getting a popup message usually in internet explorer that says my system is infected with a zlob trojan and click here to get rid of it. the pop up happens quite frequently.
and i get the message on startup error loading c:\windows\system32\fccbARlj.dll
Hope you can help
here is the hijackthis log




Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:48:30, on 04/04/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
C:\Program Files\Common Files\AOL\1173663549\ee\aolsoftware.exe
C:\Program Files\Synaptics\SynTP\SynToshiba.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Real\RealPlayer\realplay.exe
C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe
C:\Program Files\TOSHIBA\Utilities\VolControl.exe
C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\system32\conime.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\maxwell\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://login.live.com/login.srf?id=2&sv ... 7&_lang=EN
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll
O2 - BHO: (no name) - {20c8954b-1eb8-4084-b8af-c5924c94dd7e} - C:\Windows\system32\ljjhHBuS.dll (file missing)
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Media Codec - {50b051ee-8ef3-4d58-828d-74f0d1ffe4aa} - C:\Windows\kiasys.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6f74-2d53-2644-206d7942484f} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O2 - BHO: Min stor proj. - {FFFFFFFF-D71D-41e4-A699-F506DBD097F0} - msindc.dll (file missing)
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1173663549\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
O4 - HKLM\..\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup
O4 - HKLM\..\Run: [TOSHIBA Volume Indicator] "C:\Program Files\Toshiba\Utilities\VolControl.exe"
O4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [CM106Sound] RunDll32 CM106.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [NSLauncher] C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe /startup
O4 - HKLM\..\Run: [MSServer] rundll32.exe C:\Windows\system32\fccbARlj.dll,#1
O4 - HKCU\..\Run: [TOSCDSPD] TOSCDSPD.EXE
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: eBay - {C08CAF1D-C0A3-40D5-9970-06D067EAC017} - http://www.webtip.ch/cgi-bin/toshiba/tracker_url.pl?EN (file missing)
O9 - Extra button: (no name) - {dfb852a3-47f8-48c4-a200-58cab36fd2a2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {dfb852a3-47f8-48c4-a200-58cab36fd2a2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !saswinlogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: SBSD Security Center Service (sbsdwscservice) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 10864 bytes

[Scotty]

Hi! Welcome to the MWR forums.
My name is Scotty. I would be glad to take a look at your log and help you with solving any malware problems. HijackThis logs can take a while to research.

Please be patient as my posts to you have to be checked before I reply, so they make take longer.

Please make a uninstall list using HijackThis
To access the Uninstall Manager you would do the following:

1. Start HijackThis
2. Click on the Config button
3. Click on the Misc Tools button
4. Click on the Open Uninstall Manager button.
5. Click on the Save list... button and specify where you would like to save this file. When you press Save button a notepad will open with the contents of that file. Simply copy and paste the contents of that notepad here in a reply.

[maxwellp]

Hi there,
thanks for thr reply, nice one,
Here is that log

5.1CH USB Audio
Adobe Flash Player 9 ActiveX
Adobe Flash Player ActiveX
Adobe Illustrator CS
Adobe Photoshop CS
Adobe Reader 7.0.9
Adobe SVG Viewer 3.0
AppCore
Apple Mobile Device Support
Apple Software Update
AV
AVerDVD EZMaker USB 2.0 Driver
BroadJump Client Foundation
Cakewalk VST Adapter 4.3.2
Cakewalk.Pro.Audio.9.03-TcC
Canon iP1800 series
Canon iP1800 series User Registration
Canon Utilities Easy-LayoutPrint
Canon Utilities Easy-PhotoPrint
Canon Utilities Easy-PrintToolBox
ccCommon
CD/DVD Drive Acoustic Silencer
Conexant HD Audio
DreamStation DXi2
DVD EZMaker USB Plus Driver
DVD MovieFactory for TOSHIBA
EPSON TWAIN 5
FruityLoops Studio Producer Edition v4.01
HijackThis 2.0.2
Intel(R) Graphics Media Accelerator Driver
iTunes
Java(TM) SE Runtime Environment 6
LimeWire 4.14.8
LiveUpdate 3.2 (Symantec Corporation)
LiveUpdate Notice (Symantec Corporation)
Macromedia Dreamweaver MX
Macromedia Extension Manager
Microsoft Digital Image Starter Edition 2006
Microsoft Office Professional Edition 2003
Microsoft Office Standard Edition 2003
Microsoft Visual C++ 2005 Redistributable
Microsoft Works
Mozilla Firefox (2.0.0.13)
MSRedist
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB941833)
Nokia Connectivity Cable Driver
Nokia Lifeblog 2.5
Nokia NSeries Application Installer
Nokia NSeries Content Copier
Nokia NSeries Multimedia Player
Nokia NSeries One Touch Access
Nokia NSeries System Utilities
Nokia Software Launcher
Nokia Software Updater
Norton AntiVirus
Norton Confidential Browser Component
Norton Confidential Web Protection Component
Norton Internet Security
Norton Internet Security
Norton Internet Security
Norton Internet Security
Norton Internet Security
Norton Internet Security (Symantec Corporation)
Norton Protection Center
NVIDIA Drivers
PC Connectivity Solution
QuickTime
RealPlayer Basic
RTC Client API v1.2
Skype™ 3.6
Soft Data Fax Modem with SmartCP
Sony Sound Forge 7.0
SPBBC 32bit
Spybot - Search & Destroy
Steinberg Cubasis VST 3
SUPERAntiSpyware Professional
Synaptics Pointing Device Driver
Texas Instruments PCIxx21/x515/xx12 drivers.
TOSHIBA Assist
TOSHIBA ConfigFree
TOSHIBA Disc Creator
TOSHIBA Extended Tiles for Windows Mobility Center
TOSHIBA Hardware Setup
TOSHIBA Manuals
Toshiba Online Product Information
TOSHIBA SD Memory Utilities
TOSHIBA Supervisor Password
TOSHIBA Value Added Package
TOSHIBA Volume Indicator
Viewpoint Media Player
Windows Media Encoder 9 Series
Windows Media Encoder 9 Series
WinDVD for TOSHIBA
WinRAR archiver

[Scotty]

Hi

Please download SmitfraudFix (by S!ri).

• Right-click on SmitfraudFix.exe and click Run as administrator. A screen will pop up. Select Option 1 (Search) by typing 1 and hit Enter. A text file will appear, which will list the infected files. Save it to a convenient location.
• The log will also be saved here: C:\rapport.txt

Note: process.exe is detected by some Anti-Virus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.

[maxwellp]

hi here is the log of that scan
SmitFraudFix v2.309

Scan done at 15:41:01.06, 07/04/2008
Run from C:\Program Files\Mozilla Firefox\SmitfraudFix
OS: Microsoft Windows [Version 6.0.6000] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
C:\Program Files\Common Files\AOL\1173663549\ee\aolsoftware.exe
C:\Program Files\Real\RealPlayer\realplay.exe
C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe
C:\Program Files\TOSHIBA\Utilities\VolControl.exe
C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Synaptics\SynTP\SynToshiba.exe
C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\Windows\system32\TODDSrv.exe
C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\wbem\wmiprvse.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\maxwell


»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\maxwell\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Start Menu


»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\maxwell\FAVORI~1


»»»»»»»»»»»»»»»»»»»»»»»» Desktop


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components



»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, following keys are not inevitably infected!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, following keys are not inevitably infected!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""
"LoadAppInit_DLLs"=dword:00000000


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\Windows\\system32\\userinit.exe,"


»»»»»»»»»»»»»»»»»»»»»»»» Rustock



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Intel(R) PRO/Wireless 3945ABG Network Connection
DNS Server Search Order: 192.168.0.1

HKLM\SYSTEM\CCS\Services\Tcpip\..\{50F5EF3C-BAC0-4131-91EF-57E8326F7C4E}: DhcpNameServer=192.168.0.1
HKLM\SYSTEM\CCS\Services\Tcpip\..\{6C819267-8883-4025-B55B-052F6F572164}: DhcpNameServer=192.168.1.254
HKLM\SYSTEM\CS1\Services\Tcpip\..\{50F5EF3C-BAC0-4131-91EF-57E8326F7C4E}: DhcpNameServer=192.168.0.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{6C819267-8883-4025-B55B-052F6F572164}: DhcpNameServer=192.168.1.254
HKLM\SYSTEM\CS3\Services\Tcpip\..\{50F5EF3C-BAC0-4131-91EF-57E8326F7C4E}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{6C819267-8883-4025-B55B-052F6F572164}: DhcpNameServer=192.168.1.254
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1


»»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection


»»»»»»»»»»»»»»»»»»»»»»»» End

[Scotty]

Hello there

Disable Windows Defender until the computer is clean

Windows Defender normally provides real-time protection from spyware, however it may interfere with what we need to do. We will disable it until the machine is clean when it can be re-enabled.

- Open Windows Defender
- Select Tools and then General Settings
- Under Real Time Protection Options uncheck Turn on real-time protection
- Select Save
Don't forget to re-enable it, when your computer is clean.


Disable SUPERAntiSpyware until the computer is clean

• Right-click on the shortcut from the system tray
• Choose View Control Center (preferences/options)
• On the General and Startup tab, uncheck Start SUPERAntispyware when Windows starts.
• Click Close to exit.

Don't forget to re-enable it, when your computer is clean.


Disable Teatimer
First:

• Right click Spybot in the System Tray (looks like a calendar with a padlock symbol)
• Choose Exit Spybot S&D Resident

Second:

• Open Spybot S&D
• Click Mode, check Advanced Mode
• Go To Left Panel, Click Tools, then also in left panel, click Resident
• If your firewall raises a question, say OK
• Uncheck the box labeled Resident Tea-Timer and OK any prompts.
• Use File, Exit to terminate Spybot
• Reboot your machine for the changes to take effect.

• Download FixIEDef.exe by ShadowPuterDude to your Desktop.
• Double-click FixIEDef.exe
  
  • If running Vista, click OK on the FixIEDef is running as Administrator popup

WARNING: FixIEDef will kill all copies of Internet Explorer and Explorer that are running. The icons and Start Menu on your Desktop will not be visible while FixIEDef is running. This is necessary to remove parts of the infection that would otherwise not be removed. FixIEDef will re-start Explorer at the end of the removal process

FixIEDef will return everything to normal; when it has finished the removal process

• Click Exit once FixIEDef displays the All Finished message
• Post the log back here. (You will find it on your desktop)

If you already have Combofix, please delete that copy and download it again as it's being updated regularly.

There is a tutorial on the basic use of Combofix here:
http://www.bleepingcomputer.com/combofix/how-to-use-combofix


Please download Combofix from Bleeping Computer.

If you can't download it from there, please try these 2 alternative sites:

Forospyware
Geeks to Go

• Save it to your Desktop.
• Disconnect from the Internet, than disable your anti-virus and any real-time anti-spyware monitors that are running.
• Click Start>Run copy/paste or type "%userprofile%\desktop\combofix.exe" /killall into the Run box and click OK.
• When finished, it shall produce a log for you. Post that log in your next reply with a new HijackThis log.

1.Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.
3. Combofix prevents autorun of ALL CD, floppy and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you -- please tell your helper.
4. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.



In your next reply post:
FixIEDefender log
ComboFix.txt
New HijackThis log taken after the above scan has run

[maxwellp]

********************************************************************************
* *
* FixIEDef Log *
* Version 1.3.10.3351 *
* *
********************************************************************************

Created at 23:05:27 on Monday, April 07, 2008

Time Zone : (GMT) Greenwich Mean Time : Dublin, Edinburgh, Lisbon, London

Operating System : Microsoft® Windows Vista™ Home Premium
Service Pack Level:
System Langauge : English
Processor : X86
Boot State : Normal boot

--------------------------------------------------------------------------------

!!! Files that have been deleted !!!

C:\Windows\kiasys.dll

--------------------------------------------------------------------------------

!!! Directories that have been removed !!!

No malicious directories to be removed

--------------------------------------------------------------------------------

!!! Registry entries that have been removed !!!

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\DateTime
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\kiasys.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{50B051EE-8EF3-4D58-828D-74F0D1FFE4AA}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{50B051EE-8EF3-4D58-828D-74F0D1FFE4AA}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{48D78BE5-CFB9-4B66-9AC4-96D4CF21DE06}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{74D46BBA-5638-473A-83B6-97E7804A7411}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{50B051EE-8EF3-4D58-828D-74F0D1FFE4AA}

================================================================================

All Done

ShadowPuterDude

Safe Surfing!!!

[Scotty]

And the Combfix log?

[maxwellp]

Hi there,

I am having problems with the combofix program, I downloaded it as reccomended, and followed the instructions. When i try to open it i get the combofix progress bar, then a window that looks like the combofix 1st window opens then immediatey closes. i tried to run it in safe mode also and nothing happens.
i tried to uninstall it and it wont uninstall either if i type ComboFix /u in the run box
here is a current log from hijackthis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:33:01, on 08/04/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
C:\Program Files\Common Files\AOL\1173663549\ee\aolsoftware.exe
C:\Program Files\Synaptics\SynTP\SynToshiba.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Real\RealPlayer\realplay.exe
C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe
C:\Program Files\TOSHIBA\Utilities\VolControl.exe
C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\conime.exe
C:\Users\maxwell\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://login.live.com/login.srf?id=2&sv ... 7&_lang=EN
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll
O2 - BHO: (no name) - {20c8954b-1eb8-4084-b8af-c5924c94dd7e} - C:\Windows\system32\ljjhHBuS.dll (file missing)
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: (no name) - {50b051ee-8ef3-4d58-828d-74f0d1ffe4aa} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O2 - BHO: Min stor proj. - {FFFFFFFF-D71D-41e4-A699-F506DBD097F0} - msindc.dll (file missing)
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1173663549\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
O4 - HKLM\..\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup
O4 - HKLM\..\Run: [TOSHIBA Volume Indicator] "C:\Program Files\Toshiba\Utilities\VolControl.exe"
O4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [CM106Sound] RunDll32 CM106.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [NSLauncher] C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe /startup
O4 - HKLM\..\Run: [MSServer] rundll32.exe C:\Windows\system32\fccbARlj.dll,#1
O4 - HKCU\..\Run: [TOSCDSPD] TOSCDSPD.EXE
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: eBay - {C08CAF1D-C0A3-40D5-9970-06D067EAC017} - http://www.webtip.ch/cgi-bin/toshiba/tracker_url.pl?EN (file missing)
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !saswinlogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: SBSD Security Center Service (sbsdwscservice) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 9936 bytes

[Scotty]

Hi

Download OTScanIt.exe to your Desktop and double-click on it to extract the files. It will create a folder named OTScanIt on your desktop.

• Close ALL OTHER PROGRAMS.
• Open the OTScanIt folder and double-click on OTScanIt.exe to start the program.
• Now click the Run Scan button on the toolbar.
• The program will be scanning huge amounts of data so depending on your system it could take a long time to complete. Let it run unhindered until it finishes.
• When the scan is complete Notepad will open with the report file loaded in it.
• Click the Format menu and make sure that Wordwrap is not checked. If it is then click on it to uncheck it.

Use the Add Reply button and Copy/Paste the information back here. I will review it when it comes in. If, after posting, the last line is not < End of Report > then the log is too big to fit into a single post and you will need to split it into multiple posts.

[maxwellp]

Hi there, thanks a lot for looking at the computer logs and trying to sort it out. I still cannot get combo fix to work and it will not uninstall.
here is that OTScanIt log

Code: Select all

OTScanIt logfile created on: 08/04/2008 17:04:26
OTScanIt by OldTimer - Version 1.0.9.0     Folder = C:\Users\maxwell\Desktop\OTScanIt
Windows Vista   (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.16609)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy
 
1013.56 Mb Total Physical Memory | 471.98 Mb Available Physical Memory | 46.57% Memory free
2.22 Gb Paging File | 1.47 Gb Available in Paging File | 66.06% Paging File free
Paging file location(s): ?:\pagefile.sys;
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 91.45 Gb Total Space | 50.13 Gb Free Space | 54.81% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: MAXWELL-PC
Current User Name: maxwell
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user

[Processes - Non-Microsoft Only]
aolacsd.exe -> %CommonProgramFiles%\AOL\acs\AOLacsd.exe -> AOL LLC [Ver = 4.6.1.2               | Size = 46640 bytes | Modified Date = 23/10/2006 13:50:35 | Attr = R  ]
applemobiledeviceservice.exe -> %CommonProgramFiles%\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -> Apple, Inc. [Ver = 1, 14, 0, 0 | Size = 110592 bytes | Modified Date = 06/09/2007 14:28:18 | Attr =    ]
aluschedulersvc.exe -> %ProgramFiles%\Symantec\LiveUpdate\AluSchedulerSvc.exe -> Symantec Corporation [Ver = 3.2.0.41 | Size = 554616 bytes | Modified Date = 05/01/2007 15:04:10 | Attr =    ]
ccsvchst.exe -> %CommonProgramFiles%\Symantec Shared\ccSvcHst.exe -> Symantec Corporation [Ver = 106.2.0.21 | Size = 108648 bytes | Modified Date = 09/01/2007 22:59:32 | Attr =    ]
cfsvcs.exe -> %ProgramFiles%\TOSHIBA\ConfigFree\CFSvcs.exe -> TOSHIBA CORPORATION [Ver = 7, 0, 1, 6 | Size = 40960 bytes | Modified Date = 14/11/2006 21:33:10 | Attr =    ]
appsvc32.exe -> %CommonProgramFiles%\Symantec Shared\AppCore\AppSvc32.exe -> Symantec Corporation [Ver = 1.1.00.7 | Size = 46736 bytes | Modified Date = 20/09/2006 18:05:00 | Attr =    ]
toddsrv.exe -> %SystemRoot%\System32\TODDSrv.exe -> TOSHIBA Corporation [Ver = 1, 0, 0, 3 | Size = 114688 bytes | Modified Date = 25/05/2006 19:30:16 | Attr =    ]
toscosrv.exe -> %ProgramFiles%\TOSHIBA\Power Saver\TosCoSrv.exe -> TOSHIBA Corporation [Ver = 1.0.0.1 | Size = 428152 bytes | Modified Date = 14/12/2006 20:06:14 | Attr =    ]
ulcdrsvr.exe -> %CommonProgramFiles%\Ulead Systems\DVD\ULCDRSvr.exe -> Ulead Systems, Inc. [Ver = 1, 0, 0, 4 | Size = 49152 bytes | Modified Date = 23/08/2006 17:39:48 | Attr =    ]
xaudio.exe -> %SystemRoot%\System32\drivers\XAudio.exe -> Conexant Systems, Inc. [Ver = 1.00.00 | Size = 386560 bytes | Modified Date = 04/08/2006 17:39:20 | Attr =    ]
sdwinsec.exe -> %ProgramFiles%\Spybot - Search & Destroy\SDWinSec.exe -> Safer Networking Ltd. [Ver = 1, 0, 0, 11 | Size = 810320 bytes | Modified Date = 28/01/2008 11:43:32 | Attr =    ]
igfxtray.exe -> %SystemRoot%\System32\igfxtray.exe -> Intel Corporation [Ver = 7.14.10.1114 | Size = 98304 bytes | Modified Date = 06/11/2006 09:02:32 | Attr =    ]
hkcmd.exe -> %SystemRoot%\System32\hkcmd.exe -> Intel Corporation [Ver = 6.14.10.1114 | Size = 106496 bytes | Modified Date = 06/11/2006 09:05:32 | Attr =    ]
igfxpers.exe -> %SystemRoot%\System32\igfxpers.exe -> Intel Corporation [Ver = 7.14.10.1114 | Size = 81920 bytes | Modified Date = 06/11/2006 09:02:18 | Attr =    ]
syntpenh.exe -> %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe -> Synaptics, Inc. [Ver = 9.1.0 27Oct06 | Size = 815104 bytes | Modified Date = 27/10/2006 13:50:52 | Attr =    ]
tcrdmain.exe -> %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe -> TOSHIBA Corporation [Ver = 1.0.0.7 | Size = 530552 bytes | Modified Date = 11/12/2006 18:27:12 | Attr =    ]
aolsoftware.exe -> %CommonProgramFiles%\AOL\1173663549\ee\aolsoftware.exe -> America Online, Inc. [Ver = 1.5.6.1 | Size = 50736 bytes | Modified Date = 26/09/2006 01:52:48 | Attr =    ]
syntoshiba.exe -> %ProgramFiles%\Synaptics\SynTP\SynToshiba.exe -> Synaptics, Inc. [Ver = 9.1.0 27Oct06 | Size = 192512 bytes | Modified Date = 27/10/2006 13:11:02 | Attr =    ]
realplay.exe -> %ProgramFiles%\Real\RealPlayer\realplay.exe -> RealNetworks, Inc. [Ver = 6.0.9.584 | Size = 26112 bytes | Modified Date = 11/03/2007 23:16:34 | Attr =    ]
smoothview.exe -> %ProgramFiles%\TOSHIBA\SmoothView\SmoothView.exe -> TOSHIBA Corporation [Ver = 3, 0, 0, 2 | Size = 493688 bytes | Modified Date = 14/12/2006 20:09:48 | Attr =    ]
volcontrol.exe -> %ProgramFiles%\TOSHIBA\Utilities\VolControl.exe -> TOSHIBA Inc. [Ver = 2, 0, 5, 0 | Size = 94208 bytes | Modified Date = 13/12/2006 10:33:24 | Attr =    ]
tpwrmain.exe -> %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.exe -> TOSHIBA Corporation [Ver = 1.0.0.1 | Size = 411768 bytes | Modified Date = 14/12/2006 20:07:26 | Attr =    ]
cfd.exe -> %ProgramFiles%\BroadJump\Client Foundation\CFD.exe ->  [Ver =  | Size = 376912 bytes | Modified Date = 27/01/2003 17:16:58 | Attr =    ]
pifsvc.exe -> %CommonProgramFiles%\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe -> Symantec Corporation [Ver = 1.4.5.73 | Size = 583048 bytes | Modified Date = 28/11/2007 20:51:10 | Attr =    ]
ituneshelper.exe -> %ProgramFiles%\iTunes\iTunesHelper.exe -> Apple Inc. [Ver = 7.6.0.29 | Size = 267048 bytes | Modified Date = 04/02/2008 15:18:40 | Attr =    ]
toscdspd.exe -> %ProgramFiles%\TOSHIBA\TOSCDSPD\TOSCDSPD.exe -> TOSHIBA [Ver = 2.00.01 | Size = 413696 bytes | Modified Date = 13/11/2006 10:06:54 | Attr =    ]
ipodservice.exe -> %ProgramFiles%\iPod\bin\iPodService.exe -> Apple Inc. [Ver = 7.6.0.29 | Size = 504104 bytes | Modified Date = 04/02/2008 15:18:32 | Attr =    ]
otscanit.exe -> %UserProfile%\Desktop\OTScanIt\OTScanIt.exe -> OldTimer Tools [Ver = 1.0.9.0 | Size = 369152 bytes | Modified Date = 04/04/2008 12:24:38 | Attr =    ]

[Win32 Services - Non-Microsoft Only]
(AOL ACS) AOL Connectivity Service [Win32_Own | Auto | Running] -> %CommonProgramFiles%\AOL\acs\AOLacsd.exe -> AOL LLC [Ver = 4.6.1.2               | Size = 46640 bytes | Modified Date = 23/10/2006 13:50:35 | Attr = R  ]
(Apple Mobile Device) Apple Mobile Device [Win32_Own | Auto | Running] -> %CommonProgramFiles%\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -> Apple, Inc. [Ver = 1, 14, 0, 0 | Size = 110592 bytes | Modified Date = 06/09/2007 14:28:18 | Attr =    ]
(Automatic LiveUpdate Scheduler) Automatic LiveUpdate Scheduler [Win32_Own | Auto | Running] -> %ProgramFiles%\Symantec\LiveUpdate\AluSchedulerSvc.exe -> Symantec Corporation [Ver = 3.2.0.41 | Size = 554616 bytes | Modified Date = 05/01/2007 15:04:10 | Attr =    ]
(ccEvtMgr) Symantec Event Manager [Win32_Shared | Auto | Running] -> %CommonProgramFiles%\Symantec Shared\ccSvcHst.exe -> Symantec Corporation [Ver = 106.2.0.21 | Size = 108648 bytes | Modified Date = 09/01/2007 22:59:32 | Attr =    ]
(ccSetMgr) Symantec Settings Manager [Win32_Shared | Auto | Running] -> %CommonProgramFiles%\Symantec Shared\ccSvcHst.exe -> Symantec Corporation [Ver = 106.2.0.21 | Size = 108648 bytes | Modified Date = 09/01/2007 22:59:32 | Attr =    ]
(CertPropSvc) Certificate Propagation [Win32_Shared | Unknown | Stopped] ->  -> File not found
(CFSvcs) ConfigFree Service [Win32_Own | Auto | Running] -> %ProgramFiles%\TOSHIBA\ConfigFree\CFSvcs.exe -> TOSHIBA CORPORATION [Ver = 7, 0, 1, 6 | Size = 40960 bytes | Modified Date = 14/11/2006 21:33:10 | Attr =    ]
(CLTNetCnService) Symantec Lic NetConnect service [Win32_Shared | Auto | Running] -> %CommonProgramFiles%\Symantec Shared\ccSvcHst.exe -> Symantec Corporation [Ver = 106.2.0.21 | Size = 108648 bytes | Modified Date = 09/01/2007 22:59:32 | Attr =    ]
(comHost) COM Host [Win32_Own | On_Demand | Stopped] -> %CommonProgramFiles%\Symantec Shared\VAScanner\comHost.exe -> Symantec Corporation [Ver = 1.1.0.9 | Size = 49296 bytes | Modified Date = 13/10/2006 15:29:00 | Attr =    ]
(DcomLaunch) DCOM Server Process Launcher [Win32_Shared | Unknown | Running] ->  -> File not found
(DPS) Diagnostic Policy Service [Win32_Shared | Unknown | Running] ->  -> File not found
(gpsvc) Group Policy Client [Win32_Shared | Unknown | Running] ->  -> File not found
(IDriverT) InstallDriver Table Manager [Win32_Own | On_Demand | Stopped] -> %CommonProgramFiles%\InstallShield\Driver\1050\Intel 32\IDriverT.exe -> Macrovision Corporation [Ver = 10.50.125 | Size = 73728 bytes | Modified Date = 22/10/2004 03:24:18 | Attr =    ]
(idsvc) Windows CardSpace [Win32_Shared | Unknown | Stopped] ->  -> File not found
(iPod Service) iPod Service [Win32_Own | On_Demand | Running] -> %ProgramFiles%\iPod\bin\iPodService.exe -> Apple Inc. [Ver = 7.6.0.29 | Size = 504104 bytes | Modified Date = 04/02/2008 15:18:32 | Attr =    ]
(ISPwdSvc) Symantec IS Password Validation [Win32_Own | On_Demand | Stopped] -> %ProgramFiles%\Norton Internet Security\isPwdSvc.exe -> Symantec Corporation [Ver = 10.1.0.38 | Size = 80552 bytes | Modified Date = 27/10/2006 00:18:00 | Attr =    ]
(LiveUpdate) LiveUpdate [Win32_Own | On_Demand | Stopped] -> %ProgramFiles%\Symantec\LiveUpdate\LuComServer_3_2.EXE -> Symantec Corporation [Ver = 3.2.0.41 | Size = 2918008 bytes | Modified Date = 05/01/2007 15:04:10 | Attr =    ]
(LiveUpdate Notice Ex) LiveUpdate Notice Service Ex [Win32_Shared | Auto | Running] -> %CommonProgramFiles%\Symantec Shared\ccSvcHst.exe -> Symantec Corporation [Ver = 106.2.0.21 | Size = 108648 bytes | Modified Date = 09/01/2007 22:59:32 | Attr =    ]
(LiveUpdate Notice Service) LiveUpdate Notice Service [Win32_Own | Auto | Stopped] -> %CommonProgramFiles%\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe -> Symantec Corporation [Ver = 1.4.5.73 | Size = 583048 bytes | Modified Date = 28/11/2007 20:51:10 | Attr =    ]
(MSDTC) Distributed Transaction Coordinator [Win32_Own | Unknown | Stopped] ->  -> File not found
(RpcSs) Remote Procedure Call (RPC) [Win32_Shared | Unknown | Running] ->  -> File not found
(sbsdwscservice) SBSD Security Center Service [Win32_Own | Auto | Running] -> %ProgramFiles%\Spybot - Search & Destroy\SDWinSec.exe -> Safer Networking Ltd. [Ver = 1, 0, 0, 11 | Size = 810320 bytes | Modified Date = 28/01/2008 11:43:32 | Attr =    ]
(SCardSvr) Smart Card [Win32_Shared | Unknown | Stopped] ->  -> File not found
(Schedule) Task Scheduler [Win32_Shared | Unknown | Running] ->  -> File not found
(SCPolicySvc) Smart Card Removal Policy [Win32_Shared | Unknown | Stopped] ->  -> File not found
(ServiceLayer) ServiceLayer [Win32_Own | On_Demand | Stopped] -> %ProgramFiles%\PC Connectivity Solution\ServiceLayer.exe -> Nokia. [Ver = 6, 82, 69, 5 | Size = 212480 bytes | Modified Date = 08/02/2007 16:13:46 | Attr =    ]
(Symantec Core LC) Symantec Core LC [Win32_Own | On_Demand | Stopped] -> %CommonProgramFiles%\Symantec Shared\CCPD-LC\symlcsvc.exe ->  [Ver =  | Size = 1251720 bytes | Modified Date = 11/02/2008 22:23:09 | Attr =    ]
(SymAppCore) Symantec AppCore Service [Win32_Own | Auto | Running] -> %CommonProgramFiles%\Symantec Shared\AppCore\AppSvc32.exe -> Symantec Corporation [Ver = 1.1.00.7 | Size = 46736 bytes | Modified Date = 20/09/2006 18:05:00 | Attr =    ]
(TODDSrv) TOSHIBA Optical Disc Drive Service [Win32_Own | Auto | Running] -> %SystemRoot%\System32\TODDSrv.exe -> TOSHIBA Corporation [Ver = 1, 0, 0, 3 | Size = 114688 bytes | Modified Date = 25/05/2006 19:30:16 | Attr =    ]
(TosCoSrv) TOSHIBA Power Saver [Win32_Own | Auto | Running] -> %ProgramFiles%\TOSHIBA\Power Saver\TosCoSrv.exe -> TOSHIBA Corporation [Ver = 1.0.0.1 | Size = 428152 bytes | Modified Date = 14/12/2006 20:06:14 | Attr =    ]
(TrustedInstaller) Windows Modules Installer [Win32_Own | Unknown | Stopped] ->  -> File not found
(UleadBurningHelper) Ulead Burning Helper [Win32_Own | Auto | Running] -> %CommonProgramFiles%\Ulead Systems\DVD\ULCDRSvr.exe -> Ulead Systems, Inc. [Ver = 1, 0, 0, 4 | Size = 49152 bytes | Modified Date = 23/08/2006 17:39:48 | Attr =    ]
(WdiServiceHost) Diagnostic Service Host [Win32_Shared | Unknown | Stopped] ->  -> File not found
(WdiSystemHost) Diagnostic System Host [Win32_Shared | Unknown | Running] ->  -> File not found
(XAudioService) XAudioService [Win32_Own | Auto | Running] -> %SystemRoot%\System32\drivers\XAudio.exe -> Conexant Systems, Inc. [Ver = 1.00.00 | Size = 386560 bytes | Modified Date = 04/08/2006 17:39:20 | Attr =    ]

[Registry - Non-Microsoft Only]
< Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> 
00TCrdMain ->  [%ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe] -> File not found
BJCFD -> %ProgramFiles%\BroadJump\Client Foundation\CFD.exe [C:\Program Files\BroadJump\Client Foundation\CFD.exe] ->  [Ver =  | Size = 376912 bytes | Modified Date = 27/01/2003 17:16:58 | Attr =    ]
ccApp -> %CommonProgramFiles%\Symantec Shared\ccApp.exe ["C:\Program Files\Common Files\Symantec Shared\ccApp.exe"] -> Symantec Corporation [Ver = 106.2.0.21 | Size = 115816 bytes | Modified Date = 09/01/2007 22:59:52 | Attr =    ]
CM106Sound ->  [RunDll32 CM106.cpl,CMICtrlWnd] -> File not found
Easy-PrintToolBox -> %ProgramFiles%\Canon\Easy-PrintToolBox\BJPSMAIN.EXE [C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon] -> CANON INC. [Ver = 1, 2, 0, 0 | Size = 398944 bytes | Modified Date = 17/10/2006 02:20:00 | Attr =    ]
HostManager -> %CommonProgramFiles%\AOL\1173663549\ee\aolsoftware.exe [C:\Program Files\Common Files\AOL\1173663549\ee\AOLSoftware.exe] -> America Online, Inc. [Ver = 1.5.6.1 | Size = 50736 bytes | Modified Date = 26/09/2006 01:52:48 | Attr =    ]
HotKeysCmds -> %SystemRoot%\System32\hkcmd.exe [C:\Windows\system32\hkcmd.exe] -> Intel Corporation [Ver = 6.14.10.1114 | Size = 106496 bytes | Modified Date = 06/11/2006 09:05:32 | Attr =    ]
HSON ->  [%ProgramFiles%\TOSHIBA\TBS\HSON.exe] -> File not found
IgfxTray -> %SystemRoot%\System32\igfxtray.exe [C:\Windows\system32\igfxtray.exe] -> Intel Corporation [Ver = 7.14.10.1114 | Size = 98304 bytes | Modified Date = 06/11/2006 09:02:32 | Attr =    ]
iTunesHelper -> %ProgramFiles%\iTunes\iTunesHelper.exe ["C:\Program Files\iTunes\iTunesHelper.exe"] -> Apple Inc. [Ver = 7.6.0.29 | Size = 267048 bytes | Modified Date = 04/02/2008 15:18:40 | Attr =    ]
MSServer -> %SystemRoot%\system32\fccbARlj.DLL [rundll32.exe C:\Windows\system32\fccbARlj.dll,#1] -> File not found
NSLauncher -> %ProgramFiles%\Nokia\Nokia Software Launcher\NSLauncher.exe [C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe /startup] ->  [Ver = 1.6.80.0 | Size = 3100672 bytes | Modified Date = 07/09/2007 14:44:30 | Attr =    ]
NvCplDaemon -> %SystemRoot%\System32\nvcpl.dll [RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup] -> NVIDIA Corporation [Ver = 7.15.10.9748 | Size = 7766016 bytes | Modified Date = 10/12/2006 14:47:00 | Attr =    ]
NvMediaCenter -> %SystemRoot%\System32\nvmctray.dll [RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit] -> NVIDIA Corporation [Ver = 7.15.10.9748 | Size = 81920 bytes | Modified Date = 10/12/2006 14:47:00 | Attr =    ]
NvSvc -> %SystemRoot%\System32\nvsvc.dll [RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart] -> NVIDIA Corporation [Ver = 7.15.10.9748 | Size = 90191 bytes | Modified Date = 10/12/2006 14:47:00 | Attr =    ]
osCheck -> %ProgramFiles%\Norton Internet Security\osCheck.exe ["C:\Program Files\Norton Internet Security\osCheck.exe"] -> Symantec Corporation [Ver = 10.1.0.38 | Size = 22696 bytes | Modified Date = 27/10/2006 00:18:00 | Attr =    ]
Persistence -> %SystemRoot%\System32\igfxpers.exe [C:\Windows\system32\igfxpers.exe] -> Intel Corporation [Ver = 7.14.10.1114 | Size = 81920 bytes | Modified Date = 06/11/2006 09:02:18 | Attr =    ]
QuickTime Task -> %ProgramFiles%\QuickTime\QTTask.exe ["C:\Program Files\QuickTime\QTTask.exe" -atboottime] -> Apple Inc. [Ver = 7.4.1 | Size = 385024 bytes | Modified Date = 01/02/2008 00:13:08 | Attr =    ]
RealTray -> %ProgramFiles%\Real\RealPlayer\realplay.exe [C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER] -> RealNetworks, Inc. [Ver = 6.0.9.584 | Size = 26112 bytes | Modified Date = 11/03/2007 23:16:34 | Attr =    ]
SmoothView ->  [%ProgramFiles%\Toshiba\SmoothView\SmoothView.exe] -> File not found
Symantec PIF AlertEng -> %CommonProgramFiles%\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe ["C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"] -> Symantec Corporation [Ver = 1.4.5.73 | Size = 583048 bytes | Modified Date = 28/11/2007 20:51:10 | Attr =    ]
SynTPEnh -> %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [C:\Program Files\Synaptics\SynTP\SynTPEnh.exe] -> Synaptics, Inc. [Ver = 9.1.0 27Oct06 | Size = 815104 bytes | Modified Date = 27/10/2006 13:50:52 | Attr =    ]
topi -> %ProgramFiles%\TOSHIBA\Toshiba Online Product Information\TOPI.exe [C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup] -> TOSHIBA [Ver = 1.0.0.0 | Size = 577536 bytes | Modified Date = 15/12/2006 18:11:46 | Attr =    ]
TOSHIBA Volume Indicator -> %ProgramFiles%\TOSHIBA\Utilities\VolControl.exe ["C:\Program Files\Toshiba\Utilities\VolControl.exe"] -> TOSHIBA Inc. [Ver = 2, 0, 5, 0 | Size = 94208 bytes | Modified Date = 13/12/2006 10:33:24 | Attr =    ]
TPwrMain ->  [%ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE] -> File not found
Windows Defender ->  [%ProgramFiles%\Windows Defender\MSASCui.exe -hide] -> File not found
< OptionalComponents [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\ -> 
IMAIL-> Installed = 1 -> 
MAPI-> Installed = 1 -> 
MSFS-> Installed = 1 -> 
< Run [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> 
TOSCDSPD ->  [TOSCDSPD.EXE] -> File not found
< ShellExecuteHooks [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks -> 
{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\SUPERAntiSpyware\SASSEH.DLL [] -> SuperAdBlocker.com [Ver = 1, 0, 0, 1008 | Size = 77824 bytes | Modified Date = 20/12/2006 12:55:48 | Attr =    ]
< SecurityProviders [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\\SecurityProviders -> 
< Winlogon settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> 
< Winlogon settings [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> 
< Winlogon\Notify settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ -> 
!saswinlogon -> %ProgramFiles%\SUPERAntiSpyware\SASWINLO.dll -> SUPERAntiSpyware.com [Ver = 1, 0, 0, 1046 | Size = 294912 bytes | Modified Date = 19/04/2007 12:41:36 | Attr =    ]
igfxcui -> %SystemRoot%\System32\igfxdev.dll -> Intel Corporation [Ver = 7.14.10.1114 | Size = 212992 bytes | Modified Date = 06/11/2006 09:00:48 | Attr =    ]
< CurrentVersion Policy Settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Attachments\ -> -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Attachments\\ScanWithAntiVirus -> 3 -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\ -> -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{BDEADF00-C265-11D0-BCED-00A0C90AB50F} -> 1 -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{6DFD7C5C-2451-11d3-A299-00C04F8EF6AF} -> 1073741857 -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{0DF44EAA-FF21-4412-828E-260A8728E7F1} -> 32 -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\ -> -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ConsentPromptBehaviorAdmin -> 2 -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ConsentPromptBehaviorUser -> 1 -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\EnableInstallerDetection -> 1 -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\EnableLUA -> 0 -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\EnableSecureUIAPaths -> 1 -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\EnableVirtualization -> 1 -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\PromptOnSecureDesktop -> 1 -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ValidateAdminCodeSignatures -> 0 -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\dontdisplaylastusername -> 0 -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\legalnoticecaption ->  -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\legalnoticetext ->  -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\scforceoption -> 0 -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\shutdownwithoutlogon -> 1 -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\undockwithoutlogon -> 1 -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\FilterAdministratorToken -> 0 -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\ -> -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ -> -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats\ -> -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats\\CF_TEXT -> 1 -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats\\CF_BITMAP -> 2 -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats\\CF_OEMTEXT -> 7 -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats\\CF_DIB -> 8 -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats\\CF_PALETTE -> 9 -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats\\CF_UNICODETEXT -> 13 -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats\\CF_DIBV5 -> 17 -> 
< CurrentVersion Policy Settings [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> 
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> ->
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> -> 
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> 145 -> 
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ -> -> 
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\disableregistrytools -> 0 -> 
< HOSTS File > (761 bytes) -> C:\Windows\System32\drivers\etc\Hosts -> 
::1             localhost -> -> 
< Internet Explorer Settings [HKEY_LOCAL_MACHINE\] > -> -> 
HKEY_LOCAL_MACHINE\: Main\\Default_Page_URL -> http://go.microsoft.com/fwlink/?LinkId=69157 -> 
HKEY_LOCAL_MACHINE\: Main\\Default_Search_URL -> http://go.microsoft.com/fwlink/?LinkId=54896 -> 
HKEY_LOCAL_MACHINE\: Main\\Local Page -> %SystemRoot%\system32\blank.htm -> 
HKEY_LOCAL_MACHINE\: Main\\Search Page -> http://go.microsoft.com/fwlink/?LinkId=54896 -> 
HKEY_LOCAL_MACHINE\: Main\\Start Page -> http://go.microsoft.com/fwlink/?LinkId=69157 -> 
< Internet Explorer Settings [HKEY_CURRENT_USER\] > -> -> 
HKEY_CURRENT_USER\: Main\\Local Page -> C:\Windows\system32\blank.htm -> 
HKEY_CURRENT_USER\: Main\\Search Page -> http://go.microsoft.com/fwlink/?LinkId=54896 -> 
HKEY_CURRENT_USER\: Main\\Start Page -> http://login.live.com/login.srf?id=2&svc=mail&cbid=24325&msppjph=1&tw=900&fs=1&lc=2057&_lang=EN -> 
HKEY_CURRENT_USER\: ProxyEnable -> 0 -> 
< Trusted Sites Domains [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> 
< Trusted Sites Ranges [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> 
< Trusted Sites Domains [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> 
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 1 domain(s) found. -> 
objects_aol.com [*] -> Out of zone range - ( 5 ) -> 
1 domain(s) and sub-domain(s) not assigned to a zone.
< Trusted Sites Ranges [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> 
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> 
< BHO's [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ -> 
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [Adobe PDF Reader Link Helper] -> Adobe Systems Incorporated [Ver = 7.0.9.2006121800 | Size = 59032 bytes | Modified Date = 18/12/2006 05:16:42 | Attr =    ]
{1E8A6170-7264-4D0F-BEAE-D42A53123C75} [HKEY_LOCAL_MACHINE] -> %CommonProgramFiles%\Symantec Shared\coShared\Browser\1.0\NppBHO.dll [Reg Error: Value  does not exist or could not be read.] -> Symantec Corporation [Ver = 2007.1.3.6 | Size = 96984 bytes | Modified Date = 23/10/2006 21:34:00 | Attr = R  ]
{20c8954b-1eb8-4084-b8af-c5924c94dd7e} [HKEY_LOCAL_MACHINE] -> %SystemRoot%\system32\ljjhHBuS.dll [Reg Error: Value  does not exist or could not be read.] -> File not found
{22BF413B-C6D2-4d91-82A9-A0F997BA588C} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [Skype add-on (mastermind)] -> Skype Technologies S.A. [Ver = 2, 2, 0, 147 | Size = 1372160 bytes | Modified Date = 06/02/2008 18:37:52 | Attr =    ]
{50b051ee-8ef3-4d58-828d-74f0d1ffe4aa} [HKEY_LOCAL_MACHINE] -> Reg Error: Key does not exist or could not be opened. [Reg Error: Key does not exist or could not be opened.] -> File not found
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\Java\jre1.6.0\bin\ssv.dll [SSVHelper Class] -> Sun Microsystems, Inc. [Ver = 6.0.0.104 | Size = 501384 bytes | Modified Date = 16/12/2006 11:08:59 | Attr =    ]
{FFFFFFFF-D71D-41e4-A699-F506DBD097F0} [HKEY_LOCAL_MACHINE] -> %SystemRoot%\System32\msindc.dll [Min stor proj.] -> MIT [Ver = 0, 1, 0, 1 | Size = 54272 bytes | Modified Date = 02/04/2008 12:37:44 | Attr =    ]
< Internet Explorer ToolBars [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar -> 
{90222687-F593-4738-B738-FBEE9C7B26DF} [HKEY_LOCAL_MACHINE] -> %CommonProgramFiles%\Symantec Shared\coShared\Browser\1.0\UIBHO.dll [Show Norton Toolbar] -> Symantec Corporation [Ver = 2007.1.3.6 | Size = 565960 bytes | Modified Date = 23/10/2006 21:34:00 | Attr = R  ]
< Internet Explorer Extensions [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\ -> 
{08B0E5C0-4FCB-11CF-AAA5-00401C608501}:{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\Java\jre1.6.0\bin\npjpi160.dll [Sun Java Console] -> Sun Microsystems, Inc. [Ver = 6.0.0.104 | Size = 132744 bytes | Modified Date = 16/12/2006 11:08:59 | Attr =    ]
{77BF5300-1474-4EC7-9980-D32B190E9B07}:{77BF5300-1474-4EC7-9980-D32B190E9B07} [HKEY_LOCAL_MACHINE] -> %ProgramFiles%\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [Skype] -> Skype Technologies S.A. [Ver = 2, 2, 0, 147 | Size = 1372160 bytes | Modified Date = 06/02/2008 18:37:52 | Attr =    ]
{C08CAF1D-C0A3-40D5-9970-06D067EAC017}:Exec ->  [eBay] -> File not found
< Internet Explorer Menu Extensions [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\ -> 
E&xport to Microsoft Excel -> %SystemDrive%\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE -> File not found
< Internet Explorer Plugins [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Plugins\ -> 
PluginsPageFriendlyName -> Microsoft ActiveX Gallery -> 
PluginsPage -> http://activex.microsoft.com/controls/find.asp?ext=%s&mime=%s -> 
< DNS Name Servers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\ -> 
{50F5EF3C-BAC0-4131-91EF-57E8326F7C4E} ->    (Intel(R) PRO/Wireless 3945ABG Network Connection) -> 
{6C819267-8883-4025-B55B-052F6F572164} ->    (Thomson ST Remote NDIS Device) -> 
{A9D3E28C-2455-492E-9AA2-965D116B246C} ->    (Intel(R) PRO/100 VE Network Connection) -> 
< Default Protocols [HKEY_LOCAL_MACHINE\] - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults -> 
ldap -> 4 = Restricted sites (Not a Default Protocol) -> 
news -> 4 = Restricted sites (Not a Default Protocol) -> 
nntp -> 4 = Restricted sites (Not a Default Protocol) -> 
oecmd -> 4 = Restricted sites (Not a Default Protocol) -> 
snews -> 4 = Restricted sites (Not a Default Protocol) -> 
< Protocol Handlers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ -> 
msdaipp: [HKEY_LOCAL_MACHINE] -> No CLSID value
skype4com:{FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} [HKEY_LOCAL_MACHINE] -> %CommonProgramFiles%\Skype\Skype4COM.dll[IEProtocolHandler Class] -> Skype Technologies [Ver = 1, 0, 28, 2 | Size = 1934672 bytes | Modified Date = 06/02/2008 18:37:52 | Attr = R  ]
< Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\ -> 
{166B1BCA-3F9C-11CF-8075-444553540000}[HKEY_LOCAL_MACHINE] -> http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab[Reg Error: Key does not exist or could not be opened.] -> 
{D27CDB6E-AE6D-11CF-96B8-444553540000}[HKEY_LOCAL_MACHINE] -> http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab[Shockwave Flash Object] -> 
< Module Usage Keys [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\ -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\ -> ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/Windows/Downloaded Program Files/FP_AX_CAB_INSTALLER.exe\ -> -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/Windows/Downloaded Program Files/FP_AX_CAB_INSTALLER.exe\\.Owner -> {D27CDB6E-AE6D-11CF-96B8-444553540000} -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/Windows/Downloaded Program Files/FP_AX_CAB_INSTALLER.exe\\{D27CDB6E-AE6D-11CF-96B8-444553540000} ->  -> 



[Files/Folders - Created Within 30 days]
$AVG8.VAULT$ -> %SystemDrive%\$AVG8.VAULT$ ->  [Folder | Created Date = 02/04/2008 13:56:29 | Attr =  H ]
-1765114778 -> %SystemDrive%\-1765114778 ->  [Ver =  | Size = 2 bytes | Created Date = 02/04/2008 12:37:51 | Attr =    ]
CF -> %SystemDrive%\CF ->  [Folder | Created Date = 08/04/2008 15:57:03 | Attr =    ]
ComboFix -> %SystemDrive%\ComboFix ->  [Folder | Created Date = 08/04/2008 15:47:06 | Attr =    ]
ComboFix(2) -> %SystemDrive%\ComboFix(2) ->  [Folder | Created Date = 08/04/2008 00:45:30 | Attr =    ]
d.exe -> %SystemDrive%\d.exe ->  [Ver =  | Size = 92648 bytes | Created Date = 02/04/2008 12:37:58 | Attr =    ]
hiberfil.sys -> %SystemDrive%\hiberfil.sys ->  [Ver =  | Size = 1063444480 bytes | Created Date = 08/04/2008 16:19:47 | Attr =  HS]
mxuxc.exe -> %SystemDrive%\mxuxc.exe ->  [Ver =  | Size = 59392 bytes | Created Date = 02/04/2008 12:37:44 | Attr =    ]
smp.bat -> %SystemDrive%\smp.bat ->  [Ver =  | Size = 60 bytes | Created Date = 02/04/2008 12:38:11 | Attr =    ]
vwhfxvxv.exe -> %SystemDrive%\vwhfxvxv.exe ->  [Ver =  | Size = 6144 bytes | Created Date = 02/04/2008 12:37:48 | Attr =    ]
wwigo.ini -> %SystemDrive%\wwigo.ini ->  [Ver =  | Size = 471 bytes | Created Date = 15/03/2008 06:27:02 | Attr =    ]
wwigo_other.ini -> %SystemDrive%\wwigo_other.ini ->  [Ver =  | Size = 134 bytes | Created Date = 15/03/2008 06:27:02 | Attr =    ]
dumphive.exe -> %SystemRoot%\System32\dumphive.exe ->  [Ver =  | Size = 51200 bytes | Created Date = 07/04/2008 15:40:29 | Attr =    ]
IEDFix.exe -> %SystemRoot%\System32\IEDFix.exe -> S!Ri.URZ [Ver =  | Size = 82432 bytes | Created Date = 07/04/2008 15:40:29 | Attr =    ]
msindc.dll -> %SystemRoot%\System32\msindc.dll -> MIT [Ver = 0, 1, 0, 1 | Size = 54272 bytes | Created Date = 02/04/2008 12:37:44 | Attr =    ]
Process.exe -> %SystemRoot%\System32\Process.exe -> http://www.beyondlogic.org [Ver = 2, 0, 0, 0 | Size = 53248 bytes | Created Date = 07/04/2008 15:40:29 | Attr =    ]
SrchSTS.exe -> %SystemRoot%\System32\SrchSTS.exe -> S!Ri [Ver =  | Size = 288417 bytes | Created Date = 07/04/2008 15:40:29 | Attr =    ]
SuBHhjjl.ini -> %SystemRoot%\System32\SuBHhjjl.ini ->  [Ver =  | Size = 584 bytes | Created Date = 02/04/2008 12:45:46 | Attr =  HS]
SuBHhjjl.ini2 -> %SystemRoot%\System32\SuBHhjjl.ini2 ->  [Ver =  | Size = 584 bytes | Created Date = 02/04/2008 12:45:46 | Attr =  HS]
swreg.exe -> %SystemRoot%\System32\swreg.exe -> SteelWerX [Ver = 2.0.1.0 | Size = 135168 bytes | Created Date = 07/04/2008 15:40:29 | Attr =    ]
swsc.exe -> %SystemRoot%\System32\swsc.exe ->  [Ver =  | Size = 40960 bytes | Created Date = 07/04/2008 15:40:29 | Attr =    ]
swxcacls.exe -> %SystemRoot%\System32\swxcacls.exe -> SteelWerX [Ver = 1.0.1.1 | Size = 79360 bytes | Created Date = 07/04/2008 15:40:29 | Attr =    ]
tmp.reg -> %SystemRoot%\System32\tmp.reg ->  [Ver =  | Size = 7634 bytes | Created Date = 07/04/2008 15:41:03 | Attr =    ]
VACFix.exe -> %SystemRoot%\System32\VACFix.exe -> S!Ri.URZ [Ver =  | Size = 86528 bytes | Created Date = 07/04/2008 15:40:29 | Attr =    ]
VCCLSID.exe -> %SystemRoot%\System32\VCCLSID.exe -> S!Ri [Ver =  | Size = 289144 bytes | Created Date = 07/04/2008 15:40:29 | Attr =    ]
WS2Fix.exe -> %SystemRoot%\System32\WS2Fix.exe ->  [Ver =  | Size = 25600 bytes | Created Date = 07/04/2008 15:40:29 | Attr =    ]
mozver.dat -> %SystemRoot%\mozver.dat ->  [Ver =  | Size = 1158 bytes | Created Date = 04/04/2008 16:30:51 | Attr =    ]
WirelessFTP.INI -> %SystemRoot%\WirelessFTP.INI ->  [Ver =  | Size = 98 bytes | Created Date = 30/03/2008 16:17:25 | Attr =    ]
yeTyezzd.sys -> %SystemRoot%\yeTyezzd.sys ->  [Ver =  | Size = 55956 bytes | Created Date = 02/04/2008 12:37:48 | Attr =    ]

[Files/Folders - Modified Within 30 days]
$AVG8.VAULT$ -> %SystemDrive%\$AVG8.VAULT$ ->  [Folder | Modified Date = 03/04/2008 15:48:39 | Attr =  H ]
$INPLACE.~TR -> %SystemDrive%\$INPLACE.~TR ->  [Folder | Modified Date = 04/04/2008 01:27:17 | Attr =  H ]
$Recycle.Bin -> %SystemDrive%\$Recycle.Bin ->  [Folder | Modified Date = 04/04/2008 01:27:10 | Attr =  HS]
-1765114778 -> %SystemDrive%\-1765114778 ->  [Ver =  | Size = 2 bytes | Modified Date = 02/04/2008 12:37:58 | Attr =    ]
audio -> %SystemDrive%\audio ->  [Folder | Modified Date = 04/04/2008 01:27:12 | Attr =    ]
CF -> %SystemDrive%\CF ->  [Folder | Modified Date = 08/04/2008 15:57:03 | Attr =    ]
ComboFix -> %SystemDrive%\ComboFix ->  [Folder | Modified Date = 08/04/2008 15:47:07 | Attr =    ]
ComboFix(2) -> %SystemDrive%\ComboFix(2) ->  [Folder | Modified Date = 08/04/2008 00:45:30 | Attr =    ]
d.exe -> %SystemDrive%\d.exe ->  [Ver =  | Size = 92648 bytes | Modified Date = 02/04/2008 12:38:00 | Attr =    ]
EPSON -> %SystemDrive%\EPSON ->  [Folder | Modified Date = 04/04/2008 01:27:15 | Attr =    ]
hiberfil.sys -> %SystemDrive%\hiberfil.sys ->  [Ver =  | Size = 1063444480 bytes | Modified Date = 08/04/2008 16:19:47 | Attr =  HS]
Intel -> %SystemDrive%\Intel ->  [Folder | Modified Date = 04/04/2008 01:27:10 | Attr =    ]
MSOCache -> %SystemDrive%\MSOCache ->  [Folder | Modified Date = 04/04/2008 01:26:36 | Attr = RH ]
mxuxc.exe -> %SystemDrive%\mxuxc.exe ->  [Ver =  | Size = 59392 bytes | Modified Date = 02/04/2008 12:37:45 | Attr =    ]
Program Files -> %ProgramFiles% ->  [Folder | Modified Date = 04/04/2008 15:45:17 | Attr = R  ]
ProgramData -> %AllUsersProfile% ->  [Folder | Modified Date = 04/04/2008 01:27:52 | Attr =  H ]
sites -> %SystemDrive%\sites ->  [Folder | Modified Date = 31/03/2008 22:11:59 | Attr =    ]
smp.bat -> %SystemDrive%\smp.bat ->  [Ver =  | Size = 60 bytes | Modified Date = 02/04/2008 12:38:11 | Attr =    ]
System Volume Information -> %SystemDrive%\System Volume Information ->  [Folder | Modified Date = 08/04/2008 13:23:14 | Attr =  HS]
Toshiba -> %SystemDrive%\Toshiba ->  [Folder | Modified Date = 04/04/2008 01:26:40 | Attr =    ]
Users -> %SystemDrive%\Users ->  [Folder | Modified Date = 04/04/2008 01:27:22 | Attr = R  ]
vwhfxvxv.exe -> %SystemDrive%\vwhfxvxv.exe ->  [Ver =  | Size = 6144 bytes | Modified Date = 02/04/2008 12:37:50 | Attr =    ]
Windows -> %SystemRoot% ->  [Folder | Modified Date = 07/04/2008 23:05:14 | Attr =    ]
wwigo.ini -> %SystemDrive%\wwigo.ini ->  [Ver =  | Size = 471 bytes | Modified Date = 15/03/2008 06:27:02 | Attr =    ]
wwigo_other.ini -> %SystemDrive%\wwigo_other.ini ->  [Ver =  | Size = 134 bytes | Modified Date = 15/03/2008 06:27:02 | Attr =    ]
etc -> %SystemRoot%\System32\drivers\etc ->  [Folder | Modified Date = 04/04/2008 01:28:28 | Attr =    ]
UMDF -> %SystemRoot%\System32\drivers\UMDF ->  [Folder | Modified Date = 04/04/2008 01:27:25 | Attr =    ]
Msft_User_PCCSWpdDriver_01_05_00.Wdf -> %SystemRoot%\System32\drivers\UMDF\Msft_User_PCCSWpdDriver_01_05_00.Wdf ->  [Ver =  | Size = 0 bytes | Modified Date = 30/03/2008 14:17:44 | Attr =  H ]
7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 -> %SystemRoot%\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 ->  [Ver =  | Size = 5056 bytes | Modified Date = 08/04/2008 16:19:57 | Attr =  H ]
7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 -> %SystemRoot%\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 ->  [Ver =  | Size = 5056 bytes | Modified Date = 08/04/2008 16:19:57 | Attr =  H ]
Boot -> %SystemRoot%\System32\Boot ->  [Folder | Modified Date = 04/04/2008 01:27:25 | Attr =    ]
catroot -> %SystemRoot%\System32\catroot ->  [Folder | Modified Date = 04/04/2008 01:27:25 | Attr =    ]
catroot2 -> %SystemRoot%\System32\catroot2 ->  [Folder | Modified Date = 08/04/2008 11:53:57 | Attr =    ]
CodeIntegrity -> %SystemRoot%\System32\CodeIntegrity ->  [Folder | Modified Date = 04/04/2008 01:28:28 | Attr =    ]
com -> %SystemRoot%\System32\com ->  [Folder | Modified Date = 04/04/2008 01:27:25 | Attr =    ]
config -> %SystemRoot%\System32\config ->  [Folder | Modified Date = 04/04/2008 01:31:46 | Attr =    ]
drivers -> %SystemRoot%\System32\drivers ->  [Folder | Modified Date = 04/04/2008 01:32:57 | Attr =    ]
DriverStore -> %SystemRoot%\System32\DriverStore ->  [Folder | Modified Date = 04/04/2008 01:27:25 | Attr =    ]
en-US -> %SystemRoot%\System32\en-US ->  [Folder | Modified Date = 04/04/2008 01:27:27 | Attr =    ]
IEDFix.exe -> %SystemRoot%\System32\IEDFix.exe -> S!Ri.URZ [Ver =  | Size = 82432 bytes | Modified Date = 26/03/2008 08:50:45 | Attr =    ]
IME -> %SystemRoot%\System32\IME ->  [Folder | Modified Date = 04/04/2008 01:27:27 | Attr =    ]
Lang -> %SystemRoot%\System32\Lang ->  [Folder | Modified Date = 04/04/2008 01:27:53 | Attr =    ]
licensing -> %SystemRoot%\System32\licensing ->  [Folder | Modified Date = 04/04/2008 01:27:27 | Attr =    ]
Macromed -> %SystemRoot%\System32\Macromed ->  [Folder | Modified Date = 04/04/2008 01:27:53 | Attr =    ]
migration -> %SystemRoot%\System32\migration ->  [Folder | Modified Date = 04/04/2008 01:27:27 | Attr =    ]
migwiz -> %SystemRoot%\System32\migwiz ->  [Folder | Modified Date = 04/04/2008 01:27:27 | Attr =    ]
Msdtc -> %SystemRoot%\System32\Msdtc ->  [Folder | Modified Date = 04/04/2008 01:27:27 | Attr =    ]
msindc.dll -> %SystemRoot%\System32\msindc.dll -> MIT [Ver = 0, 1, 0, 1 | Size = 54272 bytes | Modified Date = 02/04/2008 12:37:44 | Attr =    ]
MUI -> %SystemRoot%\System32\MUI ->  [Folder | Modified Date = 04/04/2008 01:27:27 | Attr =    ]
networklist -> %SystemRoot%\System32\networklist ->  [Folder | Modified Date = 04/04/2008 01:27:27 | Attr =    ]
oobe -> %SystemRoot%\System32\oobe ->  [Folder | Modified Date = 04/04/2008 01:27:27 | Attr =    ]
perfc009.dat -> %SystemRoot%\System32\perfc009.dat ->  [Ver =  | Size = 109370 bytes | Modified Date = 30/03/2008 20:48:35 | Attr =    ]
perfh009.dat -> %SystemRoot%\System32\perfh009.dat ->  [Ver =  | Size = 626246 bytes | Modified Date = 30/03/2008 20:48:35 | Attr =    ]
PerfStringBackup.INI -> %SystemRoot%\System32\PerfStringBackup.INI ->  [Ver =  | Size = 720952 bytes | Modified Date = 30/03/2008 20:48:35 | Attr =    ]
Printing_Admin_Scripts -> %SystemRoot%\System32\Printing_Admin_Scripts ->  [Folder | Modified Date = 04/04/2008 01:27:27 | Attr =    ]
RemInst -> %SystemRoot%\System32\RemInst ->  [Folder | Modified Date = 04/04/2008 01:27:27 | Attr =    ]
slmgr -> %SystemRoot%\System32\slmgr ->  [Folder | Modified Date = 04/04/2008 01:27:28 | Attr =    ]
SMI -> %SystemRoot%\System32\SMI ->  [Folder | Modified Date = 04/04/2008 01:27:28 | Attr =    ]
Speech -> %SystemRoot%\System32\Speech ->  [Folder | Modified Date = 04/04/2008 01:27:28 | Attr =    ]
spool -> %SystemRoot%\System32\spool ->  [Folder | Modified Date = 04/04/2008 01:28:29 | Attr =    ]
SuBHhjjl.ini -> %SystemRoot%\System32\SuBHhjjl.ini ->  [Ver =  | Size = 584 bytes | Modified Date = 04/04/2008 14:30:23 | Attr =  HS]
SuBHhjjl.ini2 -> %SystemRoot%\System32\SuBHhjjl.ini2 ->  [Ver =  | Size = 584 bytes | Modified Date = 04/04/2008 14:30:54 | Attr =  HS]
sysprep -> %SystemRoot%\System32\sysprep ->  [Folder | Modified Date = 04/04/2008 01:27:53 | Attr =    ]
Tasks -> %SystemRoot%\System32\Tasks ->  [Folder | Modified Date = 04/04/2008 01:28:29 | Attr =    ]
tmp.reg -> %SystemRoot%\System32\tmp.reg ->  [Ver =  | Size = 7634 bytes | Modified Date = 07/04/2008 15:41:03 | Attr =    ]
VACFix.exe -> %SystemRoot%\System32\VACFix.exe -> S!Ri.URZ [Ver =  | Size = 86528 bytes | Modified Date = 28/03/2008 23:19:34 | Attr =    ]
wbem -> %SystemRoot%\System32\wbem ->  [Folder | Modified Date = 04/04/2008 01:32:57 | Attr =    ]
WCN -> %SystemRoot%\System32\WCN ->  [Folder | Modified Date = 04/04/2008 01:27:28 | Attr =    ]
WDI -> %SystemRoot%\System32\WDI ->  [Folder | Modified Date = 02/04/2008 19:15:42 | Attr =    ]
winrm -> %SystemRoot%\System32\winrm ->  [Folder | Modified Date = 04/04/2008 01:27:28 | Attr =    ]
XPSViewer -> %SystemRoot%\System32\XPSViewer ->  [Folder | Modified Date = 04/04/2008 01:27:28 | Attr =    ]
AppPatch -> %SystemRoot%\AppPatch ->  [Folder | Modified Date = 04/04/2008 01:27:22 | Attr =    ]
1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> 
assembly -> %SystemRoot%\assembly ->  [Folder | Modified Date = 04/04/2008 01:27:22 | Attr = R S]
Boot -> %SystemRoot%\Boot ->  [Folder | Modified Date = 04/04/2008 01:27:23 | Attr =    ]
bootstat.dat -> %SystemRoot%\bootstat.dat ->  [Ver =  | Size = 67584 bytes | Modified Date = 08/04/2008 16:19:50 | Attr =   S]
Branding -> %SystemRoot%\Branding ->  [Folder | Modified Date = 04/04/2008 01:27:23 | Attr =    ]
DigitalLocker -> %SystemRoot%\DigitalLocker ->  [Folder | Modified Date = 04/04/2008 01:27:23 | Attr =    ]
Downloaded Installations -> %SystemRoot%\Downloaded Installations ->  [Folder | Modified Date = 04/04/2008 01:27:52 | Attr =    ]
ehome -> %SystemRoot%\ehome ->  [Folder | Modified Date = 04/04/2008 01:27:23 | Attr =    ]
Help -> %SystemRoot%\Help ->  [Folder | Modified Date = 04/04/2008 01:27:52 | Attr =    ]
IME -> %SystemRoot%\IME ->  [Folder | Modified Date = 04/04/2008 01:27:24 | Attr =    ]
inf -> %SystemRoot%\inf ->  [Folder | Modified Date = 04/04/2008 01:28:28 | Attr =    ]
Installer -> %SystemRoot%\Installer ->  [Folder | Modified Date = 04/04/2008 14:02:15 | Attr =  HS]
Logs -> %SystemRoot%\Logs ->  [Folder | Modified Date = 04/04/2008 01:17:55 | Attr =    ]
Microsoft.NET -> %SystemRoot%\Microsoft.NET ->  [Folder | Modified Date = 04/04/2008 01:27:52 | Attr =    ]
mozver.dat -> %SystemRoot%\mozver.dat ->  [Ver =  | Size = 1158 bytes | Modified Date = 04/04/2008 16:30:53 | Attr =    ]
MSAgent -> %SystemRoot%\MSAgent ->  [Folder | Modified Date = 04/04/2008 01:27:24 | Attr =    ]
Performance -> %SystemRoot%\Performance ->  [Folder | Modified Date = 04/04/2008 01:27:24 | Attr =    ]
PLA -> %SystemRoot%\PLA ->  [Folder | Modified Date = 04/04/2008 01:27:24 | Attr =    ]
PolicyDefinitions -> %SystemRoot%\PolicyDefinitions ->  [Folder | Modified Date = 04/04/2008 01:27:24 | Attr =    ]
Prefetch -> %SystemRoot%\Prefetch ->  [Folder | Modified Date = 08/04/2008 17:04:22 | Attr =    ]
Provisioning -> %SystemRoot%\Provisioning ->  [Folder | Modified Date = 04/04/2008 01:27:24 | Attr =    ]
QTFont.qfn -> %SystemRoot%\QTFont.qfn ->  [Ver =  | Size = 54156 bytes | Modified Date = 08/04/2008 16:21:08 | Attr =  H ]
registration -> %SystemRoot%\registration ->  [Folder | Modified Date = 04/04/2008 01:27:57 | Attr =    ]
Resources -> %SystemRoot%\Resources ->  [Folder | Modified Date = 04/04/2008 01:27:24 | Attr =    ]
schemas -> %SystemRoot%\schemas ->  [Folder | Modified Date = 04/04/2008 01:27:25 | Attr =    ]
security -> %SystemRoot%\security ->  [Folder | Modified Date = 04/04/2008 01:27:25 | Attr =    ]
ServiceProfiles -> %SystemRoot%\ServiceProfiles ->  [Folder | Modified Date = 04/04/2008 01:27:25 | Attr =    ]
servicing -> %SystemRoot%\servicing ->  [Folder | Modified Date = 04/04/2008 01:32:57 | Attr =    ]
Setup -> %SystemRoot%\Setup ->  [Folder | Modified Date = 04/04/2008 01:27:53 | Attr =    ]
Speech -> %SystemRoot%\Speech ->  [Folder | Modified Date = 04/04/2008 01:27:25 | Attr =    ]
system -> %SystemRoot%\system ->  [Folder | Modified Date = 04/04/2008 01:28:29 | Attr =    ]
System32 -> %SystemRoot%\System32 ->  [Folder | Modified Date = 08/04/2008 15:57:03 | Attr =    ]
Tasks -> %SystemRoot%\Tasks ->  [Folder | Modified Date = 04/04/2008 01:28:29 | Attr =    ]
Temp -> %SystemRoot%\Temp ->  [Folder | Modified Date = 08/04/2008 17:04:15 | Attr =    ]
Web -> %SystemRoot%\Web ->  [Folder | Modified Date = 04/04/2008 01:27:28 | Attr =    ]
WindowsMobile -> %SystemRoot%\WindowsMobile ->  [Folder | Modified Date = 04/04/2008 01:27:28 | Attr =    ]
winsxs -> %SystemRoot%\winsxs ->  [Folder | Modified Date = 04/04/2008 01:27:42 | Attr =    ]
WirelessFTP.INI -> %SystemRoot%\WirelessFTP.INI ->  [Ver =  | Size = 98 bytes | Modified Date = 30/03/2008 16:17:25 | Attr =    ]
yeTyezzd.sys -> %SystemRoot%\yeTyezzd.sys ->  [Ver =  | Size = 55956 bytes | Modified Date = 02/04/2008 12:37:48 | Attr =    ]
Norton Internet Security - Run Full System Scan - maxwell.job -> %SystemRoot%\tasks\Norton Internet Security - Run Full System Scan - maxwell.job ->  [Ver =  | Size = 492 bytes | Modified Date = 21/03/2008 21:02:23 | Attr =    ]
SA.DAT -> %SystemRoot%\tasks\SA.DAT ->  [Ver =  | Size = 6 bytes | Modified Date = 08/04/2008 16:19:53 | Attr =  H ]
capilock.dat -> C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\capilock.dat ->  [Ver =  | Size = 8 bytes | Modified Date = 13/03/2007 01:42:44 | Attr =    ]
qmgr0.dat -> C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat ->  [Ver =  | Size = 11707 bytes | Modified Date = 08/04/2008 11:42:14 | Attr =    ]
qmgr1.dat -> C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat ->  [Ver =  | Size = 9404 bytes | Modified Date = 08/04/2008 11:42:14 | Attr =    ]
opa11.dat -> C:\ProgramData\Microsoft\OFFICE\DATA\opa11.dat ->  [Ver =  | Size = 11144 bytes | Modified Date = 20/07/2007 17:09:27 | Attr =    ]
mspi11.dat -> C:\ProgramData\Microsoft\PI\mspi11.dat ->  [Ver =  | Size = 4 bytes | Modified Date = 10/03/2007 21:50:27 | Attr =    ]
mspod11.dat -> C:\ProgramData\Microsoft\POD\mspod11.dat ->  [Ver =  | Size = 4 bytes | Modified Date = 10/03/2007 21:50:27 | Attr =    ]
PublishedRacMonAFLTable.DAT -> C:\ProgramData\Microsoft\RAC\PublishedData\PublishedRacMonAFLTable.DAT ->  [Ver =  | Size = 34776 bytes | Modified Date = 08/04/2008 00:20:17 | Attr =    ]
PublishedRacMonCLKTable.DAT -> C:\ProgramData\Microsoft\RAC\PublishedData\PublishedRacMonCLKTable.DAT ->  [Ver =  | Size = 0 bytes | Modified Date = 08/04/2008 00:20:17 | Attr =    ]
PublishedRacMonHFLTable.DAT -> C:\ProgramData\Microsoft\RAC\PublishedData\PublishedRacMonHFLTable.DAT ->  [Ver =  | Size = 0 bytes | Modified Date = 08/04/2008 00:20:17 | Attr =    ]
PublishedRacMonIndex.DAT -> C:\ProgramData\Microsoft\RAC\PublishedData\PublishedRacMonIndex.DAT ->  [Ver =  | Size = 8760 bytes | Modified Date = 08/04/2008 00:20:17 | Attr =    ]
PublishedRacMonOSFTable.DAT -> C:\ProgramData\Microsoft\RAC\PublishedData\PublishedRacMonOSFTable.DAT ->  [Ver =  | Size = 1656 bytes | Modified Date = 08/04/2008 00:20:17 | Attr =    ]
PublishedRacMonSWITable.DAT -> C:\ProgramData\Microsoft\RAC\PublishedData\PublishedRacMonSWITable.DAT ->  [Ver =  | Size = 128652 bytes | Modified Date = 08/04/2008 00:20:17 | Attr =    ]
maxwell.dat -> C:\ProgramData\Microsoft\User Account Pictures\maxwell.dat ->  [Ver =  | Size = 0 bytes | Modified Date = 13/03/2007 00:50:19 | Attr =    ]
wkcalcat.dat -> C:\ProgramData\Microsoft\Works\wkcalcat.dat ->  [Ver =  | Size = 16384 bytes | Modified Date = 20/07/2007 16:55:23 | Attr =    ]
wklntsk1.dat -> C:\ProgramData\Microsoft\Works\wklntsk1.dat ->  [Ver =  | Size = 155262 bytes | Modified Date = 20/07/2007 16:56:02 | Attr =    ]
A34F7-tmpa-install.exe -> C:\Users\maxwell\AppData\Local\Temp\A34F7-tmpa-install.exe ->  [Ver =  | Size = 251392 bytes | Modified Date = 02/04/2008 12:38:11 | Attr =    ]
SSUPDATE.EXE -> C:\Users\maxwell\AppData\Local\Temp\SSUPDATE.EXE -> SUPERAntiSpyware.com [Ver = 1, 0, 0, 1030 | Size = 146672 bytes | Modified Date = 29/02/2008 16:03:44 | Attr =    ]
symlcsv1.exe -> C:\Users\maxwell\AppData\Local\Temp\symlcsv1.exe ->  [Ver =  | Size = 58760 bytes | Modified Date = 02/04/2008 12:53:02 | Attr =    ]
webinstaller_1_6.exe -> C:\Users\maxwell\AppData\Local\Temp\webinstaller_1_6.exe ->  [Ver =  | Size = 2121103 bytes | Modified Date = 30/03/2008 14:09:55 | Attr =    ]
52 C:\Users\maxwell\AppData\Local\Temp\*.tmp files -> C:\Users\maxwell\AppData\Local\Temp\*.tmp -> 
NokiaInstaller.exe -> C:\Users\maxwell\AppData\Local\Temp\7zSFE1C.tmp\NokiaInstaller.exe ->  [Ver = 1.6.33.0 | Size = 2179072 bytes | Modified Date = 20/09/2007 02:18:52 | Attr =    ]
atl.exe -> C:\Users\maxwell\AppData\Local\Temp\mia1\atl.exe -> Microsoft Corporation [Ver = 5.00.2516.1900 | Size = 142608 bytes | Modified Date = 03/06/1999 06:47:56 | Attr =    ]
NSLauncher_setup_1.6.80.exe -> C:\Users\maxwell\AppData\Local\Temp\Nokia NSeries Update Manager\n-launcher\NSLauncher_setup_1.6.80.exe ->  [Ver =  | Size = 17075109 bytes | Modified Date = 30/03/2008 14:14:18 | Attr =    ]
Nokia_Lifeblog_2_5_224_en_uk.exe -> C:\Users\maxwell\AppData\Local\Temp\Nokia NSeries Update Manager\n-lifeblog\Nokia_Lifeblog_2_5_224_en_uk.exe ->  [Ver =  | Size = 17670869 bytes | Modified Date = 30/03/2008 14:15:59 | Attr =    ]
NokiaSoftwareUpdaterSetup_1.3.85EN.exe -> C:\Users\maxwell\AppData\Local\Temp\Nokia NSeries Update Manager\n-nsu\NokiaSoftwareUpdaterSetup_1.3.85EN.exe -> Nokia Corporation                                          [Ver = 01.03.085.28569                               | Size = 23594184 bytes | Modified Date = 30/03/2008 14:18:20 | Attr =    ]
Uninstal.exe -> C:\Users\maxwell\AppData\Local\Temp\Temp1_PC-300_Xp2k.zip\PC-300_Xp2k\Uninstal.exe -> Roland Corporation [Ver = 1, 0, 1, 0 | Size = 196608 bytes | Modified Date = 08/05/2006 20:23:16 | Attr =    ]
AcsInstall.dll -> C:\Users\maxwell\AppData\Local\Temp\AcsInstall.dll -> AOL LLC [Ver = 4.7.14.1              | Size = 149040 bytes | Modified Date = 13/04/2007 18:29:55 | Attr =    ]
epurcukver20.dll -> C:\Users\maxwell\AppData\Local\Temp\epurcukver20.dll -> eBay Inc. [Ver = 1, 0, 3, 1 | Size = 159744 bytes | Modified Date = 15/09/2005 16:18:50 | Attr =    ]
NEventMessages.dll -> C:\Users\maxwell\AppData\Local\Temp\NEventMessages.dll ->  [Ver =  | Size = 1536 bytes | Modified Date = 30/03/2008 14:10:23 | Attr =    ]
SHFOLDER.DLL -> C:\Users\maxwell\AppData\Local\Temp\SHFOLDER.DLL -> Microsoft Corporation [Ver = 6.00.2800.1106 (xpsp1.020828-1920) | Size = 22528 bytes | Modified Date = 23/10/2003 19:27:52 | Attr =    ]
uninst.dll -> C:\Users\maxwell\AppData\Local\Temp\uninst.dll ->  [Ver =  | Size = 110592 bytes | Modified Date = 23/04/2003 20:33:16 | Attr =    ]
52 C:\Users\maxwell\AppData\Local\Temp\*.tmp files -> C:\Users\maxwell\AppData\Local\Temp\*.tmp -> 
FindBtVendor.dll -> C:\Users\maxwell\AppData\Local\Temp\eInspect\FindBtVendor.dll ->  [Ver =  | Size = 94208 bytes | Modified Date = 15/03/2008 06:27:00 | Attr =    ]
epurcukver20.dll -> C:\Users\maxwell\AppData\Local\Temp\Low\epurcukver20.dll -> eBay Inc. [Ver = 1, 0, 3, 1 | Size = 159744 bytes | Modified Date = 15/09/2005 15:18:50 | Attr =    ]
31 C:\Users\maxwell\AppData\Local\Temp\Low\*.tmp files -> C:\Users\maxwell\AppData\Local\Temp\Low\*.tmp -> 
DHL_SMWMIZLWIH.dll -> C:\Users\maxwell\AppData\Local\Temp\Low\DHLJavaMediaPlayer\DHL_SMWMIZLWIH.dll ->  [Ver =  | Size = 331776 bytes | Modified Date = 11/09/2007 22:52:10 | Attr =    ]
mDXExec.dll -> C:\Users\maxwell\AppData\Local\Temp\mia1\mDXExec.dll ->  [Ver =  | Size = 381952 bytes | Modified Date = 14/07/2006 01:58:03 | Attr =    ]
mMFCExec.dll -> C:\Users\maxwell\AppData\Local\Temp\mia1\mMFCExec.dll ->  [Ver =  | Size = 382976 bytes | Modified Date = 14/07/2006 01:57:51 | Attr =    ]
mMSIExec.dll -> C:\Users\maxwell\AppData\Local\Temp\mia1\mMSIExec.dll ->  [Ver =  | Size = 412672 bytes | Modified Date = 14/07/2006 01:57:37 | Attr =    ]
mVBExec.dll -> C:\Users\maxwell\AppData\Local\Temp\mia1\mVBExec.dll ->  [Ver =  | Size = 382976 bytes | Modified Date = 14/07/2006 01:57:32 | Attr =    ]
mWinRunExec.dll -> C:\Users\maxwell\AppData\Local\Temp\mia1\mWinRunExec.dll ->  [Ver =  | Size = 385536 bytes | Modified Date = 14/07/2006 01:58:21 | Attr =    ]
mWMFExec.dll -> C:\Users\maxwell\AppData\Local\Temp\mia1\mWMFExec.dll ->  [Ver =  | Size = 382464 bytes | Modified Date = 14/07/2006 01:57:44 | Attr =    ]
RDCI1008.DLL -> C:\Users\maxwell\AppData\Local\Temp\Temp1_PC-300_Xp2k.zip\PC-300_Xp2k\RDCI1008.DLL ->  [Ver =  | Size = 10886 bytes | Modified Date = 08/05/2006 20:24:06 | Attr =    ]
EPS_PicLookup.dat -> C:\Users\maxwell\AppData\Local\Temp\EPS_PicLookup.dat ->  [Ver =  | Size = 131 bytes | Modified Date = 10/02/2008 19:57:09 | Attr =    ]
srtspse.dat -> C:\Users\maxwell\AppData\Local\Temp\srtspse.dat ->  [Ver =  | Size = 588 bytes | Modified Date = 11/02/2008 22:24:42 | Attr =    ]
srtspso.dat -> C:\Users\maxwell\AppData\Local\Temp\srtspso.dat ->  [Ver =  | Size = 2204 bytes | Modified Date = 11/02/2008 22:24:42 | Attr =    ]
srtspsp.dat -> C:\Users\maxwell\AppData\Local\Temp\srtspsp.dat ->  [Ver =  | Size = 524 bytes | Modified Date = 11/02/2008 22:24:42 | Attr =    ]
52 C:\Users\maxwell\AppData\Local\Temp\*.tmp files -> C:\Users\maxwell\AppData\Local\Temp\*.tmp -> 
fil5DDD55F1.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\fil5DDD55F1.dat ->  [Ver =  | Size = 223 bytes | Modified Date = 03/04/2008 03:01:15 | Attr =    ]
fil7FD722A4.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\fil7FD722A4.dat ->  [Ver =  | Size = 13360 bytes | Modified Date = 03/04/2008 03:01:15 | Attr =    ]
fil9DA28AE9.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\fil9DA28AE9.dat ->  [Ver =  | Size = 13315 bytes | Modified Date = 03/04/2008 03:01:15 | Attr =    ]
fil9FB9CD91.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\fil9FB9CD91.dat ->  [Ver =  | Size = 13309 bytes | Modified Date = 03/04/2008 03:01:15 | Attr =    ]
filA14B3FA4.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\filA14B3FA4.dat ->  [Ver =  | Size = 13301 bytes | Modified Date = 03/04/2008 03:01:15 | Attr =    ]
filA2DCB1C9.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\filA2DCB1C9.dat ->  [Ver =  | Size = 13295 bytes | Modified Date = 03/04/2008 03:01:15 | Attr =    ]
filA46E2400.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\filA46E2400.dat ->  [Ver =  | Size = 13268 bytes | Modified Date = 03/04/2008 03:01:15 | Attr =    ]
filA5FF9649.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\filA5FF9649.dat ->  [Ver =  | Size = 13240 bytes | Modified Date = 03/04/2008 03:01:15 | Attr =    ]
filABBF8F44.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\filABBF8F44.dat ->  [Ver =  | Size = 13235 bytes | Modified Date = 03/04/2008 03:01:15 | Attr =    ]
filADD6D2C4.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\filADD6D2C4.dat ->  [Ver =  | Size = 13207 bytes | Modified Date = 03/04/2008 03:01:15 | Attr =    ]
filAFEE1664.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\filAFEE1664.dat ->  [Ver =  | Size = 13158 bytes | Modified Date = 03/04/2008 03:01:15 | Attr =    ]
filB17F8931.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\filB17F8931.dat ->  [Ver =  | Size = 13143 bytes | Modified Date = 03/04/2008 03:01:15 | Attr =    ]
filB310FC10.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\filB310FC10.dat ->  [Ver =  | Size = 13119 bytes | Modified Date = 03/04/2008 03:01:15 | Attr =    ]
filB4A26F01.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\filB4A26F01.dat ->  [Ver =  | Size = 13044 bytes | Modified Date = 03/04/2008 03:01:15 | Attr =    ]
filB633E204.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\filB633E204.dat ->  [Ver =  | Size = 13008 bytes | Modified Date = 03/04/2008 03:01:15 | Attr =    ]
filB7C55519.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\filB7C55519.dat ->  [Ver =  | Size = 12979 bytes | Modified Date = 03/04/2008 03:01:15 | Attr =    ]
filB97C9AC4.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\filB97C9AC4.dat ->  [Ver =  | Size = 27986 bytes | Modified Date = 03/04/2008 03:01:16 | Attr =    ]
filB9DC9951.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\filB9DC9951.dat ->  [Ver =  | Size = 12955 bytes | Modified Date = 03/04/2008 03:01:15 | Attr =    ]
filBDC539E9.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\filBDC539E9.dat ->  [Ver =  | Size = 223 bytes | Modified Date = 03/04/2008 03:01:14 | Attr =    ]
filC12E0911.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\filC12E0911.dat ->  [Ver =  | Size = 12952 bytes | Modified Date = 03/04/2008 03:01:15 | Attr =    ]
filC5E26400.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\filC5E26400.dat ->  [Ver =  | Size = 12891 bytes | Modified Date = 03/04/2008 03:01:15 | Attr =    ]
filC7F9A910.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\filC7F9A910.dat ->  [Ver =  | Size = 12837 bytes | Modified Date = 03/04/2008 03:01:15 | Attr =    ]
filC98B1CF1.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\filC98B1CF1.dat ->  [Ver =  | Size = 12795 bytes | Modified Date = 03/04/2008 03:01:15 | Attr =    ]
filCB1C90E4.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\filCB1C90E4.dat ->  [Ver =  | Size = 12748 bytes | Modified Date = 03/04/2008 03:01:15 | Attr =    ]
filCD33D644.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\filCD33D644.dat ->  [Ver =  | Size = 12726 bytes | Modified Date = 03/04/2008 03:01:15 | Attr =    ]
filCEC54A61.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\filCEC54A61.dat ->  [Ver =  | Size = 12569 bytes | Modified Date = 03/04/2008 03:01:15 | Attr =    ]
filD056BE90.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\filD056BE90.dat ->  [Ver =  | Size = 12394 bytes | Modified Date = 03/04/2008 03:01:15 | Attr =    ]
filD26E0440.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\filD26E0440.dat ->  [Ver =  | Size = 12217 bytes | Modified Date = 03/04/2008 03:01:15 | Attr =    ]
filEEA83D44.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_quarantine\filEEA83D44.dat ->  [Ver =  | Size = 333811 bytes | Modified Date = 03/04/2008 03:01:16 | Attr =    ]
ewido001.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido001.dat ->  [Ver =  | Size = 4362930 bytes | Modified Date = 03/04/2008 01:56:13 | Attr =    ]
ewido002.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido002.dat ->  [Ver =  | Size = 1782 bytes | Modified Date = 03/04/2008 01:56:13 | Attr =    ]
ewido003.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido003.dat ->  [Ver =  | Size = 12634 bytes | Modified Date = 03/04/2008 01:56:13 | Attr =    ]
ewido004.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido004.dat ->  [Ver =  | Size = 1227 bytes | Modified Date = 03/04/2008 01:56:13 | Attr =    ]
ewido005.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido005.dat ->  [Ver =  | Size = 8090 bytes | Modified Date = 03/04/2008 01:56:13 | Attr =    ]
ewido006.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido006.dat ->  [Ver =  | Size = 961 bytes | Modified Date = 03/04/2008 01:56:13 | Attr =    ]
ewido007.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido007.dat ->  [Ver =  | Size = 4122 bytes | Modified Date = 03/04/2008 01:56:13 | Attr =    ]
ewido008.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido008.dat ->  [Ver =  | Size = 3676 bytes | Modified Date = 03/04/2008 01:56:13 | Attr =    ]
ewido009.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido009.dat ->  [Ver =  | Size = 3002 bytes | Modified Date = 03/04/2008 01:56:13 | Attr =    ]
ewido010.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido010.dat ->  [Ver =  | Size = 22815 bytes | Modified Date = 03/04/2008 01:56:13 | Attr =    ]
ewido011.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido011.dat ->  [Ver =  | Size = 9480 bytes | Modified Date = 03/04/2008 01:56:13 | Attr =    ]
ewido012.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido012.dat ->  [Ver =  | Size = 5101 bytes | Modified Date = 03/04/2008 01:56:13 | Attr =    ]
ewido013.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido013.dat ->  [Ver =  | Size = 8541 bytes | Modified Date = 03/04/2008 01:56:13 | Attr =    ]
ewido014.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido014.dat ->  [Ver =  | Size = 18143 bytes | Modified Date = 03/04/2008 01:56:13 | Attr =    ]
ewido015.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido015.dat ->  [Ver =  | Size = 8106 bytes | Modified Date = 03/04/2008 01:56:13 | Attr =    ]
ewido016.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido016.dat ->  [Ver =  | Size = 812 bytes | Modified Date = 03/04/2008 01:56:13 | Attr =    ]
ewido017.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido017.dat ->  [Ver =  | Size = 10536 bytes | Modified Date = 03/04/2008 01:56:13 | Attr =    ]
ewido018.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido018.dat ->  [Ver =  | Size = 10310 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido019.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido019.dat ->  [Ver =  | Size = 6054 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido020.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido020.dat ->  [Ver =  | Size = 4907 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido021.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido021.dat ->  [Ver =  | Size = 1209 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido022.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido022.dat ->  [Ver =  | Size = 422 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido023.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido023.dat ->  [Ver =  | Size = 8971 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido024.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido024.dat ->  [Ver =  | Size = 10348 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido025.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido025.dat ->  [Ver =  | Size = 6183 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido026.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido026.dat ->  [Ver =  | Size = 7496 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido027.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido027.dat ->  [Ver =  | Size = 183 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido028.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido028.dat ->  [Ver =  | Size = 10863 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido029.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido029.dat ->  [Ver =  | Size = 1477 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido030.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido030.dat ->  [Ver =  | Size = 8724 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido031.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido031.dat ->  [Ver =  | Size = 1892 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido032.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido032.dat ->  [Ver =  | Size = 11405 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido033.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido033.dat ->  [Ver =  | Size = 9527 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido034.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido034.dat ->  [Ver =  | Size = 5448 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido035.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido035.dat ->  [Ver =  | Size = 9117 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido036.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido036.dat ->  [Ver =  | Size = 5052 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido037.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido037.dat ->  [Ver =  | Size = 8893 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido038.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido038.dat ->  [Ver =  | Size = 5395 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido039.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido039.dat ->  [Ver =  | Size = 11469 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido040.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido040.dat ->  [Ver =  | Size = 2585 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido041.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido041.dat ->  [Ver =  | Size = 9966 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido042.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido042.dat ->  [Ver =  | Size = 1067 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido043.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido043.dat ->  [Ver =  | Size = 4727 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido044.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido044.dat ->  [Ver =  | Size = 8404 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido045.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido045.dat ->  [Ver =  | Size = 20452 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido046.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido046.dat ->  [Ver =  | Size = 7850 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido047.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido047.dat ->  [Ver =  | Size = 7614 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido048.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido048.dat ->  [Ver =  | Size = 2550 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido049.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido049.dat ->  [Ver =  | Size = 8367 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido050.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido050.dat ->  [Ver =  | Size = 2116 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido051.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido051.dat ->  [Ver =  | Size = 351 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido052.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido052.dat ->  [Ver =  | Size = 10618 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido053.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido053.dat ->  [Ver =  | Size = 1635 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido054.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido054.dat ->  [Ver =  | Size = 10702 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido055.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido055.dat ->  [Ver =  | Size = 7137 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido056.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido056.dat ->  [Ver =  | Size = 34977 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido057.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido057.dat ->  [Ver =  | Size = 14018 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido058.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido058.dat ->  [Ver =  | Size = 8696 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido059.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido059.dat ->  [Ver =  | Size = 8714 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido060.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido060.dat ->  [Ver =  | Size = 698 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido061.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido061.dat ->  [Ver =  | Size = 7958 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido062.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido062.dat ->  [Ver =  | Size = 7040 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido063.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido063.dat ->  [Ver =  | Size = 1568 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido064.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido064.dat ->  [Ver =  | Size = 3170 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido065.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido065.dat ->  [Ver =  | Size = 9869 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido066.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido066.dat ->  [Ver =  | Size = 1561 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido067.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido067.dat ->  [Ver =  | Size = 6970 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido068.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido068.dat ->  [Ver =  | Size = 22700 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido069.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido069.dat ->  [Ver =  | Size = 8463 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido070.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido070.dat ->  [Ver =  | Size = 5282 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido071.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido071.dat ->  [Ver =  | Size = 2218 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido072.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido072.dat ->  [Ver =  | Size = 8159 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido073.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido073.dat ->  [Ver =  | Size = 58006 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido074.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido074.dat ->  [Ver =  | Size = 6765 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido075.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido075.dat ->  [Ver =  | Size = 714 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido076.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido076.dat ->  [Ver =  | Size = 4418 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido077.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido077.dat ->  [Ver =  | Size = 10660 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido078.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido078.dat ->  [Ver =  | Size = 840 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido079.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido079.dat ->  [Ver =  | Size = 16823 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido080.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido080.dat ->  [Ver =  | Size = 1025 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido081.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido081.dat ->  [Ver =  | Size = 9681 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido082.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido082.dat ->  [Ver =  | Size = 1419 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido083.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido083.dat ->  [Ver =  | Size = 16743 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido084.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido084.dat ->  [Ver =  | Size = 11382 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido085.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido085.dat ->  [Ver =  | Size = 11968 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido086.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido086.dat ->  [Ver =  | Size = 4856 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido087.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido087.dat ->  [Ver =  | Size = 1013 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido088.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido088.dat ->  [Ver =  | Size = 11953 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido089.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido089.dat ->  [Ver =  | Size = 41639 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido090.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido090.dat ->  [Ver =  | Size = 2135 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido091.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido091.dat ->  [Ver =  | Size = 8166 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido092.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido092.dat ->  [Ver =  | Size = 745 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido093.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido093.dat ->  [Ver =  | Size = 7328 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido094.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido094.dat ->  [Ver =  | Size = 2142 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido095.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido095.dat ->  [Ver =  | Size = 66551 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido096.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido096.dat ->  [Ver =  | Size = 18669 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido097.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido097.dat ->  [Ver =  | Size = 7390 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido098.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido098.dat ->  [Ver =  | Size = 8173 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido099.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido099.dat ->  [Ver =  | Size = 10580 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido100.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido100.dat ->  [Ver =  | Size = 5051 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido101.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido101.dat ->  [Ver =  | Size = 432 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido102.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido102.dat ->  [Ver =  | Size = 9033 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido103.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido103.dat ->  [Ver =  | Size = 4958 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido104.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido104.dat ->  [Ver =  | Size = 8589 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido105.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido105.dat ->  [Ver =  | Size = 1031 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido106.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido106.dat ->  [Ver =  | Size = 315 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido107.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido107.dat ->  [Ver =  | Size = 1272 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido108.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido108.dat ->  [Ver =  | Size = 7881 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido109.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido109.dat ->  [Ver =  | Size = 350 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido110.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido110.dat ->  [Ver =  | Size = 2461 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido111.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido111.dat ->  [Ver =  | Size = 17093 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido112.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido112.dat ->  [Ver =  | Size = 8139 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido113.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido113.dat ->  [Ver =  | Size = 8551 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido114.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido114.dat ->  [Ver =  | Size = 993 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido115.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido115.dat ->  [Ver =  | Size = 9871 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido116.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido116.dat ->  [Ver =  | Size = 1054 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido117.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido117.dat ->  [Ver =  | Size = 9233 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido118.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido118.dat ->  [Ver =  | Size = 1085 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido119.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido119.dat ->  [Ver =  | Size = 431 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido120.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido120.dat ->  [Ver =  | Size = 10086 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido121.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido121.dat ->  [Ver =  | Size = 766 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido122.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido122.dat ->  [Ver =  | Size = 1574 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido123.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido123.dat ->  [Ver =  | Size = 5833 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido124.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido124.dat ->  [Ver =  | Size = 933 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido125.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido125.dat ->  [Ver =  | Size = 1164 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido126.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido126.dat ->  [Ver =  | Size = 8406 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido127.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido127.dat ->  [Ver =  | Size = 22246 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido128.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido128.dat ->  [Ver =  | Size = 4540 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido129.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido129.dat ->  [Ver =  | Size = 2743 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido130.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido130.dat ->  [Ver =  | Size = 390 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido131.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido131.dat ->  [Ver =  | Size = 10345 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido132.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido132.dat ->  [Ver =  | Size = 4080 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido133.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido133.dat ->  [Ver =  | Size = 2193 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido134.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido134.dat ->  [Ver =  | Size = 6977 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido135.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido135.dat ->  [Ver =  | Size = 10734 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido136.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido136.dat ->  [Ver =  | Size = 862 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido137.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido137.dat ->  [Ver =  | Size = 6013 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido138.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido138.dat ->  [Ver =  | Size = 896 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido139.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido139.dat ->  [Ver =  | Size = 1728 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido140.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido140.dat ->  [Ver =  | Size = 36125 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido141.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido141.dat ->  [Ver =  | Size = 5008 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido142.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido142.dat ->  [Ver =  | Size = 7058 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido143.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido143.dat ->  [Ver =  | Size = 2068 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido144.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido144.dat ->  [Ver =  | Size = 624 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido145.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido145.dat ->  [Ver =  | Size = 6473 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido146.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido146.dat ->  [Ver =  | Size = 153484 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido147.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido147.dat ->  [Ver =  | Size = 1281 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido148.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido148.dat ->  [Ver =  | Size = 527 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido149.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido149.dat ->  [Ver =  | Size = 1459 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido150.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido150.dat ->  [Ver =  | Size = 28936 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido151.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido151.dat ->  [Ver =  | Size = 10872 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido152.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido152.dat ->  [Ver =  | Size = 556 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido153.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido153.dat ->  [Ver =  | Size = 43619 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido154.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido154.dat ->  [Ver =  | Size = 1174 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido155.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido155.dat ->  [Ver =  | Size = 16405 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido156.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido156.dat ->  [Ver =  | Size = 45669 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido157.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido157.dat ->  [Ver =  | Size = 6428 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido158.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido158.dat ->  [Ver =  | Size = 56909 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido159.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido159.dat ->  [Ver =  | Size = 40978 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido160.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido160.dat ->  [Ver =  | Size = 6442 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido161.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido161.dat ->  [Ver =  | Size = 7710 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido162.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido162.dat ->  [Ver =  | Size = 8613 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido163.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido163.dat ->  [Ver =  | Size = 852 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido164.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido164.dat ->  [Ver =  | Size = 1138 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido165.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido165.dat ->  [Ver =  | Size = 8288 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido166.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido166.dat ->  [Ver =  | Size = 2421 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido167.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido167.dat ->  [Ver =  | Size = 6377 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido168.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido168.dat ->  [Ver =  | Size = 2340 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido169.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido169.dat ->  [Ver =  | Size = 494 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido170.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido170.dat ->  [Ver =  | Size = 6472 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido171.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido171.dat ->  [Ver =  | Size = 594 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido172.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido172.dat ->  [Ver =  | Size = 804 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido173.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido173.dat ->  [Ver =  | Size = 339 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido174.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido174.dat ->  [Ver =  | Size = 1753 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido175.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido175.dat ->  [Ver =  | Size = 1766 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido176.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido176.dat ->  [Ver =  | Size = 526 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido177.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido177.dat ->  [Ver =  | Size = 455 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido178.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido178.dat ->  [Ver =  | Size = 286 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido179.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido179.dat ->  [Ver =  | Size = 19493 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido180.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido180.dat ->  [Ver =  | Size = 406 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido181.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido181.dat ->  [Ver =  | Size = 2171 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido182.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido182.dat ->  [Ver =  | Size = 9752 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido183.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido183.dat ->  [Ver =  | Size = 2310 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido184.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido184.dat ->  [Ver =  | Size = 7353 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido185.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido185.dat ->  [Ver =  | Size = 620 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido186.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido186.dat ->  [Ver =  | Size = 911 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido187.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido187.dat ->  [Ver =  | Size = 8720 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido188.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido188.dat ->  [Ver =  | Size = 1637 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido189.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido189.dat ->  [Ver =  | Size = 49770 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido190.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido190.dat ->  [Ver =  | Size = 49732 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido191.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido191.dat ->  [Ver =  | Size = 241 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido192.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido192.dat ->  [Ver =  | Size = 1740 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido193.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido193.dat ->  [Ver =  | Size = 44627 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido194.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido194.dat ->  [Ver =  | Size = 24792 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido195.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido195.dat ->  [Ver =  | Size = 8458 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido196.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido196.dat ->  [Ver =  | Size = 14566 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido197.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido197.dat ->  [Ver =  | Size = 12706 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido198.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido198.dat ->  [Ver =  | Size = 208 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido199.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido199.dat ->  [Ver =  | Size = 6019 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido200.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido200.dat ->  [Ver =  | Size = 8417 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido201.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido201.dat ->  [Ver =  | Size = 417 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido202.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido202.dat ->  [Ver =  | Size = 7655 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido203.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido203.dat ->  [Ver =  | Size = 1104 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido204.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido204.dat ->  [Ver =  | Size = 8438 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido205.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido205.dat ->  [Ver =  | Size = 6140 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido206.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido206.dat ->  [Ver =  | Size = 21270 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido207.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido207.dat ->  [Ver =  | Size = 1034 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido208.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido208.dat ->  [Ver =  | Size = 53334 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido209.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido209.dat ->  [Ver =  | Size = 57850 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido210.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido210.dat ->  [Ver =  | Size = 6343 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido211.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido211.dat ->  [Ver =  | Size = 1305 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido212.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido212.dat ->  [Ver =  | Size = 3636 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido213.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido213.dat ->  [Ver =  | Size = 167 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido214.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido214.dat ->  [Ver =  | Size = 6244 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido215.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido215.dat ->  [Ver =  | Size = 6349 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido216.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido216.dat ->  [Ver =  | Size = 1333 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido217.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido217.dat ->  [Ver =  | Size = 7723 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido218.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido218.dat ->  [Ver =  | Size = 2621 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido219.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido219.dat ->  [Ver =  | Size = 1185 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido220.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido220.dat ->  [Ver =  | Size = 5429 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido221.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido221.dat ->  [Ver =  | Size = 84551 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido222.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido222.dat ->  [Ver =  | Size = 72885 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido223.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido223.dat ->  [Ver =  | Size = 780 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido224.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido224.dat ->  [Ver =  | Size = 1262 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido225.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido225.dat ->  [Ver =  | Size = 7471 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido226.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido226.dat ->  [Ver =  | Size = 890 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido227.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido227.dat ->  [Ver =  | Size = 1017 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido228.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido228.dat ->  [Ver =  | Size = 5971 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido229.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido229.dat ->  [Ver =  | Size = 616 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido230.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido230.dat ->  [Ver =  | Size = 1725 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido231.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido231.dat ->  [Ver =  | Size = 11590 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido232.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido232.dat ->  [Ver =  | Size = 856 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido233.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido233.dat ->  [Ver =  | Size = 10121 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido234.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido234.dat ->  [Ver =  | Size = 4807 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido235.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido235.dat ->  [Ver =  | Size = 5459 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido236.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido236.dat ->  [Ver =  | Size = 16278 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido237.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido237.dat ->  [Ver =  | Size = 8347 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido238.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido238.dat ->  [Ver =  | Size = 492 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido239.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido239.dat ->  [Ver =  | Size = 31816 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido240.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido240.dat ->  [Ver =  | Size = 470 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido241.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido241.dat ->  [Ver =  | Size = 5926 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido242.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido242.dat ->  [Ver =  | Size = 36302 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido243.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido243.dat ->  [Ver =  | Size = 4358 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido244.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido244.dat ->  [Ver =  | Size = 16258 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido245.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido245.dat ->  [Ver =  | Size = 5904 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido246.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido246.dat ->  [Ver =  | Size = 832 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido247.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido247.dat ->  [Ver =  | Size = 1561 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido248.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido248.dat ->  [Ver =  | Size = 6480 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido249.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido249.dat ->  [Ver =  | Size = 1375 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido250.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido250.dat ->  [Ver =  | Size = 3017 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido251.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido251.dat ->  [Ver =  | Size = 781 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido252.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido252.dat ->  [Ver =  | Size = 7190 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido253.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido253.dat ->  [Ver =  | Size = 566 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido254.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido254.dat ->  [Ver =  | Size = 34363 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido255.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido255.dat ->  [Ver =  | Size = 9040 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido256.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido256.dat ->  [Ver =  | Size = 1298 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido257.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido257.dat ->  [Ver =  | Size = 176 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido258.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido258.dat ->  [Ver =  | Size = 11135 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido259.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido259.dat ->  [Ver =  | Size = 737 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido260.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido260.dat ->  [Ver =  | Size = 2507 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido261.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido261.dat ->  [Ver =  | Size = 8689 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido262.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido262.dat ->  [Ver =  | Size = 12631 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido263.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido263.dat ->  [Ver =  | Size = 15948 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido264.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido264.dat ->  [Ver =  | Size = 1909 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido265.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido265.dat ->  [Ver =  | Size = 8163 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido266.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido266.dat ->  [Ver =  | Size = 6984 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido267.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido267.dat ->  [Ver =  | Size = 6609 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido268.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido268.dat ->  [Ver =  | Size = 8128 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido269.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido269.dat ->  [Ver =  | Size = 791 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido270.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido270.dat ->  [Ver =  | Size = 2689 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido271.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido271.dat ->  [Ver =  | Size = 26591 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido272.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido272.dat ->  [Ver =  | Size = 530 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido273.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido273.dat ->  [Ver =  | Size = 9011 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido274.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido274.dat ->  [Ver =  | Size = 881 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido275.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido275.dat ->  [Ver =  | Size = 5606 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido276.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido276.dat ->  [Ver =  | Size = 146 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido277.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido277.dat ->  [Ver =  | Size = 15591 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido278.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido278.dat ->  [Ver =  | Size = 6723 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido279.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido279.dat ->  [Ver =  | Size = 12603 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido280.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido280.dat ->  [Ver =  | Size = 22443 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido281.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido281.dat ->  [Ver =  | Size = 1390 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido282.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido282.dat ->  [Ver =  | Size = 8492 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido283.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido283.dat ->  [Ver =  | Size = 9889 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido284.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido284.dat ->  [Ver =  | Size = 10091 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido285.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido285.dat ->  [Ver =  | Size = 523 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido286.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido286.dat ->  [Ver =  | Size = 927 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido287.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido287.dat ->  [Ver =  | Size = 16482 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido288.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido288.dat ->  [Ver =  | Size = 45483 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido289.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido289.dat ->  [Ver =  | Size = 8434 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido290.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido290.dat ->  [Ver =  | Size = 1030 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido291.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido291.dat ->  [Ver =  | Size = 9159 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido292.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido292.dat ->  [Ver =  | Size = 19697 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido293.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido293.dat ->  [Ver =  | Size = 14692 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido294.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido294.dat ->  [Ver =  | Size = 9500 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido295.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido295.dat ->  [Ver =  | Size = 8729 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido296.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido296.dat ->  [Ver =  | Size = 753 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido297.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido297.dat ->  [Ver =  | Size = 8992 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido298.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido298.dat ->  [Ver =  | Size = 11420 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido299.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido299.dat ->  [Ver =  | Size = 1648 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido300.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido300.dat ->  [Ver =  | Size = 915 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido301.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido301.dat ->  [Ver =  | Size = 8866 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido302.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido302.dat ->  [Ver =  | Size = 252 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido303.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido303.dat ->  [Ver =  | Size = 8603 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido304.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido304.dat ->  [Ver =  | Size = 7609 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido305.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido305.dat ->  [Ver =  | Size = 2029 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido306.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido306.dat ->  [Ver =  | Size = 20499 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido307.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido307.dat ->  [Ver =  | Size = 1154 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido308.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido308.dat ->  [Ver =  | Size = 25069 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido309.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido309.dat ->  [Ver =  | Size = 13802 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido310.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido310.dat ->  [Ver =  | Size = 5916 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido311.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido311.dat ->  [Ver =  | Size = 791 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido312.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido312.dat ->  [Ver =  | Size = 15226 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido313.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido313.dat ->  [Ver =  | Size = 12748 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido314.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido314.dat ->  [Ver =  | Size = 9715 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido315.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido315.dat ->  [Ver =  | Size = 1174 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido316.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido316.dat ->  [Ver =  | Size = 11867 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido317.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido317.dat ->  [Ver =  | Size = 16039 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido318.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido318.dat ->  [Ver =  | Size = 15853 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido319.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido319.dat ->  [Ver =  | Size = 18479 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido320.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido320.dat ->  [Ver =  | Size = 17031 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido321.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido321.dat ->  [Ver =  | Size = 16802 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido322.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido322.dat ->  [Ver =  | Size = 11970 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido323.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido323.dat ->  [Ver =  | Size = 10763 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido324.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido324.dat ->  [Ver =  | Size = 397 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido325.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido325.dat ->  [Ver =  | Size = 286 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido326.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido326.dat ->  [Ver =  | Size = 355 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido327.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido327.dat ->  [Ver =  | Size = 30390 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido328.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido328.dat ->  [Ver =  | Size = 10134 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido329.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido329.dat ->  [Ver =  | Size = 13903 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido330.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido330.dat ->  [Ver =  | Size = 16806 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido331.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido331.dat ->  [Ver =  | Size = 27123 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido332.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido332.dat ->  [Ver =  | Size = 31825 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido333.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido333.dat ->  [Ver =  | Size = 9254 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido334.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido334.dat ->  [Ver =  | Size = 13600 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido335.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido335.dat ->  [Ver =  | Size = 8248 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido336.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido336.dat ->  [Ver =  | Size = 15770 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido337.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido337.dat ->  [Ver =  | Size = 15360 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido338.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido338.dat ->  [Ver =  | Size = 16918 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido339.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido339.dat ->  [Ver =  | Size = 1176 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido340.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido340.dat ->  [Ver =  | Size = 1626 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido341.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido341.dat ->  [Ver =  | Size = 36125 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido342.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido342.dat ->  [Ver =  | Size = 24557 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido343.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido343.dat ->  [Ver =  | Size = 9900 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido344.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido344.dat ->  [Ver =  | Size = 9916 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido345.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido345.dat ->  [Ver =  | Size = 13904 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido346.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido346.dat ->  [Ver =  | Size = 12431 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido347.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido347.dat ->  [Ver =  | Size = 2043 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido348.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido348.dat ->  [Ver =  | Size = 1103 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido349.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido349.dat ->  [Ver =  | Size = 27161 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido350.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido350.dat ->  [Ver =  | Size = 12660 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido351.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido351.dat ->  [Ver =  | Size = 304 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido352.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido352.dat ->  [Ver =  | Size = 12732 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido353.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido353.dat ->  [Ver =  | Size = 2148 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido354.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido354.dat ->  [Ver =  | Size = 23577 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido355.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido355.dat ->  [Ver =  | Size = 12262 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido356.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido356.dat ->  [Ver =  | Size = 10087 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido357.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido357.dat ->  [Ver =  | Size = 636 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido358.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido358.dat ->  [Ver =  | Size = 23553 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido359.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido359.dat ->  [Ver =  | Size = 22932 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido360.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido360.dat ->  [Ver =  | Size = 12855 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido361.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido361.dat ->  [Ver =  | Size = 1906 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido362.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido362.dat ->  [Ver =  | Size = 1752 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido363.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido363.dat ->  [Ver =  | Size = 1659 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido364.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido364.dat ->  [Ver =  | Size = 1012 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido365.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido365.dat ->  [Ver =  | Size = 22978 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido366.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido366.dat ->  [Ver =  | Size = 35868 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido367.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido367.dat ->  [Ver =  | Size = 44546 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido368.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido368.dat ->  [Ver =  | Size = 24163 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido369.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido369.dat ->  [Ver =  | Size = 15839 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido370.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido370.dat ->  [Ver =  | Size = 26885 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido371.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido371.dat ->  [Ver =  | Size = 10935 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido372.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido372.dat ->  [Ver =  | Size = 679 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido373.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido373.dat ->  [Ver =  | Size = 16559 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido374.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido374.dat ->  [Ver =  | Size = 24667 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido375.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido375.dat ->  [Ver =  | Size = 14790 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido376.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido376.dat ->  [Ver =  | Size = 9559 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido377.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido377.dat ->  [Ver =  | Size = 16613 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido378.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido378.dat ->  [Ver =  | Size = 5096 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido379.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido379.dat ->  [Ver =  | Size = 2389 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido380.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido380.dat ->  [Ver =  | Size = 8690 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido381.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido381.dat ->  [Ver =  | Size = 661 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido382.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido382.dat ->  [Ver =  | Size = 211 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido383.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido383.dat ->  [Ver =  | Size = 11944 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido384.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido384.dat ->  [Ver =  | Size = 1701 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido385.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido385.dat ->  [Ver =  | Size = 9765 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido386.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido386.dat ->  [Ver =  | Size = 1701 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido387.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido387.dat ->  [Ver =  | Size = 13654 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido388.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido388.dat ->  [Ver =  | Size = 492 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido389.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido389.dat ->  [Ver =  | Size = 1202 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido390.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido390.dat ->  [Ver =  | Size = 10533 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido391.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido391.dat ->  [Ver =  | Size = 9832 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido392.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido392.dat ->  [Ver =  | Size = 1061 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido393.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido393.dat ->  [Ver =  | Size = 20622 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido394.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido394.dat ->  [Ver =  | Size = 2014 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido395.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido395.dat ->  [Ver =  | Size = 7479 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido396.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido396.dat ->  [Ver =  | Size = 10929 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido397.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido397.dat ->  [Ver =  | Size = 1265 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido398.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido398.dat ->  [Ver =  | Size = 1777 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido399.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido399.dat ->  [Ver =  | Size = 13898 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido400.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido400.dat ->  [Ver =  | Size = 745 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido401.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido401.dat ->  [Ver =  | Size = 11454 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido402.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido402.dat ->  [Ver =  | Size = 4142 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido403.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido403.dat ->  [Ver =  | Size = 16159 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido404.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido404.dat ->  [Ver =  | Size = 4256 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido405.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido405.dat ->  [Ver =  | Size = 14607 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido406.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido406.dat ->  [Ver =  | Size = 847 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido407.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido407.dat ->  [Ver =  | Size = 8117 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido408.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido408.dat ->  [Ver =  | Size = 20228 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido409.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido409.dat ->  [Ver =  | Size = 1015 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido410.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido410.dat ->  [Ver =  | Size = 9742 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido411.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido411.dat ->  [Ver =  | Size = 2205 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido412.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido412.dat ->  [Ver =  | Size = 13012 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido413.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido413.dat ->  [Ver =  | Size = 73042 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido414.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido414.dat ->  [Ver =  | Size = 59381 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido415.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido415.dat ->  [Ver =  | Size = 617 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido416.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido416.dat ->  [Ver =  | Size = 478 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido417.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido417.dat ->  [Ver =  | Size = 225 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido418.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido418.dat ->  [Ver =  | Size = 11387 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido419.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido419.dat ->  [Ver =  | Size = 61698 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido420.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido420.dat ->  [Ver =  | Size = 79763 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido421.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido421.dat ->  [Ver =  | Size = 14148 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido422.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido422.dat ->  [Ver =  | Size = 18211 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido423.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido423.dat ->  [Ver =  | Size = 1218 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido424.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido424.dat ->  [Ver =  | Size = 1048 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido425.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido425.dat ->  [Ver =  | Size = 29079 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido426.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido426.dat ->  [Ver =  | Size = 19085 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido427.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido427.dat ->  [Ver =  | Size = 499 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido428.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido428.dat ->  [Ver =  | Size = 403 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido429.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido429.dat ->  [Ver =  | Size = 666 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido430.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido430.dat ->  [Ver =  | Size = 13211 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido431.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido431.dat ->  [Ver =  | Size = 200 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido432.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido432.dat ->  [Ver =  | Size = 1178 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido433.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido433.dat ->  [Ver =  | Size = 23862 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido434.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido434.dat ->  [Ver =  | Size = 1171 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido435.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido435.dat ->  [Ver =  | Size = 1300 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido436.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido436.dat ->  [Ver =  | Size = 3007 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido437.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido437.dat ->  [Ver =  | Size = 14589 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido438.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido438.dat ->  [Ver =  | Size = 828 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido439.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido439.dat ->  [Ver =  | Size = 1058 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido440.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido440.dat ->  [Ver =  | Size = 510 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido441.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido441.dat ->  [Ver =  | Size = 2594 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido442.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido442.dat ->  [Ver =  | Size = 12873 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido443.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido443.dat ->  [Ver =  | Size = 10214 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido444.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido444.dat ->  [Ver =  | Size = 11069 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido445.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido445.dat ->  [Ver =  | Size = 11786 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido446.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido446.dat ->  [Ver =  | Size = 1897 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido447.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido447.dat ->  [Ver =  | Size = 215 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido448.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido448.dat ->  [Ver =  | Size = 16859 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido449.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido449.dat ->  [Ver =  | Size = 19458 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido450.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido450.dat ->  [Ver =  | Size = 7503 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido451.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido451.dat ->  [Ver =  | Size = 340 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido452.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido452.dat ->  [Ver =  | Size = 15891 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido453.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido453.dat ->  [Ver =  | Size = 41953 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido454.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido454.dat ->  [Ver =  | Size = 29762 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido455.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido455.dat ->  [Ver =  | Size = 20376 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido456.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido456.dat ->  [Ver =  | Size = 2594 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido457.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido457.dat ->  [Ver =  | Size = 24390 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido458.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido458.dat ->  [Ver =  | Size = 71600 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido459.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido459.dat ->  [Ver =  | Size = 21689 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido460.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido460.dat ->  [Ver =  | Size = 1193 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido461.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido461.dat ->  [Ver =  | Size = 13227 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido462.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido462.dat ->  [Ver =  | Size = 819 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido463.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido463.dat ->  [Ver =  | Size = 543 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido464.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido464.dat ->  [Ver =  | Size = 16145 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido465.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido465.dat ->  [Ver =  | Size = 6296 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido466.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido466.dat ->  [Ver =  | Size = 9700 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido467.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido467.dat ->  [Ver =  | Size = 578 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido468.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido468.dat ->  [Ver =  | Size = 4205 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido469.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido469.dat ->  [Ver =  | Size = 13719 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido470.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido470.dat ->  [Ver =  | Size = 21322 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido471.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido471.dat ->  [Ver =  | Size = 28903 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido472.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido472.dat ->  [Ver =  | Size = 562 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido473.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido473.dat ->  [Ver =  | Size = 2292 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido474.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido474.dat ->  [Ver =  | Size = 15833 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido475.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido475.dat ->  [Ver =  | Size = 1243 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido476.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido476.dat ->  [Ver =  | Size = 16143 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido477.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido477.dat ->  [Ver =  | Size = 2904 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido478.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido478.dat ->  [Ver =  | Size = 9703 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido479.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido479.dat ->  [Ver =  | Size = 26856 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido480.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido480.dat ->  [Ver =  | Size = 10978 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido481.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido481.dat ->  [Ver =  | Size = 296 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido482.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido482.dat ->  [Ver =  | Size = 4017 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido483.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido483.dat ->  [Ver =  | Size = 22560 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido484.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido484.dat ->  [Ver =  | Size = 20212 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido485.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido485.dat ->  [Ver =  | Size = 30485 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido486.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido486.dat ->  [Ver =  | Size = 9105 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido487.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido487.dat ->  [Ver =  | Size = 817 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido488.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido488.dat ->  [Ver =  | Size = 24253 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido489.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido489.dat ->  [Ver =  | Size = 16736 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido490.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido490.dat ->  [Ver =  | Size = 2416 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido491.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido491.dat ->  [Ver =  | Size = 13690 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido492.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido492.dat ->  [Ver =  | Size = 5662 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido493.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido493.dat ->  [Ver =  | Size = 1969 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido494.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido494.dat ->  [Ver =  | Size = 18580 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido495.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido495.dat ->  [Ver =  | Size = 284 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido496.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido496.dat ->  [Ver =  | Size = 2269 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido497.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido497.dat ->  [Ver =  | Size = 15395 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido498.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido498.dat ->  [Ver =  | Size = 776 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido499.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido499.dat ->  [Ver =  | Size = 10917 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido500.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido500.dat ->  [Ver =  | Size = 2632 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido501.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido501.dat ->  [Ver =  | Size = 13101 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido502.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido502.dat ->  [Ver =  | Size = 1006 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido503.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido503.dat ->  [Ver =  | Size = 301 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido504.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido504.dat ->  [Ver =  | Size = 14880 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido505.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido505.dat ->  [Ver =  | Size = 2939 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido506.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido506.dat ->  [Ver =  | Size = 12511 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido507.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido507.dat ->  [Ver =  | Size = 9712 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido508.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido508.dat ->  [Ver =  | Size = 12469 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido509.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido509.dat ->  [Ver =  | Size = 557 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido510.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido510.dat ->  [Ver =  | Size = 16347 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido511.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido511.dat ->  [Ver =  | Size = 19141 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido512.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido512.dat ->  [Ver =  | Size = 4844 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido513.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido513.dat ->  [Ver =  | Size = 5876 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido514.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido514.dat ->  [Ver =  | Size = 33347 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido515.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido515.dat ->  [Ver =  | Size = 14214 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido516.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido516.dat ->  [Ver =  | Size = 16291 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido517.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido517.dat ->  [Ver =  | Size = 3531 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido518.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido518.dat ->  [Ver =  | Size = 13620 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido519.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido519.dat ->  [Ver =  | Size = 581 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido520.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido520.dat ->  [Ver =  | Size = 15772 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido521.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido521.dat ->  [Ver =  | Size = 12897 bytes | Modified Date = 03/04/2008 01:56:14 | Attr =    ]
ewido522.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido522.dat ->  [Ver =  | Size = 21398 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido523.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido523.dat ->  [Ver =  | Size = 1034 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido524.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido524.dat ->  [Ver =  | Size = 17892 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido525.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido525.dat ->  [Ver =  | Size = 13939 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido526.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido526.dat ->  [Ver =  | Size = 20313 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido527.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido527.dat ->  [Ver =  | Size = 11905 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido528.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido528.dat ->  [Ver =  | Size = 24010 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido529.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido529.dat ->  [Ver =  | Size = 15143 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido530.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido530.dat ->  [Ver =  | Size = 276 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido531.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido531.dat ->  [Ver =  | Size = 4000 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido532.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido532.dat ->  [Ver =  | Size = 11717 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido533.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido533.dat ->  [Ver =  | Size = 36562 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido534.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido534.dat ->  [Ver =  | Size = 24322 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido535.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido535.dat ->  [Ver =  | Size = 235 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido536.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido536.dat ->  [Ver =  | Size = 9908 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido537.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido537.dat ->  [Ver =  | Size = 4897 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido538.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido538.dat ->  [Ver =  | Size = 11865 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido539.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido539.dat ->  [Ver =  | Size = 54934 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido540.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido540.dat ->  [Ver =  | Size = 302 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido541.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido541.dat ->  [Ver =  | Size = 29786 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido542.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido542.dat ->  [Ver =  | Size = 176 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido543.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido543.dat ->  [Ver =  | Size = 386 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido544.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido544.dat ->  [Ver =  | Size = 8585 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido545.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido545.dat ->  [Ver =  | Size = 11931 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido546.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido546.dat ->  [Ver =  | Size = 1209 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido547.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido547.dat ->  [Ver =  | Size = 11618 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido548.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido548.dat ->  [Ver =  | Size = 390 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido549.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido549.dat ->  [Ver =  | Size = 18492 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido550.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido550.dat ->  [Ver =  | Size = 7499 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido551.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido551.dat ->  [Ver =  | Size = 1285 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido552.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido552.dat ->  [Ver =  | Size = 16911 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido553.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido553.dat ->  [Ver =  | Size = 15249 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido554.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido554.dat ->  [Ver =  | Size = 20368 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido555.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido555.dat ->  [Ver =  | Size = 1066 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido556.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido556.dat ->  [Ver =  | Size = 30010 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido557.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido557.dat ->  [Ver =  | Size = 25206 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido558.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido558.dat ->  [Ver =  | Size = 25008 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido559.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido559.dat ->  [Ver =  | Size = 13686 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido560.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido560.dat ->  [Ver =  | Size = 8686 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido561.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido561.dat ->  [Ver =  | Size = 183 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido562.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido562.dat ->  [Ver =  | Size = 29872 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido563.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido563.dat ->  [Ver =  | Size = 246 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido564.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido564.dat ->  [Ver =  | Size = 14894 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido565.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido565.dat ->  [Ver =  | Size = 19879 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido566.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido566.dat ->  [Ver =  | Size = 20660 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido567.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido567.dat ->  [Ver =  | Size = 156 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido568.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido568.dat ->  [Ver =  | Size = 659 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido569.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido569.dat ->  [Ver =  | Size = 37964 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido570.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido570.dat ->  [Ver =  | Size = 145 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido571.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido571.dat ->  [Ver =  | Size = 624 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido572.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido572.dat ->  [Ver =  | Size = 23351 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido573.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido573.dat ->  [Ver =  | Size = 9868 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido574.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido574.dat ->  [Ver =  | Size = 33053 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido575.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido575.dat ->  [Ver =  | Size = 137 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido576.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido576.dat ->  [Ver =  | Size = 37626 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido577.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido577.dat ->  [Ver =  | Size = 31431 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido578.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido578.dat ->  [Ver =  | Size = 3651 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido579.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido579.dat ->  [Ver =  | Size = 122 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido580.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido580.dat ->  [Ver =  | Size = 121 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido581.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido581.dat ->  [Ver =  | Size = 1013 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido582.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido582.dat ->  [Ver =  | Size = 30972 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido583.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido583.dat ->  [Ver =  | Size = 12378 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido584.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido584.dat ->  [Ver =  | Size = 18374 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido585.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido585.dat ->  [Ver =  | Size = 122 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido586.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido586.dat ->  [Ver =  | Size = 32827 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido587.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido587.dat ->  [Ver =  | Size = 22465 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido588.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido588.dat ->  [Ver =  | Size = 1175 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido589.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido589.dat ->  [Ver =  | Size = 147 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido590.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido590.dat ->  [Ver =  | Size = 28542 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido591.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido591.dat ->  [Ver =  | Size = 12956 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido592.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido592.dat ->  [Ver =  | Size = 17841 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido593.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido593.dat ->  [Ver =  | Size = 11215 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido594.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido594.dat ->  [Ver =  | Size = 14281 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido595.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido595.dat ->  [Ver =  | Size = 23890 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido596.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido596.dat ->  [Ver =  | Size = 21134 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido597.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido597.dat ->  [Ver =  | Size = 143 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido598.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido598.dat ->  [Ver =  | Size = 725 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido599.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido599.dat ->  [Ver =  | Size = 22614 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido600.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido600.dat ->  [Ver =  | Size = 34679 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido601.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido601.dat ->  [Ver =  | Size = 200 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido602.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido602.dat ->  [Ver =  | Size = 18343 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido603.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido603.dat ->  [Ver =  | Size = 140 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido604.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido604.dat ->  [Ver =  | Size = 142 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido605.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido605.dat ->  [Ver =  | Size = 20897 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido606.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido606.dat ->  [Ver =  | Size = 15597 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido607.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido607.dat ->  [Ver =  | Size = 10178 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido608.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido608.dat ->  [Ver =  | Size = 139 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido609.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido609.dat ->  [Ver =  | Size = 16721 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido610.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido610.dat ->  [Ver =  | Size = 19455 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido611.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido611.dat ->  [Ver =  | Size = 314 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido612.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido612.dat ->  [Ver =  | Size = 124 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido613.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido613.dat ->  [Ver =  | Size = 8090 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido614.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido614.dat ->  [Ver =  | Size = 2250 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido615.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido615.dat ->  [Ver =  | Size = 5088 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido616.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido616.dat ->  [Ver =  | Size = 3421 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido617.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido617.dat ->  [Ver =  | Size = 256 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido618.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido618.dat ->  [Ver =  | Size = 2272 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido619.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido619.dat ->  [Ver =  | Size = 1137 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido620.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido620.dat ->  [Ver =  | Size = 25237 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido621.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido621.dat ->  [Ver =  | Size = 48795 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido622.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido622.dat ->  [Ver =  | Size = 3479 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido623.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido623.dat ->  [Ver =  | Size = 2526 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido624.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido624.dat ->  [Ver =  | Size = 2441 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido625.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido625.dat ->  [Ver =  | Size = 304 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido626.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido626.dat ->  [Ver =  | Size = 64967 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido627.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido627.dat ->  [Ver =  | Size = 15060 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido628.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido628.dat ->  [Ver =  | Size = 2642 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido629.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido629.dat ->  [Ver =  | Size = 4447 bytes | Modified Date = 03/04/2008 01:56:15 | Attr =    ]
ewido630.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido630.dat ->  [Ver =  | Size = 2473 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido631.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido631.dat ->  [Ver =  | Size = 71680 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido632.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido632.dat ->  [Ver =  | Size = 253 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido633.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido633.dat ->  [Ver =  | Size = 3394 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido634.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido634.dat ->  [Ver =  | Size = 3572 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido635.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido635.dat ->  [Ver =  | Size = 1960 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido636.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido636.dat ->  [Ver =  | Size = 1994 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido637.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido637.dat ->  [Ver =  | Size = 2161 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido638.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido638.dat ->  [Ver =  | Size = 1355 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido639.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido639.dat ->  [Ver =  | Size = 1982 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido640.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido640.dat ->  [Ver =  | Size = 1840 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido641.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido641.dat ->  [Ver =  | Size = 1981 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido642.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido642.dat ->  [Ver =  | Size = 2036 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido643.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido643.dat ->  [Ver =  | Size = 2152 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido644.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido644.dat ->  [Ver =  | Size = 1969 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido645.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido645.dat ->  [Ver =  | Size = 140 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido646.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido646.dat ->  [Ver =  | Size = 1310 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido647.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido647.dat ->  [Ver =  | Size = 2029 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido648.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido648.dat ->  [Ver =  | Size = 2220 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido649.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido649.dat ->  [Ver =  | Size = 1800 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido650.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido650.dat ->  [Ver =  | Size = 1971 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido651.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido651.dat ->  [Ver =  | Size = 2308 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido652.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido652.dat ->  [Ver =  | Size = 2017 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido653.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido653.dat ->  [Ver =  | Size = 2065 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido654.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido654.dat ->  [Ver =  | Size = 2374 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido655.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido655.dat ->  [Ver =  | Size = 1781 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido656.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido656.dat ->  [Ver =  | Size = 1967 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido657.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido657.dat ->  [Ver =  | Size = 2430 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido658.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido658.dat ->  [Ver =  | Size = 1787 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido659.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido659.dat ->  [Ver =  | Size = 2266 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido660.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido660.dat ->  [Ver =  | Size = 2225 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido661.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido661.dat ->  [Ver =  | Size = 1628 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido662.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido662.dat ->  [Ver =  | Size = 1869 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido663.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido663.dat ->  [Ver =  | Size = 2024 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido664.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido664.dat ->  [Ver =  | Size = 2270 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido665.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido665.dat ->  [Ver =  | Size = 2215 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido666.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido666.dat ->  [Ver =  | Size = 2056 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido667.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido667.dat ->  [Ver =  | Size = 1466 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido668.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido668.dat ->  [Ver =  | Size = 1508 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido669.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido669.dat ->  [Ver =  | Size = 2485 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido670.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido670.dat ->  [Ver =  | Size = 2451 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido671.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido671.dat ->  [Ver =  | Size = 2870 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido672.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido672.dat ->  [Ver =  | Size = 142 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido673.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido673.dat ->  [Ver =  | Size = 2307 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido674.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido674.dat ->  [Ver =  | Size = 2144 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido675.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido675.dat ->  [Ver =  | Size = 2107 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido676.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido676.dat ->  [Ver =  | Size = 1725 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido677.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido677.dat ->  [Ver =  | Size = 1923 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido678.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido678.dat ->  [Ver =  | Size = 1924 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido679.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido679.dat ->  [Ver =  | Size = 2247 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido680.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido680.dat ->  [Ver =  | Size = 2101 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido681.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido681.dat ->  [Ver =  | Size = 2034 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido682.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido682.dat ->  [Ver =  | Size = 2114 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido683.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido683.dat ->  [Ver =  | Size = 2032 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido684.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido684.dat ->  [Ver =  | Size = 2110 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido685.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido685.dat ->  [Ver =  | Size = 2708 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido686.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido686.dat ->  [Ver =  | Size = 3943 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido687.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido687.dat ->  [Ver =  | Size = 2170 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido688.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido688.dat ->  [Ver =  | Size = 2133 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido689.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido689.dat ->  [Ver =  | Size = 1960 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido690.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido690.dat ->  [Ver =  | Size = 147 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido691.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido691.dat ->  [Ver =  | Size = 3558 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido692.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido692.dat ->  [Ver =  | Size = 2293 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido693.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido693.dat ->  [Ver =  | Size = 2314 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido694.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido694.dat ->  [Ver =  | Size = 1938 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido695.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido695.dat ->  [Ver =  | Size = 1882 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido696.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido696.dat ->  [Ver =  | Size = 2031 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido697.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido697.dat ->  [Ver =  | Size = 5023 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido698.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido698.dat ->  [Ver =  | Size = 1923 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido699.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido699.dat ->  [Ver =  | Size = 2364 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido700.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido700.dat ->  [Ver =  | Size = 2422 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido701.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido701.dat ->  [Ver =  | Size = 2511 bytes | Modified Date = 03/04/2008 01:56:16 | Attr =    ]
ewido702.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido702.dat ->  [Ver =  | Size = 2354 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido703.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido703.dat ->  [Ver =  | Size = 3465 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido704.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido704.dat ->  [Ver =  | Size = 2268 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido705.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido705.dat ->  [Ver =  | Size = 3044 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido706.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido706.dat ->  [Ver =  | Size = 2863 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido707.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido707.dat ->  [Ver =  | Size = 2100 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido708.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido708.dat ->  [Ver =  | Size = 2103 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido709.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido709.dat ->  [Ver =  | Size = 1782 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido710.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido710.dat ->  [Ver =  | Size = 3454 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido711.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido711.dat ->  [Ver =  | Size = 439 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido712.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido712.dat ->  [Ver =  | Size = 14766 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido713.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido713.dat ->  [Ver =  | Size = 17032 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido714.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido714.dat ->  [Ver =  | Size = 2457 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido715.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido715.dat ->  [Ver =  | Size = 1964 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido716.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido716.dat ->  [Ver =  | Size = 1809 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido717.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido717.dat ->  [Ver =  | Size = 1512 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido718.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido718.dat ->  [Ver =  | Size = 5220 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido719.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido719.dat ->  [Ver =  | Size = 3107 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido720.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido720.dat ->  [Ver =  | Size = 3086 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido721.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido721.dat ->  [Ver =  | Size = 197 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido722.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido722.dat ->  [Ver =  | Size = 3298 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido723.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido723.dat ->  [Ver =  | Size = 4000 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido724.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido724.dat ->  [Ver =  | Size = 3799 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido725.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido725.dat ->  [Ver =  | Size = 4039 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido726.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido726.dat ->  [Ver =  | Size = 22702 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido727.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido727.dat ->  [Ver =  | Size = 3313 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido728.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido728.dat ->  [Ver =  | Size = 3490 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido729.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido729.dat ->  [Ver =  | Size = 4195 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido730.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido730.dat ->  [Ver =  | Size = 4391 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido731.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido731.dat ->  [Ver =  | Size = 2729 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido732.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido732.dat ->  [Ver =  | Size = 3156 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido733.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido733.dat ->  [Ver =  | Size = 2434 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido734.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido734.dat ->  [Ver =  | Size = 2788 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido735.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido735.dat ->  [Ver =  | Size = 2118 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido736.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido736.dat ->  [Ver =  | Size = 2495 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido737.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido737.dat ->  [Ver =  | Size = 2636 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido738.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido738.dat ->  [Ver =  | Size = 1929 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido739.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido739.dat ->  [Ver =  | Size = 2383 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido740.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido740.dat ->  [Ver =  | Size = 2058 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido741.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido741.dat ->  [Ver =  | Size = 2253 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido742.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido742.dat ->  [Ver =  | Size = 2763 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido743.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido743.dat ->  [Ver =  | Size = 2440 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido744.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido744.dat ->  [Ver =  | Size = 2578 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido745.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido745.dat ->  [Ver =  | Size = 2127 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido746.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido746.dat ->  [Ver =  | Size = 2308 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido747.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido747.dat ->  [Ver =  | Size = 31144 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido748.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido748.dat ->  [Ver =  | Size = 26428 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido749.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido749.dat ->  [Ver =  | Size = 35206 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido750.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido750.dat ->  [Ver =  | Size = 30826 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido751.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido751.dat ->  [Ver =  | Size = 201 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido752.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido752.dat ->  [Ver =  | Size = 26696 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido753.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido753.dat ->  [Ver =  | Size = 26374 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido754.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido754.dat ->  [Ver =  | Size = 27975 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido755.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido755.dat ->  [Ver =  | Size = 4209 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido756.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido756.dat ->  [Ver =  | Size = 4121 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido757.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido757.dat ->  [Ver =  | Size = 3943 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido758.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido758.dat ->  [Ver =  | Size = 4155 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido759.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido759.dat ->  [Ver =  | Size = 3344 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido760.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido760.dat ->  [Ver =  | Size = 3385 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido761.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido761.dat ->  [Ver =  | Size = 140 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido762.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido762.dat ->  [Ver =  | Size = 4315 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido763.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido763.dat ->  [Ver =  | Size = 4371 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido764.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido764.dat ->  [Ver =  | Size = 5893 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido765.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido765.dat ->  [Ver =  | Size = 4797 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido766.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido766.dat ->  [Ver =  | Size = 5130 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido767.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido767.dat ->  [Ver =  | Size = 4258 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido768.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido768.dat ->  [Ver =  | Size = 4785 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido769.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido769.dat ->  [Ver =  | Size = 4141 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido770.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido770.dat ->  [Ver =  | Size = 8041 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido771.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido771.dat ->  [Ver =  | Size = 7279 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido772.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido772.dat ->  [Ver =  | Size = 7313 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido773.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido773.dat ->  [Ver =  | Size = 6813 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido774.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido774.dat ->  [Ver =  | Size = 150 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido775.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido775.dat ->  [Ver =  | Size = 3812 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido776.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido776.dat ->  [Ver =  | Size = 6850 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido777.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido777.dat ->  [Ver =  | Size = 6330 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido778.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido778.dat ->  [Ver =  | Size = 48761 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido779.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido779.dat ->  [Ver =  | Size = 43504 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido780.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido780.dat ->  [Ver =  | Size = 220 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido781.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido781.dat ->  [Ver =  | Size = 36460 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido782.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido782.dat ->  [Ver =  | Size = 141 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido783.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido783.dat ->  [Ver =  | Size = 38702 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido784.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido784.dat ->  [Ver =  | Size = 39466 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido785.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido785.dat ->  [Ver =  | Size = 42536 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido786.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido786.dat ->  [Ver =  | Size = 46912 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido787.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido787.dat ->  [Ver =  | Size = 5722 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido788.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido788.dat ->  [Ver =  | Size = 2406 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido789.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido789.dat ->  [Ver =  | Size = 4953 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido790.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido790.dat ->  [Ver =  | Size = 5430 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido791.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido791.dat ->  [Ver =  | Size = 285 bytes | Modified Date = 03/04/2008 01:56:17 | Attr =    ]
ewido792.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido792.dat ->  [Ver =  | Size = 4702 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido793.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido793.dat ->  [Ver =  | Size = 4358 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido794.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido794.dat ->  [Ver =  | Size = 4842 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido795.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido795.dat ->  [Ver =  | Size = 4979 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido796.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido796.dat ->  [Ver =  | Size = 5221 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido797.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido797.dat ->  [Ver =  | Size = 4632 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido798.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido798.dat ->  [Ver =  | Size = 5224 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido799.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido799.dat ->  [Ver =  | Size = 4222 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido800.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido800.dat ->  [Ver =  | Size = 4574 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido801.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido801.dat ->  [Ver =  | Size = 4323 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido802.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido802.dat ->  [Ver =  | Size = 3435 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido803.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido803.dat ->  [Ver =  | Size = 3132 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido804.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido804.dat ->  [Ver =  | Size = 2860 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido805.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido805.dat ->  [Ver =  | Size = 3106 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido806.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido806.dat ->  [Ver =  | Size = 3107 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido807.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido807.dat ->  [Ver =  | Size = 3022 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido808.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido808.dat ->  [Ver =  | Size = 2932 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido809.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido809.dat ->  [Ver =  | Size = 39400 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido810.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido810.dat ->  [Ver =  | Size = 39683 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido811.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido811.dat ->  [Ver =  | Size = 42417 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido812.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido812.dat ->  [Ver =  | Size = 146 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido813.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido813.dat ->  [Ver =  | Size = 36377 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido814.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido814.dat ->  [Ver =  | Size = 32609 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido815.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido815.dat ->  [Ver =  | Size = 40927 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido816.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido816.dat ->  [Ver =  | Size = 40032 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido817.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido817.dat ->  [Ver =  | Size = 7870 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido818.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido818.dat ->  [Ver =  | Size = 8149 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido819.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido819.dat ->  [Ver =  | Size = 7674 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido820.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido820.dat ->  [Ver =  | Size = 8986 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido821.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido821.dat ->  [Ver =  | Size = 4677 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido822.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido822.dat ->  [Ver =  | Size = 5368 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido823.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido823.dat ->  [Ver =  | Size = 7449 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido824.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido824.dat ->  [Ver =  | Size = 9528 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido825.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido825.dat ->  [Ver =  | Size = 6335 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido826.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido826.dat ->  [Ver =  | Size = 16215 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido827.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido827.dat ->  [Ver =  | Size = 9679 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido828.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido828.dat ->  [Ver =  | Size = 9178 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido829.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido829.dat ->  [Ver =  | Size = 8974 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido830.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido830.dat ->  [Ver =  | Size = 8613 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido831.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido831.dat ->  [Ver =  | Size = 3227 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido832.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido832.dat ->  [Ver =  | Size = 4990 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido833.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido833.dat ->  [Ver =  | Size = 3603 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido834.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido834.dat ->  [Ver =  | Size = 3956 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido835.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido835.dat ->  [Ver =  | Size = 3295 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido836.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido836.dat ->  [Ver =  | Size = 3316 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido837.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido837.dat ->  [Ver =  | Size = 4445 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido838.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido838.dat ->  [Ver =  | Size = 59941 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido839.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido839.dat ->  [Ver =  | Size = 63404 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido840.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido840.dat ->  [Ver =  | Size = 58771 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido841.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido841.dat ->  [Ver =  | Size = 110913 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido842.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido842.dat ->  [Ver =  | Size = 73694 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido843.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido843.dat ->  [Ver =  | Size = 26380 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido844.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido844.dat ->  [Ver =  | Size = 24732 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido845.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido845.dat ->  [Ver =  | Size = 12651 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido846.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido846.dat ->  [Ver =  | Size = 35039 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido847.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido847.dat ->  [Ver =  | Size = 2911 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido848.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido848.dat ->  [Ver =  | Size = 2409 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido849.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido849.dat ->  [Ver =  | Size = 3015 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido850.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido850.dat ->  [Ver =  | Size = 3155 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido851.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido851.dat ->  [Ver =  | Size = 2581 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido852.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido852.dat ->  [Ver =  | Size = 2500 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido853.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido853.dat ->  [Ver =  | Size = 2760 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido854.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido854.dat ->  [Ver =  | Size = 2872 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido855.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido855.dat ->  [Ver =  | Size = 2517 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido856.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido856.dat ->  [Ver =  | Size = 2143 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido857.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido857.dat ->  [Ver =  | Size = 2119 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido858.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido858.dat ->  [Ver =  | Size = 2269 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido859.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido859.dat ->  [Ver =  | Size = 3551 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido860.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido860.dat ->  [Ver =  | Size = 5609 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido861.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido861.dat ->  [Ver =  | Size = 3183 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido862.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido862.dat ->  [Ver =  | Size = 4458 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido863.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido863.dat ->  [Ver =  | Size = 5120 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido864.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido864.dat ->  [Ver =  | Size = 3836 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido865.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido865.dat ->  [Ver =  | Size = 4188 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido866.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido866.dat ->  [Ver =  | Size = 3605 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido867.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido867.dat ->  [Ver =  | Size = 4367 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido868.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido868.dat ->  [Ver =  | Size = 4774 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido869.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido869.dat ->  [Ver =  | Size = 4977 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido870.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido870.dat ->  [Ver =  | Size = 9580 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido871.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido871.dat ->  [Ver =  | Size = 124 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido872.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido872.dat ->  [Ver =  | Size = 4151 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido873.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido873.dat ->  [Ver =  | Size = 3843 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido874.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido874.dat ->  [Ver =  | Size = 64114 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido875.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido875.dat ->  [Ver =  | Size = 64356 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido876.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido876.dat ->  [Ver =  | Size = 80888 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido877.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido877.dat ->  [Ver =  | Size = 122 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido878.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido878.dat ->  [Ver =  | Size = 58180 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido879.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido879.dat ->  [Ver =  | Size = 68105 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido880.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido880.dat ->  [Ver =  | Size = 69314 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido881.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido881.dat ->  [Ver =  | Size = 66350 bytes | Modified Date = 03/04/2008 01:56:18 | Attr =    ]
ewido882.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido882.dat ->  [Ver =  | Size = 4870 bytes | Modified Date = 03/04/2008 01:56:19 | Attr =    ]
ewido883.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido883.dat ->  [Ver =  | Size = 166 bytes | Modified Date = 03/04/2008 01:56:19 | Attr =    ]
ewido884.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido884.dat ->  [Ver =  | Size = 8071 bytes | Modified Date = 03/04/2008 01:56:19 | Attr =    ]
ewido885.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido885.dat ->  [Ver =  | Size = 6115 bytes | Modified Date = 03/04/2008 01:56:19 | Attr =    ]
ewido886.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido886.dat ->  [Ver =  | Size = 11221 bytes | Modified Date = 03/04/2008 01:56:19 | Attr =    ]
ewido887.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido887.dat ->  [Ver =  | Size = 4667 bytes | Modified Date = 03/04/2008 01:56:19 | Attr =    ]
ewido888.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido888.dat ->  [Ver =  | Size = 4710 bytes | Modified Date = 03/04/2008 01:56:19 | Attr =    ]
ewido889.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido889.dat ->  [Ver =  | Size = 5417 bytes | Modified Date = 03/04/2008 01:56:19 | Attr =    ]
ewido890.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido890.dat ->  [Ver =  | Size = 5049 bytes | Modified Date = 03/04/2008 01:56:19 | Attr =    ]
ewido891.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido891.dat ->  [Ver =  | Size = 9131 bytes | Modified Date = 03/04/2008 01:56:19 | Attr =    ]
ewido892.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido892.dat ->  [Ver =  | Size = 6153 bytes | Modified Date = 03/04/2008 01:56:19 | Attr =    ]
ewido893.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido893.dat ->  [Ver =  | Size = 19455 bytes | Modified Date = 03/04/2008 01:56:19 | Attr =    ]
ewido894.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido894.dat ->  [Ver =  | Size = 4340 bytes | Modified Date = 03/04/2008 01:56:19 | Attr =    ]
ewido895.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido895.dat ->  [Ver =  | Size = 3377 bytes | Modified Date = 03/04/2008 01:56:19 | Attr =    ]
ewido896.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido896.dat ->  [Ver =  | Size = 4704 bytes | Modified Date = 03/04/2008 01:56:19 | Attr =    ]
ewido897.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido897.dat ->  [Ver =  | Size = 3697 bytes | Modified Date = 03/04/2008 01:56:19 | Attr =    ]
ewido898.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido898.dat ->  [Ver =  | Size = 4507 bytes | Modified Date = 03/04/2008 01:56:19 | Attr =    ]
ewido899.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido899.dat ->  [Ver =  | Size = 18146 bytes | Modified Date = 03/04/2008 01:56:19 | Attr =    ]
ewido900.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido900.dat ->  [Ver =  | Size = 139 bytes | Modified Date = 03/04/2008 01:56:19 | Attr =    ]
ewido901.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido901.dat ->  [Ver =  | Size = 10720 bytes | Modified Date = 03/04/2008 01:56:19 | Attr =    ]
ewido902.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido902.dat ->  [Ver =  | Size = 4032 bytes | Modified Date = 03/04/2008 01:56:19 | Attr =    ]
ewido903.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido903.dat ->  [Ver =  | Size = 4008 bytes | Modified Date = 03/04/2008 01:56:19 | Attr =    ]
ewido904.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido904.dat ->  [Ver =  | Size = 3265 bytes | Modified Date = 03/04/2008 01:56:19 | Attr =    ]
ewido905.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido905.dat ->  [Ver =  | Size = 73025 bytes | Modified Date = 03/04/2008 01:56:19 | Attr =    ]
ewido906.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido906.dat ->  [Ver =  | Size = 74562 bytes | Modified Date = 03/04/2008 01:56:19 | Attr =    ]
ewido907.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido907.dat ->  [Ver =  | Size = 165 bytes | Modified Date = 03/04/2008 01:56:19 | Attr =    ]
ewido908.dat -> C:\Users\maxwell\AppData\Local\Temp\ewido_signatures\ewido908.dat ->  [Ver =  | Size = 80957 bytes | Modified Date = 03/04/2008 01:56:19 | Attr =    ]
EPS_PicLookup.dat -> C:\Users\maxwell\AppData\Local\Temp\Low\EPS_PicLookup.dat ->  [Ver =  | Size = 527 bytes | Modified Date = 21/10/2007 20:36:38 | Attr =    ]
31 C:\Users\maxwell\AppData\Local\Temp\Low\*.tmp files -> C:\Users\maxwell\AppData\Local\Temp\Low\*.tmp -> 
afuinst64.dat -> C:\Users\maxwell\AppData\Local\Temp\RarSFX0\afuinst64.dat ->  [Ver = 7, 1, 0, 377 | Size = 317440 bytes | Modified Date = 03/07/2007 13:14:31 | Attr =    ]
avgfinst.dat -> C:\Users\maxwell\AppData\Local\Temp\RarSFX0\avgfinst.dat -> AVG Technologies CZ, s.r.o. [Ver = 8.0.0.86 | Size = 189952 bytes | Modified Date = 28/03/2008 10:14:32 | Attr =    ]
files.dat -> C:\Users\maxwell\AppData\Local\Temp\RarSFX0\files.dat ->  [Ver =  | Size = 94814319 bytes | Modified Date = 28/03/2008 10:15:15 | Attr =    ]
setup.dat -> C:\Users\maxwell\AppData\Local\Temp\RarSFX0\setup.dat ->  [Ver =  | Size = 841855 bytes | Modified Date = 28/03/2008 10:14:32 | Attr =    ]
trialkey.dat -> C:\Users\maxwell\AppData\Local\Temp\RarSFX0\trialkey.dat ->  [Ver =  | Size = 67 bytes | Modified Date = 27/02/2008 14:33:38 | Attr =    ]
RD3T1008.DAT -> C:\Users\maxwell\AppData\Local\Temp\Temp1_PC-300_Xp2k.zip\PC-300_Xp2k\RD3T1008.DAT ->  [Ver =  | Size = 4088 bytes | Modified Date = 11/03/2006 03:03:40 | Attr =    ]
RDDP1008.DAT -> C:\Users\maxwell\AppData\Local\Temp\Temp1_PC-300_Xp2k.zip\PC-300_Xp2k\RDDP1008.DAT -> Roland Corporation [Ver = 5, 0, 3, 0 | Size = 204800 bytes | Modified Date = 08/05/2006 20:29:12 | Attr =    ]
RdDrvInf.dat -> C:\Users\maxwell\AppData\Local\Temp\Temp1_PC-300_Xp2k.zip\PC-300_Xp2k\RdDrvInf.dat ->  [Ver =  | Size = 40 bytes | Modified Date = 05/07/2006 22:55:46 | Attr =    ]
RdUninst.dat -> C:\Users\maxwell\AppData\Local\Temp\Temp1_PC-300_Xp2k.zip\PC-300_Xp2k\RdUninst.dat ->  [Ver =  | Size = 912 bytes | Modified Date = 05/07/2006 22:55:46 | Attr =    ]
DLL_{A38048C6-89D1-44EC-BC95-E95DD4A19B5E}.ini -> C:\Users\maxwell\AppData\Local\Temp\DLL_{A38048C6-89D1-44EC-BC95-E95DD4A19B5E}.ini ->  [Ver =  | Size = 2067 bytes | Modified Date = 28/03/2007 00:13:42 | Attr =    ]
setup.ini -> C:\Users\maxwell\AppData\Local\Temp\setup.ini ->  [Ver =  | Size = 3762 bytes | Modified Date = 03/06/2007 12:04:46 | Attr =    ]
52 C:\Users\maxwell\AppData\Local\Temp\*.tmp files -> C:\Users\maxwell\AppData\Local\Temp\*.tmp -> 
0x0404.ini -> C:\Users\maxwell\AppData\Local\Temp\_is498F\0x0404.ini ->  [Ver =  | Size = 2756 bytes | Modified Date = 24/09/2007 21:45:46 | Attr =    ]
0x0409.ini -> C:\Users\maxwell\AppData\Local\Temp\_is498F\0x0409.ini ->  [Ver =  | Size = 3858 bytes | Modified Date = 24/09/2007 21:45:46 | Attr =    ]
Setup.INI -> C:\Users\maxwell\AppData\Local\Temp\_is498F\Setup.INI ->  [Ver =  | Size = 1140 bytes | Modified Date = 24/09/2007 21:45:46 | Attr =    ]
_ISMSIDEL.INI -> C:\Users\maxwell\AppData\Local\Temp\_is498F\_ISMSIDEL.INI ->  [Ver =  | Size = 457 bytes | Modified Date = 24/09/2007 21:45:51 | Attr =    ]
_ISMSIDEL.INI -> C:\Users\maxwell\AppData\Local\Temp\_is6599\_ISMSIDEL.INI ->  [Ver =  | Size = 9 bytes | Modified Date = 19/09/2007 21:43:09 | Attr =    ]
0x0401.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x0401.ini ->  [Ver =  | Size = 5939 bytes | Modified Date = 30/03/2008 14:16:09 | Attr =    ]
0x0404.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x0404.ini ->  [Ver =  | Size = 4376 bytes | Modified Date = 30/03/2008 14:16:06 | Attr =    ]
0x0405.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x0405.ini ->  [Ver =  | Size = 6408 bytes | Modified Date = 30/03/2008 14:16:06 | Attr =    ]
0x0406.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x0406.ini ->  [Ver =  | Size = 6352 bytes | Modified Date = 30/03/2008 14:16:06 | Attr =    ]
0x0407.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x0407.ini ->  [Ver =  | Size = 6974 bytes | Modified Date = 30/03/2008 14:16:07 | Attr =    ]
0x0408.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x0408.ini ->  [Ver =  | Size = 7271 bytes | Modified Date = 30/03/2008 14:16:07 | Attr =    ]
0x0409.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x0409.ini ->  [Ver =  | Size = 6139 bytes | Modified Date = 30/03/2008 14:16:07 | Attr =    ]
0x040a.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x040a.ini ->  [Ver =  | Size = 6928 bytes | Modified Date = 30/03/2008 14:16:09 | Attr =    ]
0x040b.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x040b.ini ->  [Ver =  | Size = 6231 bytes | Modified Date = 30/03/2008 14:16:07 | Attr =    ]
0x040c.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x040c.ini ->  [Ver =  | Size = 7047 bytes | Modified Date = 30/03/2008 14:16:07 | Attr =    ]
0x040d.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x040d.ini ->  [Ver =  | Size = 5430 bytes | Modified Date = 30/03/2008 14:16:10 | Attr =    ]
0x040e.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x040e.ini ->  [Ver =  | Size = 6382 bytes | Modified Date = 30/03/2008 14:16:08 | Attr =    ]
0x0410.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x0410.ini ->  [Ver =  | Size = 6801 bytes | Modified Date = 30/03/2008 14:16:08 | Attr =    ]
0x0411.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x0411.ini ->  [Ver =  | Size = 6607 bytes | Modified Date = 30/03/2008 14:16:08 | Attr =    ]
0x0413.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x0413.ini ->  [Ver =  | Size = 6723 bytes | Modified Date = 30/03/2008 14:16:06 | Attr =    ]
0x0414.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x0414.ini ->  [Ver =  | Size = 6353 bytes | Modified Date = 30/03/2008 14:16:08 | Attr =    ]
0x0415.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x0415.ini ->  [Ver =  | Size = 6542 bytes | Modified Date = 30/03/2008 14:16:08 | Attr =    ]
0x0416.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x0416.ini ->  [Ver =  | Size = 6524 bytes | Modified Date = 30/03/2008 14:16:08 | Attr =    ]
0x0418.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x0418.ini ->  [Ver =  | Size = 6371 bytes | Modified Date = 30/03/2008 14:16:08 | Attr =    ]
0x0419.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x0419.ini ->  [Ver =  | Size = 6522 bytes | Modified Date = 30/03/2008 14:16:08 | Attr =    ]
0x041b.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x041b.ini ->  [Ver =  | Size = 6444 bytes | Modified Date = 30/03/2008 14:16:08 | Attr =    ]
0x041c.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x041c.ini ->  [Ver =  | Size = 6894 bytes | Modified Date = 30/03/2008 14:16:09 | Attr =    ]
0x041d.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x041d.ini ->  [Ver =  | Size = 6168 bytes | Modified Date = 30/03/2008 14:16:09 | Attr =    ]
0x041e.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x041e.ini ->  [Ver =  | Size = 6109 bytes | Modified Date = 30/03/2008 14:16:09 | Attr =    ]
0x041f.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x041f.ini ->  [Ver =  | Size = 6318 bytes | Modified Date = 30/03/2008 14:16:09 | Attr =    ]
0x0421.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x0421.ini ->  [Ver =  | Size = 6430 bytes | Modified Date = 30/03/2008 14:16:08 | Attr =    ]
0x0424.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x0424.ini ->  [Ver =  | Size = 6489 bytes | Modified Date = 30/03/2008 14:16:08 | Attr =    ]
0x042a.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x042a.ini ->  [Ver =  | Size = 6139 bytes | Modified Date = 30/03/2008 14:16:10 | Attr =    ]
0x043e.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x043e.ini ->  [Ver =  | Size = 6648 bytes | Modified Date = 30/03/2008 14:16:08 | Attr =    ]
0x0804.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x0804.ini ->  [Ver =  | Size = 4459 bytes | Modified Date = 30/03/2008 14:16:06 | Attr =    ]
0x0809.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x0809.ini ->  [Ver =  | Size = 6267 bytes | Modified Date = 30/03/2008 14:16:06 | Attr =    ]
0x080a.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x080a.ini ->  [Ver =  | Size = 7137 bytes | Modified Date = 30/03/2008 14:16:09 | Attr =    ]
0x0816.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x0816.ini ->  [Ver =  | Size = 6694 bytes | Modified Date = 30/03/2008 14:16:08 | Attr =    ]
0x0c04.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x0c04.ini ->  [Ver =  | Size = 4726 bytes | Modified Date = 30/03/2008 14:16:06 | Attr =    ]
0x0c0c.ini -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\0x0c0c.ini ->  [Ver =  | Size = 7180 bytes | Modified Date = 30/03/2008 14:16:07 | Attr =    ]
Setup.INI -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\Setup.INI ->  [Ver =  | Size = 2361 bytes | Modified Date = 30/03/2008 14:16:05 | Attr =    ]
_ISMSIDEL.INI -> C:\Users\maxwell\AppData\Local\Temp\_isA2C4\_ISMSIDEL.INI ->  [Ver =  | Size = 2421 bytes | Modified Date = 30/03/2008 14:16:10 | Attr =    ]
index.dat -> C:\Windows\Temp\Cookies\index.dat ->  [Ver =  | Size = 16384 bytes | Modified Date = 04/12/2007 14:53:07 | Attr =  HS]
index.dat -> C:\Windows\Temp\History\History.IE5\index.dat ->  [Ver =  | Size = 16384 bytes | Modified Date = 04/12/2007 14:53:07 | Attr =  HS]
index.dat -> C:\Windows\Temp\Temporary Internet Files\Content.IE5\index.dat ->  [Ver =  | Size = 32768 bytes | Modified Date = 04/12/2007 14:53:07 | Attr =  HS]
desktop.ini -> C:\Windows\Temp\History\History.IE5\desktop.ini ->  [Ver =  | Size = 145 bytes | Modified Date = 14/07/2007 18:50:13 | Attr =  HS]
desktop.ini -> C:\Windows\Temp\Temporary Internet Files\Content.IE5\desktop.ini ->  [Ver =  | Size = 67 bytes | Modified Date = 14/07/2007 18:50:13 | Attr =  HS]
desktop.ini -> C:\Windows\Temp\Temporary Internet Files\Content.IE5\1FS48HI4\desktop.ini ->  [Ver =  | Size = 67 bytes | Modified Date = 14/07/2007 18:50:13 | Attr =  HS]
desktop.ini -> C:\Windows\Temp\Temporary Internet Files\Content.IE5\5IUL6QK4\desktop.ini ->  [Ver =  | Size = 67 bytes | Modified Date = 14/07/2007 18:50:13 | Attr =  HS]
desktop.ini -> C:\Windows\Temp\Temporary Internet Files\Content.IE5\FGLHLXN0\desktop.ini ->  [Ver =  | Size = 67 bytes | Modified Date = 14/07/2007 18:50:13 | Attr =  HS]
desktop.ini -> C:\Windows\Temp\Temporary Internet Files\Content.IE5\LY93RQNH\desktop.ini ->  [Ver =  | Size = 67 bytes | Modified Date = 14/07/2007 18:50:13 | Attr =  HS]

< End of report >

[Scotty]

Hi

I'm afraid I have unpleasant news for you. You have a Dangerous infection on this machine.
The infection is delivered by a Backdoor Trojan.
It allows outsiders COMPLETE access to every keystroke, account, and password you use while on this machine, and complete access to any other data present...
IF this computer has been used for any kind of important data, my best recommendation is to Disconnect from Internet, Re-Format the entire drive and re-install your Operating system and Applications.

We can likely clean the infected files off the computer, and if you wish we will attempt to do so, but we cannot be sure that the infection didn't do something to your system to reduce the system security. In that instance, even after removal of the infection, you could be subject to another attack or takeover as soon as you re-connect to the Internet.

The Decision Whether to ReFormat or Not should be based on:

• The use of the computer - this is the primary factor in the decision whether to re-format and re-install, or just disinfect.
• The variety of malware - this influences the decision on whether to re-format and re-install, or just disinfect.

If the Computer has been used for any important data, you are strongly advised to do the following, immediately:

• Disconnect the infected computer from the internet and from any networked computers until the computer can be cleaned.
• Back up all important data on the machine. Do not back up any Applications (programs). Those should be re-installed from the original source CDs or websites.
• If you have ever used this computer for shopping, banking, or any transactions relating to your financial well being:
  Call all of your banks, credit card companies, and financial institutions, informing them that you may be a victim of identity theft, and to put a watch on your accounts or change all your account numbers.
• From a clean computer, change ALL your online passwords -- for ISP login, email, banks, financial accounts, PayPal, eBay, online companies, and any online forums or groups you belong to.
• DO NOT change passwords or do any transactions while using the infected computer because the attacker will get the new password and transaction information.
• Take any other steps you think appropriate for an attempted identity theft.

While you are deciding whether to ReFormat and Re-Install, a useful link is here: http://www.dslreports.com/faq/10063
Please let me know what you decide.

[maxwellp]

hi there,

yes thats bad news, i think i will re install windows. although i have no disk as it was already on the computer when i bought it.
i spoze i will have to purchase the disk.
Is it the case that somebody will definately have the details off my computer? or is it only if they decide to look at my cpmputer.

thanks for looking at the logs.

[Scotty]

Hold the phone maxwellp.

Youve got a new pc there. Go to Start>My Computer> Local Drives.

Do you have two there, one called C the other saying something like RP?

[maxwellp]

hi there,

No I only have the one drive c, and my dvd rw drive