ComboFix 07-11-08.1 - Chappers 2007-11-08 15:22:37.3 -
FAT32x86
Microsoft Windows XP Professional 5.1.2600.0.1252.1.1033.18.95 [GMT 0:00]
Running from: C:\Documents and Settings\Chappers\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\Chappers\Desktop\CFScript.txt
* Created a new restore point
FILE
C:\mlpss.exe
C:\WINDOWS\picts-2894.zip
C:\WINDOWS\picts-3129.zip
C:\WINDOWS\picts-3142.zip
C:\WINDOWS\picts-4672.zip
C:\WINDOWS\picts-4760.zip
C:\WINDOWS\picts-5106.zip
C:\WINDOWS\picts-6380.zip
C:\WINDOWS\picts-6505.zip
C:\WINDOWS\picts-7798.zip
C:\WINDOWS\picts-7964.zip
C:\WINDOWS\picts-8001.zip
C:\WINDOWS\picts-8523.zip
C:\WINDOWS\picts-8618.zip
C:\WINDOWS\picts-8760.zip
C:\WINDOWS\system32\alle32.exe
C:\WINDOWS\system32\dllcache\jucheck.exe
C:\WINDOWS\system32\icf.exe
C:\WINDOWS\system32\vi32.exe
C:\WINDOWS\system32\vrm.exe
C:\WINDOWS\system32\vsm.exe
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\Chappers\Application Data\WinAnonymous
C:\Documents and Settings\Chappers\Application Data\WinAnonymous\Logs\update.log
C:\mlpss.exe
C:\Program Files\Common Files\WinAnonymous
C:\Program Files\Common Files\WinAnonymous\mc.exe
C:\Program Files\WinAnonymous
C:\Program Files\WinAnonymous\config.ini
C:\Program Files\WinAnonymous\data\application\7-Zip Compression Pgm.scr
C:\Program Files\WinAnonymous\data\application\AbsoluteFTP.scr
C:\Program Files\WinAnonymous\data\application\ACDSee32.scr
C:\Program Files\WinAnonymous\data\application\Acoustica CD Label Maker.scr
C:\Program Files\WinAnonymous\data\application\Ad-aware SE.scr
C:\Program Files\WinAnonymous\data\application\Adaptec's Audio CD.scr
C:\Program Files\WinAnonymous\data\application\Adaptec Easy CD Creator v4.scr
C:\Program Files\WinAnonymous\data\application\Addsoft.scr
C:\Program Files\WinAnonymous\data\application\AddWeb 3.0.scr
C:\Program Files\WinAnonymous\data\application\Adobe Acrobat Reader v3.0.scr
C:\Program Files\WinAnonymous\data\application\Adobe Acrobat Reader v3.1.scr
C:\Program Files\WinAnonymous\data\application\Adobe Acrobat Reader v4.0.scr
C:\Program Files\WinAnonymous\data\application\Adobe Acrobat Reader v5.0.scr
C:\Program Files\WinAnonymous\data\application\Adobe Acrobat Reader v6.0.scr
C:\Program Files\WinAnonymous\data\application\Adobe Acrobat Reader v7.0.scr
C:\Program Files\WinAnonymous\data\application\Adobe Photoshop v5.0 LE.scr
C:\Program Files\WinAnonymous\data\application\Adobe Photoshop v5.5.scr
C:\Program Files\WinAnonymous\data\application\Adobe Photoshop v6.0.scr
C:\Program Files\WinAnonymous\data\application\Adobe Photoshop v7.0.scr
C:\Program Files\WinAnonymous\data\application\Advanced Disk Catalog.scr
C:\Program Files\WinAnonymous\data\application\Advanced MP3 Catalog.scr
C:\Program Files\WinAnonymous\data\application\Advanced Password Recovery.scr
C:\Program Files\WinAnonymous\data\application\ahead cover designer.scr
C:\Program Files\WinAnonymous\data\application\Albatros ADGaspect.scr
C:\Program Files\WinAnonymous\data\application\Albatros ADGpano.scr
C:\Program Files\WinAnonymous\data\application\Albatros ADGview.scr
C:\Program Files\WinAnonymous\data\application\Alcohol MRU List.scr
C:\Program Files\WinAnonymous\data\application\Animation Shop 1.x.scr
C:\Program Files\WinAnonymous\data\application\Animation Shop 3.x.scr
C:\Program Files\WinAnonymous\data\application\AOL - Spool.scr
C:\Program Files\WinAnonymous\data\application\ASPack.scr
C:\Program Files\WinAnonymous\data\application\Avant Browser.scr
C:\Program Files\WinAnonymous\data\application\AX-Icons 4.x.scr
C:\Program Files\WinAnonymous\data\application\Axialis Icon Workshop 5.x.scr
C:\Program Files\WinAnonymous\data\application\Axialis Media Browser.scr
C:\Program Files\WinAnonymous\data\application\Babylon Builder 2.2.scr
C:\Program Files\WinAnonymous\data\application\Babylon Translator.scr
C:\Program Files\WinAnonymous\data\application\BlazeDVD 2.0.scr
C:\Program Files\WinAnonymous\data\application\Bookreader.scr
C:\Program Files\WinAnonymous\data\application\C++ Builder.scr
C:\Program Files\WinAnonymous\data\application\Cabinet Manager.scr
C:\Program Files\WinAnonymous\data\application\Chameleon Web Browser.scr
C:\Program Files\WinAnonymous\data\application\Classify 98.scr
C:\Program Files\WinAnonymous\data\application\Clicktionary 2000.scr
C:\Program Files\WinAnonymous\data\application\CoffeeCup DirectFTP.scr
C:\Program Files\WinAnonymous\data\application\CoffeeCup GIF Animator.scr
C:\Program Files\WinAnonymous\data\application\Cool Edit 2000 1.1.scr
C:\Program Files\WinAnonymous\data\application\Cool Edit Pro.scr
C:\Program Files\WinAnonymous\data\application\Corel PhotoPaint 8.scr
C:\Program Files\WinAnonymous\data\application\CrissCross.scr
C:\Program Files\WinAnonymous\data\application\CRT 2.x.scr
C:\Program Files\WinAnonymous\data\application\Cute FTP v3.0.scr
C:\Program Files\WinAnonymous\data\application\Cute FTP v4.0.scr
C:\Program Files\WinAnonymous\data\application\Cute MX.scr
C:\Program Files\WinAnonymous\data\application\CuteFTP.scr
C:\Program Files\WinAnonymous\data\application\CuteHTML.scr
C:\Program Files\WinAnonymous\data\application\DataRescue_IDA.scr
C:\Program Files\WinAnonymous\data\application\Delphi v3.scr
C:\Program Files\WinAnonymous\data\application\Delphi v4.scr
C:\Program Files\WinAnonymous\data\application\Delphi v5.scr
C:\Program Files\WinAnonymous\data\application\Delphi v7.scr
C:\Program Files\WinAnonymous\data\application\Disk Explorer Professional 3.scr
C:\Program Files\WinAnonymous\data\application\Diskeeper 5.0.scr
C:\Program Files\WinAnonymous\data\application\DivX Player.scr
C:\Program Files\WinAnonymous\data\application\Download Accelerator.scr
C:\Program Files\WinAnonymous\data\application\Ebay Toolbar.scr
C:\Program Files\WinAnonymous\data\application\EditPad.scr
C:\Program Files\WinAnonymous\data\application\EditPlus 2.scr
C:\Program Files\WinAnonymous\data\application\edonkey2000.scr
C:\Program Files\WinAnonymous\data\application\eMule.scr
C:\Program Files\WinAnonymous\data\application\Enfish Onespace.scr
C:\Program Files\WinAnonymous\data\application\Enigma Browser.scr
C:\Program Files\WinAnonymous\data\application\F-Secure SSH 2.x.scr
C:\Program Files\WinAnonymous\data\application\Fix-It 2000.scr
C:\Program Files\WinAnonymous\data\application\FlashGet.scr
C:\Program Files\WinAnonymous\data\application\FotoCanvas 2.0.scr
C:\Program Files\WinAnonymous\data\application\Fotostation 4.0.scr
C:\Program Files\WinAnonymous\data\application\foxit reader.scr
C:\Program Files\WinAnonymous\data\application\Free Download Manager 1.x.scr
C:\Program Files\WinAnonymous\data\application\FTP Explorer.scr
C:\Program Files\WinAnonymous\data\application\FTP Voyager.scr
C:\Program Files\WinAnonymous\data\application\Fun CD.scr
C:\Program Files\WinAnonymous\data\application\Gator.scr
C:\Program Files\WinAnonymous\data\application\GeoVid Video to Flash Batch Converter.scr
C:\Program Files\WinAnonymous\data\application\GetRight ExplorerBar.scr
C:\Program Files\WinAnonymous\data\application\GetRight.scr
C:\Program Files\WinAnonymous\data\application\Go!Zilla.scr
C:\Program Files\WinAnonymous\data\application\Google Deskbar.scr
C:\Program Files\WinAnonymous\data\application\Google Desktop Search History.scr
C:\Program Files\WinAnonymous\data\application\Google Toolbar.scr
C:\Program Files\WinAnonymous\data\application\Google Video Player 1.x.scr
C:\Program Files\WinAnonymous\data\application\GoZilla.scr
C:\Program Files\WinAnonymous\data\application\Gravity Newsreader.scr
C:\Program Files\WinAnonymous\data\application\hardcopy.scr
C:\Program Files\WinAnonymous\data\application\Helios TextPad v3.scr
C:\Program Files\WinAnonymous\data\application\Helios TextPad v4.scr
C:\Program Files\WinAnonymous\data\application\HelpWriter.scr
C:\Program Files\WinAnonymous\data\application\hexworkshop.scr
C:\Program Files\WinAnonymous\data\application\Homesite 4.0.scr
C:\Program Files\WinAnonymous\data\application\Hotbar 3.0.scr
C:\Program Files\WinAnonymous\data\application\HotJava Browser.scr
C:\Program Files\WinAnonymous\data\application\HTML Help Workshop.scr
C:\Program Files\WinAnonymous\data\application\Icon Extractor.scr
C:\Program Files\WinAnonymous\data\application\iMesh.scr
C:\Program Files\WinAnonymous\data\application\InoculatelT PE Antivirus.scr
C:\Program Files\WinAnonymous\data\application\InstallShield Express.scr
C:\Program Files\WinAnonymous\data\application\InterQuick.scr
C:\Program Files\WinAnonymous\data\application\Irfanview.scr
C:\Program Files\WinAnonymous\data\application\Iso Buster.scr
C:\Program Files\WinAnonymous\data\application\Jasc Animation Shop 3.scr
C:\Program Files\WinAnonymous\data\application\JASC Paintshop Pro v5.scr
C:\Program Files\WinAnonymous\data\application\JASC Paintshop Pro v6.scr
C:\Program Files\WinAnonymous\data\application\JASC Paintshop Pro v7.scr
C:\Program Files\WinAnonymous\data\application\JASC Paintshop Pro v8.scr
C:\Program Files\WinAnonymous\data\application\Jet Photo Shell.scr
C:\Program Files\WinAnonymous\data\application\juno.scr
C:\Program Files\WinAnonymous\data\application\K-Lite Codec Pack.scr
C:\Program Files\WinAnonymous\data\application\Kazaa Media Desktop.scr
C:\Program Files\WinAnonymous\data\application\Kodak Imaging.scr
C:\Program Files\WinAnonymous\data\application\LeapFTP 2.6.scr
C:\Program Files\WinAnonymous\data\application\LeechFTP.scr
C:\Program Files\WinAnonymous\data\application\Letterbox.scr
C:\Program Files\WinAnonymous\data\application\LViewPro 2.x.scr
C:\Program Files\WinAnonymous\data\application\Macromedia Dreamweaver MX.scr
C:\Program Files\WinAnonymous\data\application\Macromedia Dreamweaver Ultradev 4.scr
C:\Program Files\WinAnonymous\data\application\Macromedia Firework MX.scr
C:\Program Files\WinAnonymous\data\application\Macromedia Fireworks 3.scr
C:\Program Files\WinAnonymous\data\application\Macromedia Flash MX.scr
C:\Program Files\WinAnonymous\data\application\Macromedia Flash Player.scr
C:\Program Files\WinAnonymous\data\application\Macromedia Flash v4.0.scr
C:\Program Files\WinAnonymous\data\application\Magic ISO Maker 4.6.scr
C:\Program Files\WinAnonymous\data\application\mapinfo mapmarker.scr
C:\Program Files\WinAnonymous\data\application\Mass Download.scr
C:\Program Files\WinAnonymous\data\application\MasterSplitter v2.1.scr
C:\Program Files\WinAnonymous\data\application\McAfee Virus Scan.scr
C:\Program Files\WinAnonymous\data\application\MEDA MP3 Splitter.scr
C:\Program Files\WinAnonymous\data\application\Metapad.scr
C:\Program Files\WinAnonymous\data\application\MGI PHOTOSUITE SE 1.x.scr
C:\Program Files\WinAnonymous\data\application\MGUSOFT Setup Builder.scr
C:\Program Files\WinAnonymous\data\application\Microangelo 98.scr
C:\Program Files\WinAnonymous\data\application\MicroAngelo.scr
C:\Program Files\WinAnonymous\data\application\Micrografx Picture Publisher v7.scr
C:\Program Files\WinAnonymous\data\application\Micrografx Picture Publisher v8.scr
C:\Program Files\WinAnonymous\data\application\Microsoft FrontPage Express.scr
C:\Program Files\WinAnonymous\data\application\Microsoft FrontPage.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Help Workshop.scr
C:\Program Files\WinAnonymous\data\application\Microsoft HTML Help.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Imaging.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Managemant Console.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Netmeeting.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Office 2000.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Office 2003.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Office 97.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Office InfoPath 2003.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Office XP.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Office.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Outlook Express 5.0.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Photo Editor 3.x.scr
C:\Program Files\WinAnonymous\data\application\MicroSoft PhotoDraw.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Picture It Publishing.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Publisher 2000.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Visual Studio 6.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Windows Paint.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Windows WordPad.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Word 2000.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Word Backup Files.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Works 4.0.scr
C:\Program Files\WinAnonymous\data\application\Mijenix Powerdesk 4.0.scr
C:\Program Files\WinAnonymous\data\application\MIRC.scr
C:\Program Files\WinAnonymous\data\application\miroMEDIA PCTV.scr
C:\Program Files\WinAnonymous\data\application\mixmeister.scr
C:\Program Files\WinAnonymous\data\application\Morpheus.scr
C:\Program Files\WinAnonymous\data\application\MovieXone 1.0.scr
C:\Program Files\WinAnonymous\data\application\Mozart 4.0.scr
C:\Program Files\WinAnonymous\data\application\ms autoroute express.scr
C:\Program Files\WinAnonymous\data\application\MS WORD.scr
C:\Program Files\WinAnonymous\data\application\MSE.scr
C:\Program Files\WinAnonymous\data\application\MSN Toolbar.scr
C:\Program Files\WinAnonymous\data\application\Music Match Jukebox.scr
C:\Program Files\WinAnonymous\data\application\MyWay Advertising.scr
C:\Program Files\WinAnonymous\data\application\Napster Music Community.scr
C:\Program Files\WinAnonymous\data\application\Naviscope.scr
C:\Program Files\WinAnonymous\data\application\NEATO Labels.scr
C:\Program Files\WinAnonymous\data\application\nero burning rom.scr
C:\Program Files\WinAnonymous\data\application\Nero Vision.scr
C:\Program Files\WinAnonymous\data\application\Net Vampire 3.x.scr
C:\Program Files\WinAnonymous\data\application\netants.scr
C:\Program Files\WinAnonymous\data\application\NetCaptor.scr
C:\Program Files\WinAnonymous\data\application\netmeeting.scr
C:\Program Files\WinAnonymous\data\application\Netsonic.scr
C:\Program Files\WinAnonymous\data\application\Netzip Download Demon 3.x.scr
C:\Program Files\WinAnonymous\data\application\NewsBin Pro 4.scr
C:\Program Files\WinAnonymous\data\application\Norton AntiVirus 2000 (v6).scr
C:\Program Files\WinAnonymous\data\application\Norton AntiVirus 2003.scr
C:\Program Files\WinAnonymous\data\application\Norton Commander.scr
C:\Program Files\WinAnonymous\data\application\Norton File Manager.scr
C:\Program Files\WinAnonymous\data\application\Norton Firewall.scr
C:\Program Files\WinAnonymous\data\application\Norton Internet Security.scr
C:\Program Files\WinAnonymous\data\application\Norton LiveUpdate.scr
C:\Program Files\WinAnonymous\data\application\Norton Utilities 2000.scr
C:\Program Files\WinAnonymous\data\application\NotePad Plus.scr
C:\Program Files\WinAnonymous\data\application\notetab lite.scr
C:\Program Files\WinAnonymous\data\application\NoteTab Pro.scr
C:\Program Files\WinAnonymous\data\application\Object Rescue.scr
C:\Program Files\WinAnonymous\data\application\OmniPage 10.0.scr
C:\Program Files\WinAnonymous\data\application\OnTrack Powerdesk 4.scr
C:\Program Files\WinAnonymous\data\application\Ontrack PowerDesk 5.scr
C:\Program Files\WinAnonymous\data\application\PackageForTheWeb.scr
C:\Program Files\WinAnonymous\data\application\Paint Shop Pro 5.0.scr
C:\Program Files\WinAnonymous\data\application\Paint Shop Pro 7.0.scr
C:\Program Files\WinAnonymous\data\application\Password Safe.scr
C:\Program Files\WinAnonymous\data\application\PE Explorer 1.95.scr
C:\Program Files\WinAnonymous\data\application\Personal Ancestral File.scr
C:\Program Files\WinAnonymous\data\application\photo magic 4.0.scr
C:\Program Files\WinAnonymous\data\application\PhotoCanvas 2.0.scr
C:\Program Files\WinAnonymous\data\application\Photodex Compupic Pro.scr
C:\Program Files\WinAnonymous\data\application\PhotoDraw 2000.scr
C:\Program Files\WinAnonymous\data\application\PhotoImpact 8.0.scr
C:\Program Files\WinAnonymous\data\application\PhotoImpact Viewer 4.0.scr
C:\Program Files\WinAnonymous\data\application\PicoZip.scr
C:\Program Files\WinAnonymous\data\application\PictureIt Digital Image Pro 7.0.scr
C:\Program Files\WinAnonymous\data\application\PKZip for Windows v2.60.03+.scr
C:\Program Files\WinAnonymous\data\application\PolyView.scr
C:\Program Files\WinAnonymous\data\application\Popup Purger.scr
C:\Program Files\WinAnonymous\data\application\PopUpCop.scr
C:\Program Files\WinAnonymous\data\application\Power archiver.scr
C:\Program Files\WinAnonymous\data\application\PowerArc.scr
C:\Program Files\WinAnonymous\data\application\PowerDVD.scr
C:\Program Files\WinAnonymous\data\application\PowerZip.scr
C:\Program Files\WinAnonymous\data\application\Privacy Eraser Pro.scr
C:\Program Files\WinAnonymous\data\application\Putty hostkeys.scr
C:\Program Files\WinAnonymous\data\application\PYTHON.scr
C:\Program Files\WinAnonymous\data\application\QuickTime.scr
C:\Program Files\WinAnonymous\data\application\Real Audio Player v6 v7 v8.scr
C:\Program Files\WinAnonymous\data\application\Real Download v4.scr
C:\Program Files\WinAnonymous\data\application\RealNetworks Real Download.scr
C:\Program Files\WinAnonymous\data\application\RealOne & RealPlayer.scr
C:\Program Files\WinAnonymous\data\application\RealVNC.scr
C:\Program Files\WinAnonymous\data\application\RegEdit.scr
C:\Program Files\WinAnonymous\data\application\Roxio Easy CD Creator.scr
C:\Program Files\WinAnonymous\data\application\Save Now.scr
C:\Program Files\WinAnonymous\data\application\Scour Exchange.scr
C:\Program Files\WinAnonymous\data\application\Seal Module Mlayer.scr
C:\Program Files\WinAnonymous\data\application\SearchAndBrowse.scr
C:\Program Files\WinAnonymous\data\application\SearchAnt.scr
C:\Program Files\WinAnonymous\data\application\SearchV.scr
C:\Program Files\WinAnonymous\data\application\SearchWolf.scr
C:\Program Files\WinAnonymous\data\application\SearchWWW.scr
C:\Program Files\WinAnonymous\data\application\SideStep.scr
C:\Program Files\WinAnonymous\data\application\Skype.scr
C:\Program Files\WinAnonymous\data\application\Smart Explorer.scr
C:\Program Files\WinAnonymous\data\application\SmartDraw 6.scr
C:\Program Files\WinAnonymous\data\application\smartftp.scr
C:\Program Files\WinAnonymous\data\application\SmartPops.scr
C:\Program Files\WinAnonymous\data\application\Sonic Foundry's Acid 2.0.scr
C:\Program Files\WinAnonymous\data\application\Sonique Player.scr
C:\Program Files\WinAnonymous\data\application\Spinner Plus.scr
C:\Program Files\WinAnonymous\data\application\SpotOn Browser plugin.scr
C:\Program Files\WinAnonymous\data\application\Staff-FTP.scr
C:\Program Files\WinAnonymous\data\application\Star Downloader.scr
C:\Program Files\WinAnonymous\data\application\Stardialer.scr
C:\Program Files\WinAnonymous\data\application\StarOffice 5.x.scr
C:\Program Files\WinAnonymous\data\application\SubmitWolf Pro.scr
C:\Program Files\WinAnonymous\data\application\Sun Java Cache.scr
C:\Program Files\WinAnonymous\data\application\SureThing CD Labeler.scr
C:\Program Files\WinAnonymous\data\application\SVAPlayer.scr
C:\Program Files\WinAnonymous\data\application\SWiSH 2.0.scr
C:\Program Files\WinAnonymous\data\application\Teleport Pro.scr
C:\Program Files\WinAnonymous\data\application\Telnet.scr
C:\Program Files\WinAnonymous\data\application\Text Pad 4.x.scr
C:\Program Files\WinAnonymous\data\application\The Playa.scr
C:\Program Files\WinAnonymous\data\application\Third Voice 1.x.scr
C:\Program Files\WinAnonymous\data\application\Thumbs Plus 4.scr
C:\Program Files\WinAnonymous\data\application\Timesink.scr
C:\Program Files\WinAnonymous\data\application\TinyBar.scr
C:\Program Files\WinAnonymous\data\application\TOPicks.scr
C:\Program Files\WinAnonymous\data\application\Total Commander.scr
C:\Program Files\WinAnonymous\data\application\transponder.scr
C:\Program Files\WinAnonymous\data\application\Trellians Classify 98.scr
C:\Program Files\WinAnonymous\data\application\Tribal Voice's PowWow.scr
C:\Program Files\WinAnonymous\data\application\Trojan Remover.scr
C:\Program Files\WinAnonymous\data\application\TSADBOT.scr
C:\Program Files\WinAnonymous\data\application\UCmore toolbar.scr
C:\Program Files\WinAnonymous\data\application\Ulead Gif Animator v4.0.scr
C:\Program Files\WinAnonymous\data\application\Ulead GIF Animator v5.0.scr
C:\Program Files\WinAnonymous\data\application\Ulead Photo Explorer v4.2.scr
C:\Program Files\WinAnonymous\data\application\Ulead Photo Express.scr
C:\Program Files\WinAnonymous\data\application\Ulead PhotoImpact v5.scr
C:\Program Files\WinAnonymous\data\application\Ulead VideoStudio 4.0.scr
C:\Program Files\WinAnonymous\data\application\Ultimate Paint.scr
C:\Program Files\WinAnonymous\data\application\ULTImate Technology BV v5.5.scr
C:\Program Files\WinAnonymous\data\application\UltraEdit v4.scr
C:\Program Files\WinAnonymous\data\application\UltraEdit v7.scr
C:\Program Files\WinAnonymous\data\application\UltraEdit.scr
C:\Program Files\WinAnonymous\data\application\UltraISO 7.x.scr
C:\Program Files\WinAnonymous\data\application\uTorrent 1.x.scr
C:\Program Files\WinAnonymous\data\application\VBoxEdit.scr
C:\Program Files\WinAnonymous\data\application\VirtualDub.scr
C:\Program Files\WinAnonymous\data\application\VMWARE.scr
C:\Program Files\WinAnonymous\data\application\Vueprint.scr
C:\Program Files\WinAnonymous\data\application\VX2 Respondmiter.scr
C:\Program Files\WinAnonymous\data\application\W32Dasm.scr
C:\Program Files\WinAnonymous\data\application\Web Ferret v3.scr
C:\Program Files\WinAnonymous\data\application\WebFerret.scr
C:\Program Files\WinAnonymous\data\application\webhancer.scr
C:\Program Files\WinAnonymous\data\application\Wildstylz.scr
C:\Program Files\WinAnonymous\data\application\WildTangent.scr
C:\Program Files\WinAnonymous\data\application\WinAce.scr
C:\Program Files\WinAnonymous\data\application\winamp.scr
C:\Program Files\WinAnonymous\data\application\Windows Commander.scr
C:\Program Files\WinAnonymous\data\application\WinHTTrack Website Copier.scr
C:\Program Files\WinAnonymous\data\application\WinOnCD.scr
C:\Program Files\WinAnonymous\data\application\WinRar.scr
C:\Program Files\WinAnonymous\data\application\Winshow.scr
C:\Program Files\WinAnonymous\data\application\WinUAE.scr
C:\Program Files\WinAnonymous\data\application\Winupie.scr
C:\Program Files\WinAnonymous\data\application\WinVNC.scr
C:\Program Files\WinAnonymous\data\application\WinZip v8.scr
C:\Program Files\WinAnonymous\data\application\Wise Installer.scr
C:\Program Files\WinAnonymous\data\application\Worm.Sobig.scr
C:\Program Files\WinAnonymous\data\application\WurldMedia.scr
C:\Program Files\WinAnonymous\data\application\Xara 3D v4.x.scr
C:\Program Files\WinAnonymous\data\application\Xara Webstyle.scr
C:\Program Files\WinAnonymous\data\application\XDialer.scr
C:\Program Files\WinAnonymous\data\application\XING MP3 PLAYER.scr
C:\Program Files\WinAnonymous\data\application\XLoader.scr
C:\Program Files\WinAnonymous\data\application\Xolox.scr
C:\Program Files\WinAnonymous\data\application\Xrenoder.scr
C:\Program Files\WinAnonymous\data\application\Xupiter toolbar.scr
C:\Program Files\WinAnonymous\data\application\Xzoomy.scr
C:\Program Files\WinAnonymous\data\application\Yahoo Player.scr
C:\Program Files\WinAnonymous\data\application\Yahoo! Toolbar.scr
C:\Program Files\WinAnonymous\data\application\Yamaha S-YXG100.scr
C:\Program Files\WinAnonymous\data\application\ZeroPopup.scr
C:\Program Files\WinAnonymous\data\application\ZipMagic 2000.scr
C:\Program Files\WinAnonymous\data\application\Zone Alarm.scr
C:\Program Files\WinAnonymous\data\brand.dat
C:\Program Files\WinAnonymous\data\firefox\firefox - cache.scr
C:\Program Files\WinAnonymous\data\firefox\firefox - cookies.scr
C:\Program Files\WinAnonymous\data\firefox\firefox - history.scr
C:\Program Files\WinAnonymous\data\ie\ie cookies.scr
C:\Program Files\WinAnonymous\data\ie\ie internet cache.scr
C:\Program Files\WinAnonymous\data\ie\ie privacy history.scr
C:\Program Files\WinAnonymous\data\ie\ie typed urls.scr
C:\Program Files\WinAnonymous\data\ie\ie url history.scr
C:\Program Files\WinAnonymous\data\ie\windows autocomplete.scr
C:\Program Files\WinAnonymous\data\ie\windows downloaded files.scr
C:\Program Files\WinAnonymous\data\ie\windows favorites order.scr
C:\Program Files\WinAnonymous\data\ie\windows passwords.scr
C:\Program Files\WinAnonymous\data\messanger\aim.scr
C:\Program Files\WinAnonymous\data\messanger\AOL Bart.scr
C:\Program Files\WinAnonymous\data\messanger\AOL Instant Messenger.scr
C:\Program Files\WinAnonymous\data\messanger\aolim.scr
C:\Program Files\WinAnonymous\data\messanger\icq - download.scr
C:\Program Files\WinAnonymous\data\messanger\icq - logs.scr
C:\Program Files\WinAnonymous\data\messanger\Miranda ICQ.scr
C:\Program Files\WinAnonymous\data\messanger\MSN Messenger User Account.scr
C:\Program Files\WinAnonymous\data\messanger\Trillian cache.scr
C:\Program Files\WinAnonymous\data\messanger\trillian downloads.scr
C:\Program Files\WinAnonymous\data\messanger\trillian logs.scr
C:\Program Files\WinAnonymous\data\messanger\yahoo messenger logs.scr
C:\Program Files\WinAnonymous\data\messanger\Yahoo! Messenger.scr
C:\Program Files\WinAnonymous\data\mozilla\mozilla - autocomplete.scr
C:\Program Files\WinAnonymous\data\mozilla\mozilla - cache.scr
C:\Program Files\WinAnonymous\data\mozilla\mozilla - cookies.scr
C:\Program Files\WinAnonymous\data\mozilla\Mozilla - history.scr
C:\Program Files\WinAnonymous\data\mozilla\mozilla - saved passwords.scr
C:\Program Files\WinAnonymous\data\mozilla\Mozilla - typed urls.scr
C:\Program Files\WinAnonymous\data\netscape\netscape - cache.scr
C:\Program Files\WinAnonymous\data\netscape\netscape - cookies.scr
C:\Program Files\WinAnonymous\data\netscape\netscape - history.scr
C:\Program Files\WinAnonymous\data\netscape\Netscape Navigator - last trusted apps.scr
C:\Program Files\WinAnonymous\data\opera\Opera Browser - cache.scr
C:\Program Files\WinAnonymous\data\opera\Opera Browser - cookies.scr
C:\Program Files\WinAnonymous\data\opera\Opera Browser - Download.scr
C:\Program Files\WinAnonymous\data\opera\Opera Browser - history.scr
C:\Program Files\WinAnonymous\data\opera\Opera Browser - misc.scr
C:\Program Files\WinAnonymous\data\opera\Opera Browser - mru.scr
C:\Program Files\WinAnonymous\data\opera\Opera Browser - visited.scr
C:\Program Files\WinAnonymous\data\sfl.dat
C:\Program Files\WinAnonymous\data\skin.skn
C:\Program Files\WinAnonymous\data\srl.dat
C:\Program Files\WinAnonymous\data\windows\Direct Draw.scr
C:\Program Files\WinAnonymous\data\windows\direct input.scr
C:\Program Files\WinAnonymous\data\windows\last files.scr
C:\Program Files\WinAnonymous\data\windows\Microsoft Send-To Extensions.scr
C:\Program Files\WinAnonymous\data\windows\windows applog.scr
C:\Program Files\WinAnonymous\data\windows\windows documents.scr
C:\Program Files\WinAnonymous\data\windows\Windows Downloaded Installations.scr
C:\Program Files\WinAnonymous\data\windows\windows empty recylcing bin.scr
C:\Program Files\WinAnonymous\data\windows\Windows Explorer User Assistant history.scr
C:\Program Files\WinAnonymous\data\windows\windows findfile.scr
C:\Program Files\WinAnonymous\data\windows\Windows FTP Accounts.scr
C:\Program Files\WinAnonymous\data\windows\windows hotfix uninstall.scr
C:\Program Files\WinAnonymous\data\windows\windows logfiles.scr
C:\Program Files\WinAnonymous\data\windows\Windows Mapped Drives.scr
C:\Program Files\WinAnonymous\data\windows\windows media player 7.scr
C:\Program Files\WinAnonymous\data\windows\windows minidump.scr
C:\Program Files\WinAnonymous\data\windows\windows MUICache.scr
C:\Program Files\WinAnonymous\data\windows\windows network links.scr
C:\Program Files\WinAnonymous\data\windows\windows opensave.scr
C:\Program Files\WinAnonymous\data\windows\windows openwith.scr
C:\Program Files\WinAnonymous\data\windows\windows prefetch.scr
C:\Program Files\WinAnonymous\data\windows\windows reg history.scr
C:\Program Files\WinAnonymous\data\windows\windows run history.scr
C:\Program Files\WinAnonymous\data\windows\windows search.scr
C:\Program Files\WinAnonymous\data\windows\windows start menu order.scr
C:\Program Files\WinAnonymous\data\windows\windows stream history.scr
C:\Program Files\WinAnonymous\data\windows\windows temp.scr
C:\Program Files\WinAnonymous\data\windows\windows update.scr
C:\Program Files\WinAnonymous\data\windows\windows usb.scr
C:\Program Files\WinAnonymous\data\windows\Windows XP Unread Mail Count.scr
C:\Program Files\WinAnonymous\default.ini
C:\Program Files\WinAnonymous\GDC.exe
C:\Program Files\WinAnonymous\GDC.url
C:\Program Files\WinAnonymous\GDCPatch.exe
C:\Program Files\WinAnonymous\gfx\button_arrow.bmp
C:\Program Files\WinAnonymous\gfx\button_arrow2.bmp
C:\Program Files\WinAnonymous\gfx\buy.bmp
C:\Program Files\WinAnonymous\gfx\checked.bmp
C:\Program Files\WinAnonymous\gfx\custom.bmp
C:\Program Files\WinAnonymous\gfx\customcleanup.bmp
C:\Program Files\WinAnonymous\gfx\header.bmp
C:\Program Files\WinAnonymous\gfx\icon.ico
C:\Program Files\WinAnonymous\gfx\icon_about.ico
C:\Program Files\WinAnonymous\gfx\icon_checked.ico
C:\Program Files\WinAnonymous\gfx\icon_grayed.ico
C:\Program Files\WinAnonymous\gfx\icon_link.ico
C:\Program Files\WinAnonymous\gfx\icon_manual.ico
C:\Program Files\WinAnonymous\gfx\icon_quit.ico
C:\Program Files\WinAnonymous\gfx\icon_support.ico
C:\Program Files\WinAnonymous\gfx\icon_unchecked.ico
C:\Program Files\WinAnonymous\gfx\icon_uncheked.ico
C:\Program Files\WinAnonymous\gfx\icon_uninstall.ico
C:\Program Files\WinAnonymous\gfx\icon_update.ico
C:\Program Files\WinAnonymous\gfx\log.bmp
C:\Program Files\WinAnonymous\gfx\logo.bmp
C:\Program Files\WinAnonymous\gfx\register.bmp
C:\Program Files\WinAnonymous\gfx\settings.bmp
C:\Program Files\WinAnonymous\gfx\sign_green.bmp
C:\Program Files\WinAnonymous\gfx\sign_green_big.bmp
C:\Program Files\WinAnonymous\gfx\sign_red.bmp
C:\Program Files\WinAnonymous\gfx\sign_red_big.bmp
C:\Program Files\WinAnonymous\gfx\sign_yellow.bmp
C:\Program Files\WinAnonymous\gfx\splash.bmp
C:\Program Files\WinAnonymous\gfx\status_good.bmp
C:\Program Files\WinAnonymous\gfx\status_risk.bmp
C:\Program Files\WinAnonymous\gfx\support.bmp
C:\Program Files\WinAnonymous\gfx\sys_shield.bmp
C:\Program Files\WinAnonymous\gfx\sys_update.bmp
C:\Program Files\WinAnonymous\gfx\sysstatus.bmp
C:\Program Files\WinAnonymous\gfx\unchecked.bmp
C:\Program Files\WinAnonymous\gfx\update.bmp
C:\Program Files\WinAnonymous\IH.exe
C:\Program Files\WinAnonymous\lang\Arabic.lng
C:\Program Files\WinAnonymous\lang\Brazilian.lng
C:\Program Files\WinAnonymous\lang\Catalan.lng
C:\Program Files\WinAnonymous\lang\Chinese.lng
C:\Program Files\WinAnonymous\lang\Czech.lng
C:\Program Files\WinAnonymous\lang\Danish.lng
C:\Program Files\WinAnonymous\lang\Dutch.lng
C:\Program Files\WinAnonymous\lang\English.lng
C:\Program Files\WinAnonymous\lang\Finnish.lng
C:\Program Files\WinAnonymous\lang\French.lng
C:\Program Files\WinAnonymous\lang\German.lng
C:\Program Files\WinAnonymous\lang\Greek.lng
C:\Program Files\WinAnonymous\lang\Hebrew.lng
C:\Program Files\WinAnonymous\lang\Italian.lng
C:\Program Files\WinAnonymous\lang\Japanese.lng
C:\Program Files\WinAnonymous\lang\Malayan.lng
C:\Program Files\WinAnonymous\lang\Norwegian.lng
C:\Program Files\WinAnonymous\lang\Polish.lng
C:\Program Files\WinAnonymous\lang\Portuguese.lng
C:\Program Files\WinAnonymous\lang\Russian.lng
C:\Program Files\WinAnonymous\lang\Slovenian.lng
C:\Program Files\WinAnonymous\lang\Spanish.lng
C:\Program Files\WinAnonymous\lang\Swedish.lng
C:\Program Files\WinAnonymous\lang\Thai.lng
C:\Program Files\WinAnonymous\lang\Turkish.lng
C:\Program Files\WinAnonymous\License.rtf
C:\Program Files\WinAnonymous\Readme.rtf
C:\Program Files\WinAnonymous\secure_del.dll
C:\Program Files\WinAnonymous\sr.log
C:\Program Files\WinAnonymous\support.url
C:\Program Files\WinAnonymous\UGDCcw.exe
C:\Program Files\WinAnonymous\unins000.dat
C:\Program Files\WinAnonymous\unins000.exe
C:\Program Files\WinAnonymous\updater.dat
C:\Program Files\WinAnonymous\updater.exe
C:\Program Files\WinAnonymous\ver.dat
C:\WINDOWS\picts-2894.zip
C:\WINDOWS\picts-3129.zip
C:\WINDOWS\picts-3142.zip
C:\WINDOWS\picts-4672.zip
C:\WINDOWS\picts-4760.zip
C:\WINDOWS\picts-5106.zip
C:\WINDOWS\picts-6380.zip
C:\WINDOWS\picts-6505.zip
C:\WINDOWS\picts-7798.zip
C:\WINDOWS\picts-7964.zip
C:\WINDOWS\picts-8001.zip
C:\WINDOWS\picts-8523.zip
C:\WINDOWS\picts-8618.zip
C:\WINDOWS\picts-8760.zip
C:\WINDOWS\system32\alle32.exe
C:\WINDOWS\system32\dllcache\jucheck.exe
C:\WINDOWS\system32\icf.exe
C:\WINDOWS\system32\vi32.exe
C:\WINDOWS\system32\vrm.exe
C:\WINDOWS\system32\vsm.exe
.
((((((((((((((((((((((((( Files Created from 2007-10-08 to 2007-11-08 )))))))))))))))))))))))))))))))
.
2007-11-08 03:15 51,200 --a------ C:\WINDOWS\NirCmd.exe
2007-11-07 23:33 1,538 --a------ C:\WINDOWS\system32\tmp.reg
2007-11-07 23:32 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
2007-11-07 23:32 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2007-11-07 23:32 53,248 --a------ C:\WINDOWS\system32\Process.exe
2007-11-07 23:32 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2007-11-07 23:32 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
2007-11-07 20:32 <DIR> d-------- C:\Program Files\Trend Micro
2007-11-07 03:08 <DIR> d--hs---- C:\FOUND.005
2007-11-07 03:00 <DIR> d-------- C:\Program Files\MSXML 4.0
2007-11-05 19:13 <DIR> d-------- C:\Program Files\Uniblue
2007-11-05 19:13 <DIR> d-------- C:\Documents and Settings\Chappers\Application Data\Uniblue
2007-11-05 19:11 <DIR> d-------- C:\Documents and Settings\Chappers\Application Data\Lavasoft
2007-11-05 18:52 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Citrix
2007-11-05 18:50 <DIR> d-------- C:\Program Files\Citrix
2007-11-05 18:50 60,968 --a------ C:\Documents and Settings\Chappers\GoToAssistDownloadHelper.exe
2007-11-05 18:02 <DIR> d-------- C:\Program Files\TechTracker
2007-11-05 18:02 <DIR> d-------- C:\Documents and Settings\Chappers\Application Data\VersionTracker Pro
2007-11-01 19:25 <DIR> d-------- C:\WINDOWS\system32\FlashAX
2007-10-31 03:54 40 --a------ C:\WINDOWS\ujf635.bin
2007-10-20 22:43 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\MGS
2007-10-16 23:19 <DIR> d-------- C:\Program Files\XoftSpySE
2007-10-16 22:50 <DIR> d-------- C:\Documents and Settings\Chappers\Application Data\SpywareBot
2007-10-14 16:40 63 --a------ C:\WINDOWS\system\SysSD.dll
2007-10-12 20:27 <DIR> d-------- C:\Program Files\Lavasoft
2007-10-12 20:27 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2007-10-12 20:26 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-10-12 19:09 1,060,864 --a------ C:\WINDOWS\system32\mfc71.dll
2007-10-12 19:09 89,088 --a------ C:\WINDOWS\system32\atl71.dll
2007-10-12 19:09 24,064 --a------ C:\WINDOWS\system32\msxml3a.dll
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-09-28 16:47 --------- d-----w C:\Documents and Settings\All Users\Application Data\pixelStorm
2006-04-30 23:26 266 --sh--w C:\Program Files\desktop.ini
2006-04-30 23:26 11,079 ---h--w C:\Program Files\folder.htt
.
((((((((((((((((((((((((((((( snapshot@2007-11-08_ 3.26.33.09 )))))))))))))))))))))))))))))))))))))))))
.
+ 2007-03-13 10:57:12 163,328 ----a-w C:\WINDOWS\erdnt\subs\F3M\ERDNT.EXE
- 2007-11-08 03:22:22 262,144 ----a-w C:\WINDOWS\system32\config\systemprofile\ntuser.dat
+ 2007-11-08 15:22:34 262,144 ----a-w C:\WINDOWS\system32\config\systemprofile\ntuser.dat
- 2007-08-12 13:00:10 40,108 ----a-w C:\WINDOWS\system32\perfc009.dat
+ 2007-11-08 03:30:34 40,108 ----a-w C:\WINDOWS\system32\perfc009.dat
- 2007-08-12 13:00:10 311,912 ----a-w C:\WINDOWS\system32\perfh009.dat
+ 2007-11-08 03:30:34 311,912 ----a-w C:\WINDOWS\system32\perfh009.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BJCFD"="C:\Program Files\BroadJump\Client Foundation\CFD.exe" [2002-09-10 21:26]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 04:00]
"Dell AIO Printer A940"="C:\Program Files\Dell AIO Printer A940\dlbabmgr.exe" [2003-02-17 17:00]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-09-05 00:28]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\ctfmon.exe" [2001-08-23 12:00]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:54]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-10-20 16:49]
"Uniblue RegistryBooster 2"="C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe" [2007-10-22 10:02]
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
VersionTrackerPro.lnk - C:\WINDOWS\Installer\{C1EDC38F-2760-4A4E-9CED-95B53024134C}\New_Shortcut_S1699_A8EB5A2133B04A97AEEFDFB17E2E701D.exe [2007-11-05 18:02:39]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\GoToAssist]
C:\Program Files\Citrix\GoToAssist\480\G2AWinLogon.dll 2007-11-05 18:50 10792 C:\Program Files\Citrix\GoToAssist\480\g2awinlogon.dll
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^EPSON Status Monitor 3 Environment Check.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\EPSON Status Monitor 3 Environment Check.lnk
backup=C:\WINDOWS\pss\EPSON Status Monitor 3 Environment Check.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Magentic]
C:\PROGRA~1\MAGENTIC\bin\Magentic.exe /c
S3 Bulk;HDJBulk;C:\WINDOWS\System32\Drivers\HDJBulk.sys
S3 GoToAssist;GoToAssist;"C:\Program Files\Citrix\GoToAssist\480\g2aservice.exe" Start=service
S3 HDJMidi;Hercules DJ Console MIDI;C:\WINDOWS\System32\DRIVERS\HDJMidi.sys
S3 STAC97NA;SigmaTel 3D Environmental Audio;C:\WINDOWS\System32\drivers\stac97na.sys
S3 STAC97NH;STAC97NH;C:\WINDOWS\System32\drivers\stac97nh.sys
.
Contents of the 'Scheduled Tasks' folder
"2007-11-02 15:00:02 C:\WINDOWS\Tasks\Norton Security Scan.job"
.
**************************************************************************
catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2007-11-08 15:27:01
Windows 5.1.2600 FAT NTAPI
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2007-11-08 15:27:54 - machine was rebooted
C:\ComboFix3.txt ... 2007-11-08 03:26
C:\ComboFix2.txt ... 2007-11-08 12:46
.
--- E O F ---
ComboFix 07-11-08.1 - Chappers 2007-11-08 15:22:37.3 -
FAT32x86
Microsoft Windows XP Professional 5.1.2600.0.1252.1.1033.18.95 [GMT 0:00]
Running from: C:\Documents and Settings\Chappers\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\Chappers\Desktop\CFScript.txt
* Created a new restore point
FILE
C:\mlpss.exe
C:\WINDOWS\picts-2894.zip
C:\WINDOWS\picts-3129.zip
C:\WINDOWS\picts-3142.zip
C:\WINDOWS\picts-4672.zip
C:\WINDOWS\picts-4760.zip
C:\WINDOWS\picts-5106.zip
C:\WINDOWS\picts-6380.zip
C:\WINDOWS\picts-6505.zip
C:\WINDOWS\picts-7798.zip
C:\WINDOWS\picts-7964.zip
C:\WINDOWS\picts-8001.zip
C:\WINDOWS\picts-8523.zip
C:\WINDOWS\picts-8618.zip
C:\WINDOWS\picts-8760.zip
C:\WINDOWS\system32\alle32.exe
C:\WINDOWS\system32\dllcache\jucheck.exe
C:\WINDOWS\system32\icf.exe
C:\WINDOWS\system32\vi32.exe
C:\WINDOWS\system32\vrm.exe
C:\WINDOWS\system32\vsm.exe
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\Chappers\Application Data\WinAnonymous
C:\Documents and Settings\Chappers\Application Data\WinAnonymous\Logs\update.log
C:\mlpss.exe
C:\Program Files\Common Files\WinAnonymous
C:\Program Files\Common Files\WinAnonymous\mc.exe
C:\Program Files\WinAnonymous
C:\Program Files\WinAnonymous\config.ini
C:\Program Files\WinAnonymous\data\application\7-Zip Compression Pgm.scr
C:\Program Files\WinAnonymous\data\application\AbsoluteFTP.scr
C:\Program Files\WinAnonymous\data\application\ACDSee32.scr
C:\Program Files\WinAnonymous\data\application\Acoustica CD Label Maker.scr
C:\Program Files\WinAnonymous\data\application\Ad-aware SE.scr
C:\Program Files\WinAnonymous\data\application\Adaptec's Audio CD.scr
C:\Program Files\WinAnonymous\data\application\Adaptec Easy CD Creator v4.scr
C:\Program Files\WinAnonymous\data\application\Addsoft.scr
C:\Program Files\WinAnonymous\data\application\AddWeb 3.0.scr
C:\Program Files\WinAnonymous\data\application\Adobe Acrobat Reader v3.0.scr
C:\Program Files\WinAnonymous\data\application\Adobe Acrobat Reader v3.1.scr
C:\Program Files\WinAnonymous\data\application\Adobe Acrobat Reader v4.0.scr
C:\Program Files\WinAnonymous\data\application\Adobe Acrobat Reader v5.0.scr
C:\Program Files\WinAnonymous\data\application\Adobe Acrobat Reader v6.0.scr
C:\Program Files\WinAnonymous\data\application\Adobe Acrobat Reader v7.0.scr
C:\Program Files\WinAnonymous\data\application\Adobe Photoshop v5.0 LE.scr
C:\Program Files\WinAnonymous\data\application\Adobe Photoshop v5.5.scr
C:\Program Files\WinAnonymous\data\application\Adobe Photoshop v6.0.scr
C:\Program Files\WinAnonymous\data\application\Adobe Photoshop v7.0.scr
C:\Program Files\WinAnonymous\data\application\Advanced Disk Catalog.scr
C:\Program Files\WinAnonymous\data\application\Advanced MP3 Catalog.scr
C:\Program Files\WinAnonymous\data\application\Advanced Password Recovery.scr
C:\Program Files\WinAnonymous\data\application\ahead cover designer.scr
C:\Program Files\WinAnonymous\data\application\Albatros ADGaspect.scr
C:\Program Files\WinAnonymous\data\application\Albatros ADGpano.scr
C:\Program Files\WinAnonymous\data\application\Albatros ADGview.scr
C:\Program Files\WinAnonymous\data\application\Alcohol MRU List.scr
C:\Program Files\WinAnonymous\data\application\Animation Shop 1.x.scr
C:\Program Files\WinAnonymous\data\application\Animation Shop 3.x.scr
C:\Program Files\WinAnonymous\data\application\AOL - Spool.scr
C:\Program Files\WinAnonymous\data\application\ASPack.scr
C:\Program Files\WinAnonymous\data\application\Avant Browser.scr
C:\Program Files\WinAnonymous\data\application\AX-Icons 4.x.scr
C:\Program Files\WinAnonymous\data\application\Axialis Icon Workshop 5.x.scr
C:\Program Files\WinAnonymous\data\application\Axialis Media Browser.scr
C:\Program Files\WinAnonymous\data\application\Babylon Builder 2.2.scr
C:\Program Files\WinAnonymous\data\application\Babylon Translator.scr
C:\Program Files\WinAnonymous\data\application\BlazeDVD 2.0.scr
C:\Program Files\WinAnonymous\data\application\Bookreader.scr
C:\Program Files\WinAnonymous\data\application\C++ Builder.scr
C:\Program Files\WinAnonymous\data\application\Cabinet Manager.scr
C:\Program Files\WinAnonymous\data\application\Chameleon Web Browser.scr
C:\Program Files\WinAnonymous\data\application\Classify 98.scr
C:\Program Files\WinAnonymous\data\application\Clicktionary 2000.scr
C:\Program Files\WinAnonymous\data\application\CoffeeCup DirectFTP.scr
C:\Program Files\WinAnonymous\data\application\CoffeeCup GIF Animator.scr
C:\Program Files\WinAnonymous\data\application\Cool Edit 2000 1.1.scr
C:\Program Files\WinAnonymous\data\application\Cool Edit Pro.scr
C:\Program Files\WinAnonymous\data\application\Corel PhotoPaint 8.scr
C:\Program Files\WinAnonymous\data\application\CrissCross.scr
C:\Program Files\WinAnonymous\data\application\CRT 2.x.scr
C:\Program Files\WinAnonymous\data\application\Cute FTP v3.0.scr
C:\Program Files\WinAnonymous\data\application\Cute FTP v4.0.scr
C:\Program Files\WinAnonymous\data\application\Cute MX.scr
C:\Program Files\WinAnonymous\data\application\CuteFTP.scr
C:\Program Files\WinAnonymous\data\application\CuteHTML.scr
C:\Program Files\WinAnonymous\data\application\DataRescue_IDA.scr
C:\Program Files\WinAnonymous\data\application\Delphi v3.scr
C:\Program Files\WinAnonymous\data\application\Delphi v4.scr
C:\Program Files\WinAnonymous\data\application\Delphi v5.scr
C:\Program Files\WinAnonymous\data\application\Delphi v7.scr
C:\Program Files\WinAnonymous\data\application\Disk Explorer Professional 3.scr
C:\Program Files\WinAnonymous\data\application\Diskeeper 5.0.scr
C:\Program Files\WinAnonymous\data\application\DivX Player.scr
C:\Program Files\WinAnonymous\data\application\Download Accelerator.scr
C:\Program Files\WinAnonymous\data\application\Ebay Toolbar.scr
C:\Program Files\WinAnonymous\data\application\EditPad.scr
C:\Program Files\WinAnonymous\data\application\EditPlus 2.scr
C:\Program Files\WinAnonymous\data\application\edonkey2000.scr
C:\Program Files\WinAnonymous\data\application\eMule.scr
C:\Program Files\WinAnonymous\data\application\Enfish Onespace.scr
C:\Program Files\WinAnonymous\data\application\Enigma Browser.scr
C:\Program Files\WinAnonymous\data\application\F-Secure SSH 2.x.scr
C:\Program Files\WinAnonymous\data\application\Fix-It 2000.scr
C:\Program Files\WinAnonymous\data\application\FlashGet.scr
C:\Program Files\WinAnonymous\data\application\FotoCanvas 2.0.scr
C:\Program Files\WinAnonymous\data\application\Fotostation 4.0.scr
C:\Program Files\WinAnonymous\data\application\foxit reader.scr
C:\Program Files\WinAnonymous\data\application\Free Download Manager 1.x.scr
C:\Program Files\WinAnonymous\data\application\FTP Explorer.scr
C:\Program Files\WinAnonymous\data\application\FTP Voyager.scr
C:\Program Files\WinAnonymous\data\application\Fun CD.scr
C:\Program Files\WinAnonymous\data\application\Gator.scr
C:\Program Files\WinAnonymous\data\application\GeoVid Video to Flash Batch Converter.scr
C:\Program Files\WinAnonymous\data\application\GetRight ExplorerBar.scr
C:\Program Files\WinAnonymous\data\application\GetRight.scr
C:\Program Files\WinAnonymous\data\application\Go!Zilla.scr
C:\Program Files\WinAnonymous\data\application\Google Deskbar.scr
C:\Program Files\WinAnonymous\data\application\Google Desktop Search History.scr
C:\Program Files\WinAnonymous\data\application\Google Toolbar.scr
C:\Program Files\WinAnonymous\data\application\Google Video Player 1.x.scr
C:\Program Files\WinAnonymous\data\application\GoZilla.scr
C:\Program Files\WinAnonymous\data\application\Gravity Newsreader.scr
C:\Program Files\WinAnonymous\data\application\hardcopy.scr
C:\Program Files\WinAnonymous\data\application\Helios TextPad v3.scr
C:\Program Files\WinAnonymous\data\application\Helios TextPad v4.scr
C:\Program Files\WinAnonymous\data\application\HelpWriter.scr
C:\Program Files\WinAnonymous\data\application\hexworkshop.scr
C:\Program Files\WinAnonymous\data\application\Homesite 4.0.scr
C:\Program Files\WinAnonymous\data\application\Hotbar 3.0.scr
C:\Program Files\WinAnonymous\data\application\HotJava Browser.scr
C:\Program Files\WinAnonymous\data\application\HTML Help Workshop.scr
C:\Program Files\WinAnonymous\data\application\Icon Extractor.scr
C:\Program Files\WinAnonymous\data\application\iMesh.scr
C:\Program Files\WinAnonymous\data\application\InoculatelT PE Antivirus.scr
C:\Program Files\WinAnonymous\data\application\InstallShield Express.scr
C:\Program Files\WinAnonymous\data\application\InterQuick.scr
C:\Program Files\WinAnonymous\data\application\Irfanview.scr
C:\Program Files\WinAnonymous\data\application\Iso Buster.scr
C:\Program Files\WinAnonymous\data\application\Jasc Animation Shop 3.scr
C:\Program Files\WinAnonymous\data\application\JASC Paintshop Pro v5.scr
C:\Program Files\WinAnonymous\data\application\JASC Paintshop Pro v6.scr
C:\Program Files\WinAnonymous\data\application\JASC Paintshop Pro v7.scr
C:\Program Files\WinAnonymous\data\application\JASC Paintshop Pro v8.scr
C:\Program Files\WinAnonymous\data\application\Jet Photo Shell.scr
C:\Program Files\WinAnonymous\data\application\juno.scr
C:\Program Files\WinAnonymous\data\application\K-Lite Codec Pack.scr
C:\Program Files\WinAnonymous\data\application\Kazaa Media Desktop.scr
C:\Program Files\WinAnonymous\data\application\Kodak Imaging.scr
C:\Program Files\WinAnonymous\data\application\LeapFTP 2.6.scr
C:\Program Files\WinAnonymous\data\application\LeechFTP.scr
C:\Program Files\WinAnonymous\data\application\Letterbox.scr
C:\Program Files\WinAnonymous\data\application\LViewPro 2.x.scr
C:\Program Files\WinAnonymous\data\application\Macromedia Dreamweaver MX.scr
C:\Program Files\WinAnonymous\data\application\Macromedia Dreamweaver Ultradev 4.scr
C:\Program Files\WinAnonymous\data\application\Macromedia Firework MX.scr
C:\Program Files\WinAnonymous\data\application\Macromedia Fireworks 3.scr
C:\Program Files\WinAnonymous\data\application\Macromedia Flash MX.scr
C:\Program Files\WinAnonymous\data\application\Macromedia Flash Player.scr
C:\Program Files\WinAnonymous\data\application\Macromedia Flash v4.0.scr
C:\Program Files\WinAnonymous\data\application\Magic ISO Maker 4.6.scr
C:\Program Files\WinAnonymous\data\application\mapinfo mapmarker.scr
C:\Program Files\WinAnonymous\data\application\Mass Download.scr
C:\Program Files\WinAnonymous\data\application\MasterSplitter v2.1.scr
C:\Program Files\WinAnonymous\data\application\McAfee Virus Scan.scr
C:\Program Files\WinAnonymous\data\application\MEDA MP3 Splitter.scr
C:\Program Files\WinAnonymous\data\application\Metapad.scr
C:\Program Files\WinAnonymous\data\application\MGI PHOTOSUITE SE 1.x.scr
C:\Program Files\WinAnonymous\data\application\MGUSOFT Setup Builder.scr
C:\Program Files\WinAnonymous\data\application\Microangelo 98.scr
C:\Program Files\WinAnonymous\data\application\MicroAngelo.scr
C:\Program Files\WinAnonymous\data\application\Micrografx Picture Publisher v7.scr
C:\Program Files\WinAnonymous\data\application\Micrografx Picture Publisher v8.scr
C:\Program Files\WinAnonymous\data\application\Microsoft FrontPage Express.scr
C:\Program Files\WinAnonymous\data\application\Microsoft FrontPage.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Help Workshop.scr
C:\Program Files\WinAnonymous\data\application\Microsoft HTML Help.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Imaging.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Managemant Console.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Netmeeting.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Office 2000.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Office 2003.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Office 97.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Office InfoPath 2003.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Office XP.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Office.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Outlook Express 5.0.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Photo Editor 3.x.scr
C:\Program Files\WinAnonymous\data\application\MicroSoft PhotoDraw.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Picture It Publishing.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Publisher 2000.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Visual Studio 6.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Windows Paint.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Windows WordPad.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Word 2000.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Word Backup Files.scr
C:\Program Files\WinAnonymous\data\application\Microsoft Works 4.0.scr
C:\Program Files\WinAnonymous\data\application\Mijenix Powerdesk 4.0.scr
C:\Program Files\WinAnonymous\data\application\MIRC.scr
C:\Program Files\WinAnonymous\data\application\miroMEDIA PCTV.scr
C:\Program Files\WinAnonymous\data\application\mixmeister.scr
C:\Program Files\WinAnonymous\data\application\Morpheus.scr
C:\Program Files\WinAnonymous\data\application\MovieXone 1.0.scr
C:\Program Files\WinAnonymous\data\application\Mozart 4.0.scr
C:\Program Files\WinAnonymous\data\application\ms autoroute express.scr
C:\Program Files\WinAnonymous\data\application\MS WORD.scr
C:\Program Files\WinAnonymous\data\application\MSE.scr
C:\Program Files\WinAnonymous\data\application\MSN Toolbar.scr
C:\Program Files\WinAnonymous\data\application\Music Match Jukebox.scr
C:\Program Files\WinAnonymous\data\application\MyWay Advertising.scr
C:\Program Files\WinAnonymous\data\application\Napster Music Community.scr
C:\Program Files\WinAnonymous\data\application\Naviscope.scr
C:\Program Files\WinAnonymous\data\application\NEATO Labels.scr
C:\Program Files\WinAnonymous\data\application\nero burning rom.scr
C:\Program Files\WinAnonymous\data\application\Nero Vision.scr
C:\Program Files\WinAnonymous\data\application\Net Vampire 3.x.scr
C:\Program Files\WinAnonymous\data\application\netants.scr
C:\Program Files\WinAnonymous\data\application\NetCaptor.scr
C:\Program Files\WinAnonymous\data\application\netmeeting.scr
C:\Program Files\WinAnonymous\data\application\Netsonic.scr
C:\Program Files\WinAnonymous\data\application\Netzip Download Demon 3.x.scr
C:\Program Files\WinAnonymous\data\application\NewsBin Pro 4.scr
C:\Program Files\WinAnonymous\data\application\Norton AntiVirus 2000 (v6).scr
C:\Program Files\WinAnonymous\data\application\Norton AntiVirus 2003.scr
C:\Program Files\WinAnonymous\data\application\Norton Commander.scr
C:\Program Files\WinAnonymous\data\application\Norton File Manager.scr
C:\Program Files\WinAnonymous\data\application\Norton Firewall.scr
C:\Program Files\WinAnonymous\data\application\Norton Internet Security.scr
C:\Program Files\WinAnonymous\data\application\Norton LiveUpdate.scr
C:\Program Files\WinAnonymous\data\application\Norton Utilities 2000.scr
C:\Program Files\WinAnonymous\data\application\NotePad Plus.scr
C:\Program Files\WinAnonymous\data\application\notetab lite.scr
C:\Program Files\WinAnonymous\data\application\NoteTab Pro.scr
C:\Program Files\WinAnonymous\data\application\Object Rescue.scr
C:\Program Files\WinAnonymous\data\application\OmniPage 10.0.scr
C:\Program Files\WinAnonymous\data\application\OnTrack Powerdesk 4.scr
C:\Program Files\WinAnonymous\data\application\Ontrack PowerDesk 5.scr
C:\Program Files\WinAnonymous\data\application\PackageForTheWeb.scr
C:\Program Files\WinAnonymous\data\application\Paint Shop Pro 5.0.scr
C:\Program Files\WinAnonymous\data\application\Paint Shop Pro 7.0.scr
C:\Program Files\WinAnonymous\data\application\Password Safe.scr
C:\Program Files\WinAnonymous\data\application\PE Explorer 1.95.scr
C:\Program Files\WinAnonymous\data\application\Personal Ancestral File.scr
C:\Program Files\WinAnonymous\data\application\photo magic 4.0.scr
C:\Program Files\WinAnonymous\data\application\PhotoCanvas 2.0.scr
C:\Program Files\WinAnonymous\data\application\Photodex Compupic Pro.scr
C:\Program Files\WinAnonymous\data\application\PhotoDraw 2000.scr
C:\Program Files\WinAnonymous\data\application\PhotoImpact 8.0.scr
C:\Program Files\WinAnonymous\data\application\PhotoImpact Viewer 4.0.scr
C:\Program Files\WinAnonymous\data\application\PicoZip.scr
C:\Program Files\WinAnonymous\data\application\PictureIt Digital Image Pro 7.0.scr
C:\Program Files\WinAnonymous\data\application\PKZip for Windows v2.60.03+.scr
C:\Program Files\WinAnonymous\data\application\PolyView.scr
C:\Program Files\WinAnonymous\data\application\Popup Purger.scr
C:\Program Files\WinAnonymous\data\application\PopUpCop.scr
C:\Program Files\WinAnonymous\data\application\Power archiver.scr
C:\Program Files\WinAnonymous\data\application\PowerArc.scr
C:\Program Files\WinAnonymous\data\application\PowerDVD.scr
C:\Program Files\WinAnonymous\data\application\PowerZip.scr
C:\Program Files\WinAnonymous\data\application\Privacy Eraser Pro.scr
C:\Program Files\WinAnonymous\data\application\Putty hostkeys.scr
C:\Program Files\WinAnonymous\data\application\PYTHON.scr
C:\Program Files\WinAnonymous\data\application\QuickTime.scr
C:\Program Files\WinAnonymous\data\application\Real Audio Player v6 v7 v8.scr
C:\Program Files\WinAnonymous\data\application\Real Download v4.scr
C:\Program Files\WinAnonymous\data\application\RealNetworks Real Download.scr
C:\Program Files\WinAnonymous\data\application\RealOne & RealPlayer.scr
C:\Program Files\WinAnonymous\data\application\RealVNC.scr
C:\Program Files\WinAnonymous\data\application\RegEdit.scr
C:\Program Files\WinAnonymous\data\application\Roxio Easy CD Creator.scr
C:\Program Files\WinAnonymous\data\application\Save Now.scr
C:\Program Files\WinAnonymous\data\application\Scour Exchange.scr
C:\Program Files\WinAnonymous\data\application\Seal Module Mlayer.scr
C:\Program Files\WinAnonymous\data\application\SearchAndBrowse.scr
C:\Program Files\WinAnonymous\data\application\SearchAnt.scr
C:\Program Files\WinAnonymous\data\application\SearchV.scr
C:\Program Files\WinAnonymous\data\application\SearchWolf.scr
C:\Program Files\WinAnonymous\data\application\SearchWWW.scr
C:\Program Files\WinAnonymous\data\application\SideStep.scr
C:\Program Files\WinAnonymous\data\application\Skype.scr
C:\Program Files\WinAnonymous\data\application\Smart Explorer.scr
C:\Program Files\WinAnonymous\data\application\SmartDraw 6.scr
C:\Program Files\WinAnonymous\data\application\smartftp.scr
C:\Program Files\WinAnonymous\data\application\SmartPops.scr
C:\Program Files\WinAnonymous\data\application\Sonic Foundry's Acid 2.0.scr
C:\Program Files\WinAnonymous\data\application\Sonique Player.scr
C:\Program Files\WinAnonymous\data\application\Spinner Plus.scr
C:\Program Files\WinAnonymous\data\application\SpotOn Browser plugin.scr
C:\Program Files\WinAnonymous\data\application\Staff-FTP.scr
C:\Program Files\WinAnonymous\data\application\Star Downloader.scr
C:\Program Files\WinAnonymous\data\application\Stardialer.scr
C:\Program Files\WinAnonymous\data\application\StarOffice 5.x.scr
C:\Program Files\WinAnonymous\data\application\SubmitWolf Pro.scr
C:\Program Files\WinAnonymous\data\application\Sun Java Cache.scr
C:\Program Files\WinAnonymous\data\application\SureThing CD Labeler.scr
C:\Program Files\WinAnonymous\data\application\SVAPlayer.scr
C:\Program Files\WinAnonymous\data\application\SWiSH 2.0.scr
C:\Program Files\WinAnonymous\data\application\Teleport Pro.scr
C:\Program Files\WinAnonymous\data\application\Telnet.scr
C:\Program Files\WinAnonymous\data\application\Text Pad 4.x.scr
C:\Program Files\WinAnonymous\data\application\The Playa.scr
C:\Program Files\WinAnonymous\data\application\Third Voice 1.x.scr
C:\Program Files\WinAnonymous\data\application\Thumbs Plus 4.scr
C:\Program Files\WinAnonymous\data\application\Timesink.scr
C:\Program Files\WinAnonymous\data\application\TinyBar.scr
C:\Program Files\WinAnonymous\data\application\TOPicks.scr
C:\Program Files\WinAnonymous\data\application\Total Commander.scr
C:\Program Files\WinAnonymous\data\application\transponder.scr
C:\Program Files\WinAnonymous\data\application\Trellians Classify 98.scr
C:\Program Files\WinAnonymous\data\application\Tribal Voice's PowWow.scr
C:\Program Files\WinAnonymous\data\application\Trojan Remover.scr
C:\Program Files\WinAnonymous\data\application\TSADBOT.scr
C:\Program Files\WinAnonymous\data\application\UCmore toolbar.scr
C:\Program Files\WinAnonymous\data\application\Ulead Gif Animator v4.0.scr
C:\Program Files\WinAnonymous\data\application\Ulead GIF Animator v5.0.scr
C:\Program Files\WinAnonymous\data\application\Ulead Photo Explorer v4.2.scr
C:\Program Files\WinAnonymous\data\application\Ulead Photo Express.scr
C:\Program Files\WinAnonymous\data\application\Ulead PhotoImpact v5.scr
C:\Program Files\WinAnonymous\data\application\Ulead VideoStudio 4.0.scr
C:\Program Files\WinAnonymous\data\application\Ultimate Paint.scr
C:\Program Files\WinAnonymous\data\application\ULTImate Technology BV v5.5.scr
C:\Program Files\WinAnonymous\data\application\UltraEdit v4.scr
C:\Program Files\WinAnonymous\data\application\UltraEdit v7.scr
C:\Program Files\WinAnonymous\data\application\UltraEdit.scr
C:\Program Files\WinAnonymous\data\application\UltraISO 7.x.scr
C:\Program Files\WinAnonymous\data\application\uTorrent 1.x.scr
C:\Program Files\WinAnonymous\data\application\VBoxEdit.scr
C:\Program Files\WinAnonymous\data\application\VirtualDub.scr
C:\Program Files\WinAnonymous\data\application\VMWARE.scr
C:\Program Files\WinAnonymous\data\application\Vueprint.scr
C:\Program Files\WinAnonymous\data\application\VX2 Respondmiter.scr
C:\Program Files\WinAnonymous\data\application\W32Dasm.scr
C:\Program Files\WinAnonymous\data\application\Web Ferret v3.scr
C:\Program Files\WinAnonymous\data\application\WebFerret.scr
C:\Program Files\WinAnonymous\data\application\webhancer.scr
C:\Program Files\WinAnonymous\data\application\Wildstylz.scr
C:\Program Files\WinAnonymous\data\application\WildTangent.scr
C:\Program Files\WinAnonymous\data\application\WinAce.scr
C:\Program Files\WinAnonymous\data\application\winamp.scr
C:\Program Files\WinAnonymous\data\application\Windows Commander.scr
C:\Program Files\WinAnonymous\data\application\WinHTTrack Website Copier.scr
C:\Program Files\WinAnonymous\data\application\WinOnCD.scr
C:\Program Files\WinAnonymous\data\application\WinRar.scr
C:\Program Files\WinAnonymous\data\application\Winshow.scr
C:\Program Files\WinAnonymous\data\application\WinUAE.scr
C:\Program Files\WinAnonymous\data\application\Winupie.scr
C:\Program Files\WinAnonymous\data\application\WinVNC.scr
C:\Program Files\WinAnonymous\data\application\WinZip v8.scr
C:\Program Files\WinAnonymous\data\application\Wise Installer.scr
C:\Program Files\WinAnonymous\data\application\Worm.Sobig.scr
C:\Program Files\WinAnonymous\data\application\WurldMedia.scr
C:\Program Files\WinAnonymous\data\application\Xara 3D v4.x.scr
C:\Program Files\WinAnonymous\data\application\Xara Webstyle.scr
C:\Program Files\WinAnonymous\data\application\XDialer.scr
C:\Program Files\WinAnonymous\data\application\XING MP3 PLAYER.scr
C:\Program Files\WinAnonymous\data\application\XLoader.scr
C:\Program Files\WinAnonymous\data\application\Xolox.scr
C:\Program Files\WinAnonymous\data\application\Xrenoder.scr
C:\Program Files\WinAnonymous\data\application\Xupiter toolbar.scr
C:\Program Files\WinAnonymous\data\application\Xzoomy.scr
C:\Program Files\WinAnonymous\data\application\Yahoo Player.scr
C:\Program Files\WinAnonymous\data\application\Yahoo! Toolbar.scr
C:\Program Files\WinAnonymous\data\application\Yamaha S-YXG100.scr
C:\Program Files\WinAnonymous\data\application\ZeroPopup.scr
C:\Program Files\WinAnonymous\data\application\ZipMagic 2000.scr
C:\Program Files\WinAnonymous\data\application\Zone Alarm.scr
C:\Program Files\WinAnonymous\data\brand.dat
C:\Program Files\WinAnonymous\data\firefox\firefox - cache.scr
C:\Program Files\WinAnonymous\data\firefox\firefox - cookies.scr
C:\Program Files\WinAnonymous\data\firefox\firefox - history.scr
C:\Program Files\WinAnonymous\data\ie\ie cookies.scr
C:\Program Files\WinAnonymous\data\ie\ie internet cache.scr
C:\Program Files\WinAnonymous\data\ie\ie privacy history.scr
C:\Program Files\WinAnonymous\data\ie\ie typed urls.scr
C:\Program Files\WinAnonymous\data\ie\ie url history.scr
C:\Program Files\WinAnonymous\data\ie\windows autocomplete.scr
C:\Program Files\WinAnonymous\data\ie\windows downloaded files.scr
C:\Program Files\WinAnonymous\data\ie\windows favorites order.scr
C:\Program Files\WinAnonymous\data\ie\windows passwords.scr
C:\Program Files\WinAnonymous\data\messanger\aim.scr
C:\Program Files\WinAnonymous\data\messanger\AOL Bart.scr
C:\Program Files\WinAnonymous\data\messanger\AOL Instant Messenger.scr
C:\P