also @ TechSpot: Updated Microsoft EULA prohibits class action lawsuits

TechSpot

[Inactive] [A] Two iexplorers running in task manager

Discussion in 'Virus and Malware Removal' started by paytonava12, Jan 20, 2012.

Thread Status:
Not open for further replies.
  1. paytonava12 Newcomer, in training

    ComboFix 12-01-30.01 - bill 30/01/2012 23:25:31.3.2 - x86 MINIMAL
    Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1790.1313 [GMT 13:00]
    Running from: d:\documents and settings\bill\Desktop\ComboFix.exe
    AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
    .
    .
    ((((((((((((((((((((((((( Files Created from 2011-12-28 to 2012-01-30 )))))))))))))))))))))))))))))))
    .
    .
    2012-01-30 09:40 . 2012-01-05 07:19 6557240 ----a-w- d:\documents and settings\All Users.WINDOWS\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{611B625E-8CFF-4553-BF41-1435744E6819}\mpengine.dll
    2012-01-29 01:24 . 2012-01-29 01:24 626688 ----a-w- d:\program files\Mozilla Firefox\msvcr80.dll
    2012-01-29 01:24 . 2012-01-29 01:24 548864 ----a-w- d:\program files\Mozilla Firefox\msvcp80.dll
    2012-01-29 01:24 . 2012-01-29 01:24 479232 ----a-w- d:\program files\Mozilla Firefox\msvcm80.dll
    2012-01-29 01:24 . 2012-01-29 01:24 43992 ----a-w- d:\program files\Mozilla Firefox\mozutils.dll
    2012-01-21 13:08 . 2012-01-05 07:19 6557240 ----a-w- d:\documents and settings\All Users.WINDOWS\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
    2012-01-21 07:43 . 2012-01-21 07:43 -------- d-----w- d:\program files\ESET
    2012-01-21 04:18 . 2012-01-21 04:18 388096 ----a-r- d:\documents and settings\bill\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
    2012-01-20 23:04 . 2012-01-04 09:26 236576 ------w- d:\windows\system32\MpSigStub.exe
    2012-01-20 22:59 . 2012-01-20 23:00 -------- d-----w- d:\program files\Microsoft Security Client
    2012-01-19 04:03 . 2012-01-19 04:03 -------- d-----w- d:\program files\TeaTimer (Spybot - Search & Destroy)
    2012-01-19 04:03 . 2012-01-19 04:03 -------- d-----w- d:\program files\File Scanner Library (Spybot - Search & Destroy)
    2012-01-19 04:01 . 2012-01-19 07:17 -------- d-----w- d:\documents and settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy
    2012-01-07 08:06 . 2012-01-07 08:06 -------- d-----w- d:\documents and settings\bill\Application Data\LimeWire
    2012-01-03 13:10 . 2012-01-03 13:10 182672 ----a-w- d:\program files\Mozilla Firefox\plugins\nppdf32.dll
    2012-01-03 13:10 . 2012-01-03 13:10 182672 ----a-w- d:\program files\Internet Explorer\Plugins\nppdf32.dll
    .
    .
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2012-01-30 03:52 . 2011-05-23 07:10 90112 ----a-w- d:\windows\DUMP6617.tmp
    2012-01-23 04:54 . 2011-05-25 01:45 414368 ----a-w- d:\windows\system32\FlashPlayerCPLApp.cpl
    2011-12-10 02:24 . 2011-11-12 20:49 20464 ----a-w- d:\windows\system32\drivers\mbam.sys
    2011-11-25 21:57 . 2006-02-28 12:00 293376 ----a-w- d:\windows\system32\winsrv.dll
    2011-11-23 13:25 . 2006-02-28 12:00 1859584 ----a-w- d:\windows\system32\win32k.sys
    2011-11-18 12:35 . 2006-02-28 12:00 60416 ----a-w- d:\windows\system32\packager.exe
    2011-11-16 14:21 . 2006-02-28 12:00 354816 ----a-w- d:\windows\system32\winhttp.dll
    2011-11-16 14:21 . 2006-02-28 12:00 152064 ----a-w- d:\windows\system32\schannel.dll
    2011-11-04 19:20 . 2006-02-28 12:00 916992 ----a-w- d:\windows\system32\wininet.dll
    2011-11-04 19:20 . 2006-02-28 12:00 43520 ----a-w- d:\windows\system32\licmgr10.dll
    2011-11-04 19:20 . 2006-02-28 12:00 1469440 ------w- d:\windows\system32\inetcpl.cpl
    2011-11-04 11:23 . 2006-02-28 12:00 385024 ----a-w- d:\windows\system32\html.iec
    2011-11-03 15:28 . 2006-02-28 12:00 386048 ----a-w- d:\windows\system32\qdvd.dll
    2011-11-03 15:28 . 2006-02-28 12:00 1292288 ----a-w- d:\windows\system32\quartz.dll
    2011-11-01 16:07 . 2006-02-28 12:00 1288704 ----a-w- d:\windows\system32\ole32.dll
    2012-01-29 01:24 . 2011-10-08 01:57 121816 ----a-w- d:\program files\mozilla firefox\components\browsercomps.dll
    .
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4
    .
    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
    d:\program files\AVG Secure Search\10.0.0.7\AVG Secure Search_toolbar.dll [BU]
    .
    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0}]
    2011-06-27 19:05 175912 ----a-w- d:\program files\IncrediMail_MediaBar_2\prxtbIncr.dll
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    "{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0}"= "d:\program files\IncrediMail_MediaBar_2\prxtbIncr.dll" [2011-06-27 175912]
    "{95B7759C-8C7F-4BF1-B163-73684A933233}"= "d:\program files\AVG Secure Search\10.0.0.7\AVG Secure Search_toolbar.dll" [BU]
    .
    [HKEY_CLASSES_ROOT\clsid\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0}]
    .
    [HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}]
    [HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj.1]
    [HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj]
    .
    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
    "{D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0}"= "d:\program files\IncrediMail_MediaBar_2\prxtbIncr.dll" [2011-06-27 175912]
    .
    [HKEY_CLASSES_ROOT\clsid\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0}]
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "IncrediMail"="d:\program files\IncrediMail\bin\IncMail.exe" [2011-08-05 366024]
    "S60 PC Suite Tray"="d:\program files\Samsung\Samsung PC Studio 7\PCSuite.exe" [2008-12-06 699392]
    "DriverFinder"="d:\program files\DriverFinder\DriverFinder.exe" [BU]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "SMSERIAL"="sm56hlpr.exe" [2004-12-29 544768]
    "RTHDCPL"="RTHDCPL.EXE" [2011-04-14 20053608]
    "Adobe ARM"="d:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
    "SunJavaUpdateSched"="d:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
    "REGSHAVE"="d:\program files\REGSHAVE\REGSHAVE.EXE" [2002-02-05 53248]
    "Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-12-24 460872]
    "MSC"="d:\program files\Microsoft Security Client\msseces.exe" [2011-06-15 997920]
    .
    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="d:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
    "Samsung.PCSync"="d:\program files\Samsung\Samsung PC Studio 7\PcSync2.exe" [2009-06-04 1294336]
    .
    d:\documents and settings\All Users.WINDOWS\Start Menu\Programs\Startup\
    BTTray.lnk - d:\program files\D-Link\Bluetooth Software\BTTray.exe [2011-5-22 565309]
    Microsoft Office.lnk - d:\program files\Microsoft Office\Office10\OSA.EXE [2011-5-22 83360]
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
    @="Service"
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ROC_roc_dec12]
    d:\program files\AVG Secure Search\ROC_roc_dec12.exe [BU]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateMyDrivers]
    d:\program files\SmartTweak Software\UpdateMyDrivers\UpdateMyDrivers.exe [BU]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vProt]
    d:\program files\AVG Secure Search\vprot.exe [BU]
    .
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "d:\\Program Files\\CNet\\Wireless LAN Driver and Utility\\RtWLan.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "d:\\Program Files\\IncrediMail\\Bin\\IncMail.exe"=
    "d:\\Program Files\\IncrediMail\\Bin\\ImApp.exe"=
    "d:\\Program Files\\IncrediMail\\Bin\\ImpCnt.exe"=
    "d:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe"=
    "d:\\WINDOWS\\system32\\mmc.exe"=
    .
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "1542:TCP"= 1542:TCP:Realtek WPS TCP Prot
    "1542:UDP"= 1542:UDP:Realtek WPS UDP Prot
    "53:UDP"= 53:UDP:Realtek AP UDP Prot
    .
    S2 gupdate;Google Update Service (gupdate);d:\program files\Google\Update\GoogleUpdate.exe [30/05/2011 10:34 a.m. 136176]
    S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [13/11/2011 9:49 a.m. 652872]
    S2 MUsbFltr;USB WTMouse Filter Service;d:\windows\system32\drivers\MUsbFltr.sys [23/03/2004 9:45 a.m. 6528]
    S3 Ambfilt;Ambfilt;d:\windows\system32\drivers\Ambfilt.sys [10/06/2011 5:43 p.m. 1691480]
    S3 gupdatem;Google Update Service (gupdatem);d:\program files\Google\Update\GoogleUpdate.exe [30/05/2011 10:34 a.m. 136176]
    S3 massfilter;Mass Storage Filter Driver;d:\windows\system32\drivers\massfilter.sys --> d:\windows\system32\drivers\massfilter.sys [?]
    S3 MBAMProtector;MBAMProtector;d:\windows\system32\drivers\mbam.sys [13/11/2011 9:49 a.m. 20464]
    S3 RTL8192cu;Realtek RTL8192CU Wireless LAN 802.11n USB 2.0 Network Adapter;d:\windows\system32\drivers\RTL8192cu.sys [23/05/2011 10:40 a.m. 987904]
    S3 zgwhsdiag;ZTE WCDMA Handset Diagnostic Port;d:\windows\system32\drivers\zgwhsdiag.sys [5/07/2011 12:46 p.m. 106752]
    S3 zgwhsmdm;ZTE WCDMA Handset USB Modem;d:\windows\system32\drivers\zgwhsmdm.sys [5/07/2011 12:46 p.m. 106752]
    S3 zgwhsnmea;WCDMA Handset NMEA Port;d:\windows\system32\drivers\zgwhsnmea.sys [5/07/2011 12:46 p.m. 106752]
    S4 AVG Security Toolbar Service;AVG Security Toolbar Service;d:\program files\AVG\AVG10\Toolbar\ToolbarBroker.exe --> d:\program files\AVG\AVG10\Toolbar\ToolbarBroker.exe [?]
    S4 vToolbarUpdater;vToolbarUpdater;d:\program files\Common Files\AVG Secure Search\vToolbarUpdater\10.0.6\ToolbarUpdater.exe [19/01/2012 10:53 p.m. 909152]
    .
    --- Other Services/Drivers In Memory ---
    .
    *NewlyCreated* - MUSBFLTR
    .
    Contents of the 'Scheduled Tasks' folder
    .
    2012-01-30 d:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - d:\program files\Google\Update\GoogleUpdate.exe [2011-05-29 21:33]
    .
    2012-01-30 d:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - d:\program files\Google\Update\GoogleUpdate.exe [2011-05-29 21:33]
    .
    2012-01-30 d:\windows\Tasks\MP Scheduled Scan.job
    - d:\program files\Microsoft Security Client\Antimalware\MpCmdRun.exe [2011-04-27 02:39]
    .
    .
    ------- Supplementary Scan -------
    .
    IE: E&xport to Microsoft Excel - d:\progra~1\MI1933~1\Office10\EXCEL.EXE/3000
    IE: Send To &Bluetooth - d:\program files\D-Link\Bluetooth Software\btsendto_ie_ctx.htm
    TCP: DhcpNameServer = 192.168.0.1
    Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - d:\program files\Common Files\AVG Secure Search\ViProtocolInstaller\10.0.6\ViProtocol.dll
    FF - ProfilePath - d:\documents and settings\bill\Application Data\Mozilla\Firefox\Profiles\ia0oe96w.default\
    FF - prefs.js: keyword.URL - hxxp://isearch.avg.com/search?cid=%7Bfcf1f193-93eb-4aac-b171-c0f56e8840ff%7D&mid=43e838ecbad847d1a77dd141e72e816f-2c3740f7878da74983a6109f0091f171a47e922a&ds=AVG&v=10.0.0.7&lang=us&pr=fr&d=2011-12-14%2008%3A49%3A15&sap=ku&q=
    FF - prefs.js: network.proxy.type - 0
    .
    - - - - ORPHANS REMOVED - - - -
    .
    WebBrowser-{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - (no file)
    AddRemove-Adobe Flash Player ActiveX - d:\windows\system32\Macromed\Flash\FlashUtil10x_ActiveX.exe
    AddRemove-AI Insems - c:\aiinsems\uninst.exe
    AddRemove-Alpro Connector - c:\alproconnector\uninst.exe
    AddRemove-AN Generator - c:\angenerator\uninst.exe
    AddRemove-{D8CE69B0-9274-4b8c-BA49-0FF6A20A3C65} - d:\program files\SAMSUNG\SYMBIAN USB Download Driver\Uninstall.exe
    .
  2. Broni Malware Annihilator

    Retry..........
  3. paytonava12 Newcomer, in training

    .
    .
    **************************************************************************
    .
    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2012-01-30 23:30
    Windows 5.1.2600 Service Pack 3 NTFS
    .
    scanning hidden processes ...
    .
    scanning hidden autostart entries ...
    .
    scanning hidden files ...
    .
    .
    d:\docume~1\bill\LOCALS~1\Temp\ICD2.tmp
    d:\docume~1\bill\LOCALS~1\Temp\ICD2.tmp\gp.ocx 51568 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ichcop 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD10.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD328.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD329.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD35.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD36.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD365.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD366.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD367.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD4.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD404.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD423.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD424.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD4BA.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD4BB.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD5.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD6.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD7.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMDC.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMDED.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMDEE.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMDF.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\imu425.htm 1828 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\ImApp.log 26629 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImNtUtilU.dll 95688 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImViewRU.dll 275912 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImMangrRU.dll 533960 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImMangrU.dll 1136072 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImMapiU.dll 46536 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImNotfy.exe 259528 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImNotfyRU.dll 157128 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImNotfyU.dll 161224 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImPackr.exe 103880 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImPackrRU.dll 64456 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImParserU.dll 644552 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImpCnt.exe 112072 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImpCntRU.dll 34248 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImSearchU.dll 28616 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImServU.dll 394696 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImSetup.exe 120264 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImShExtU.dll 132552 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImSpoolU.dll 640456 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImSuppRU.dll 652744 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImSuppU.dll 1578440 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImToolsU.dll 275912 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImUtilsU.dll 1373640 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImViewU.dll 1455560 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImWrappU.dll 161224 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\IncMail.exe 366024 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\IncMailRU.dll 62920 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\IncrediGalleryDesktop.url 100 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\IncrediGalleryStart.url 100 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\incredigames.ico 27766 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\IncrediGamesStart.url 100 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\IncrediMail Gallery.ico 25214 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\IncrediMail.ico 25214 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\Iobit.ico 23558 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\Iobit.url 246 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\resources
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\resources\WebMenuImg.htm 591 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\wlessfp1.dll 71112 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\SetupData
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\SetupData\Skin
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\SetupData\Skin\angelic_light.ims 17490 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\SetupData\Skin\classic_light.ims 11610 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\SetupData\Skin\fantasy_light.ims 15062 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\SetupData\Skin\frosted_light.ims 12584 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\SetupData\Skin\im2.ims 1511058 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\SetupData\Skin\paper_light.ims 20832 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\SetupData\Skin\premium.ims 229847 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\incredimailsetup_d.7z 5776883 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\skin.7z 1822909 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail_Install.log 659230 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\incredimail_installer.log 1098 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail_Setup.log 2990740 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\MsiExec.log 1042 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IMT14.xml 1994 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IMT15.xml 426 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IMT16.xml 707340 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM_142.tmp
    d:\docume~1\bill\LOCALS~1\Temp\IM_C2C.tmp
    d:\docume~1\bill\LOCALS~1\Temp\IncrediMailInstall_En.log 4572798 bytes
    d:\docume~1\bill\LOCALS~1\Temp\is-MTITT.tmp
    d:\docume~1\bill\LOCALS~1\Temp\is-MTITT.tmp\_isetup
    d:\docume~1\bill\LOCALS~1\Temp\is-MTITT.tmp\_isetup\_RegDLL.tmp 4096 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\is-MTITT.tmp\_isetup\_shfoldr.dll 23312 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\is979.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ispAA6.tmp
    d:\docume~1\bill\LOCALS~1\Temp\ispAA6.tmp\_Setup.dll 368640 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\Italian.bin 28419 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Japanese.bin 25202 bytes
    d:\docume~1\bill\LOCALS~1\Temp\JAUReg.log 301 bytes
    d:\docume~1\bill\LOCALS~1\Temp\java_install.log 27412 bytes
    d:\docume~1\bill\LOCALS~1\Temp\java_install_reg.log 1940 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF2A1C.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF2B45.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF2C66.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF2C94.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF2DAF.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF2DE4.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF2E3C.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF30F7.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF3154.tmp 40960 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF340C.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF376F.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF377A.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF37E6.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF37F1.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF3827.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD6AA.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD6D1.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD722.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD72E.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD784.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD78F.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD79A.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD7A5.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD7FB.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD806.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD834.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD83F.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD8A5.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD8B0.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD914.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD951.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD96C.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD996.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFDB14.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFDB62.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFDBF1.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFDC07.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFDC3D.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFDC4E.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFDE27.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFDF52.tmp 57344 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFE102.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFE6E3.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFE6EE.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFE71C.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFE727.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\SimChin.bin 17030 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Slovak.bin 26159 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Slovenian.bin 24330 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Spanish.bin 28759 bytes
    d:\docume~1\bill\LOCALS~1\Temp\SWEDISH.bin 24503 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for 1993-Nissan-Maxima.zip
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for 1993-Nissan-Maxima.zip\1993-Nissan-Maxima.pdf 22513177 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for 802.11b+g Atheros Wireless Lan Driver 7.1.0.90.zip
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for 802.11b+g Atheros Wireless Lan Driver 7.1.0.90.zip\802BGA
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for 802.11b+g Atheros Wireless Lan Driver 7.1.0.90.zip\802BGA\data2.cab 457070 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for 802.11b+g Atheros Wireless Lan Driver 7.1.0.90.zip\802BGA\ISSetup.dll 552214 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for 802.11b+g Atheros Wireless Lan Driver 7.1.0.90.zip\802BGA\setup.exe 455600 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1031.mst 239104 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomCs.ctm 20593 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0404.ini 3261 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0406.ini 4855 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0407.ini 5140 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0409.ini 4632 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x040a.ini 5275 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x040b.ini 4734 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x040c.ini 5406 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0410.ini 5130 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0411.ini 5014 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0412.ini 4303 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0413.ini 5118 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0414.ini 4810 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0415.ini 4887 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0416.ini 4966 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0419.ini 4896 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x041d.ini 4636 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0804.ini 3326 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1028.mst 252416 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1030.mst 233984 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1033.mst 3584 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1034.mst 237056 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1035.mst 233984 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1036.mst 239104 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1040.mst 239104 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1041.mst 288768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1042.mst 388096 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1043.mst 238592 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1044.mst 233472 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1045.mst 233984 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1046.mst 236032 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1049.mst 252416 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1053.mst 233472 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\2052.mst 251904 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\Autorun.inf 52 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\BBalloon.dll 49152 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\BtSetup.dll 167936 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\btw.ico 3638 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\BTW.msi 2367684 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\btwusb.cat 80 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\btwusb.inf 91407 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\btwusb.sys 55288 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\btw_ci.dll 77824 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomBr.ctm 20879 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomCt.ctm 20610 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomDa.ctm 20670 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomDu.ctm 20677 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomEn.ctm 20547 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomFi.ctm 20679 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomFr.ctm 20863 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomGr.ctm 20664 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomIt.ctm 20688 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomJp.ctm 20721 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomKo.ctm 20588 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomNo.ctm 20637 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomPo.ctm 20935 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomRu.ctm 21384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomSp.ctm 20767 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomSw.ctm 20659 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\Data1.cab 17224904 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\frmupgr.sys 17516 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\Inst.exe 225280 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\instmsia.exe 1708856 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\instmsiw.exe 1822520 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\license.dat 176 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\MSVCP60.DLL 401462 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\setup.exe 45056 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\Setup.ini 1332 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\Spylite.exe 360448 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\SpyliteUserGuide.pdf 339996 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\svcpack
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\svcpack\SvcPack.ini 2566 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\UsrGuide.pdf 490249 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\3KH0RH46
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\3KH0RH46\desktop.ini 67 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\BG091VWB
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\BG091VWB\desktop.ini 67 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\desktop.ini 67 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\HD20B8U0
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\HD20B8U0\desktop.ini 67 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\index.dat 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\RLJ4E61V
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\RLJ4E61V\desktop.ini 67 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Thai.bin 22395 bytes
    d:\docume~1\bill\LOCALS~1\Temp\tmp8F3.tmp 782336 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\tmp8F4.tmp 8091363 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\tmp8F7.tmp 782336 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\tmp8F8.tmp 8091363 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\tmp8F9.tmp 782336 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\tmp8FA.tmp 8091363 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\tmp8FC.tmp 8091363 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\tmp936.tmp 782336 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\tmp937.tmp 8091363 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\tmpA90.tmp 782336 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\tmpA91.tmp 8091363 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\de77_appcompat.txt 16812 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Deployment
    d:\docume~1\bill\LOCALS~1\Temp\Dutch.bin 26202 bytes
    d:\docume~1\bill\LOCALS~1\Temp\E.tmp 321184 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\E9.tmp 335520 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\English.bin 22808 bytes
    d:\docume~1\bill\LOCALS~1\Temp\etilqs_w3YlHDWpLSi9sRc 196632 bytes
    d:\docume~1\bill\LOCALS~1\Temp\F.tmp 328864 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\F943591.dmp 60620 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Finnish.bin 23326 bytes
    d:\docume~1\bill\LOCALS~1\Temp\fla25E.tmp 5509838 bytes
    d:\docume~1\bill\LOCALS~1\Temp\fla3D0.tmp 2401 bytes
    d:\docume~1\bill\LOCALS~1\Temp\FP_PL_PFS_INSTALLER_32bit.exe 3763360 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\French.bin 28183 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ge172
    d:\docume~1\bill\LOCALS~1\Temp\ge252
    d:\docume~1\bill\LOCALS~1\Temp\ge2816
    d:\docume~1\bill\LOCALS~1\Temp\ge3032
    d:\docume~1\bill\LOCALS~1\Temp\geColladaModelCacheLock 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\geIconCacheLock 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\German.bin 26669 bytes
    d:\docume~1\bill\LOCALS~1\Temp\GLB159.tmp 71680 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\~DF7E67.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF7F3D.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF7F48.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF81A0.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF81B0.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF83D7.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF8449.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF85F3.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF8609.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF86E0.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF897E.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF8D68.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF8DEB.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF8F7A.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF8FB0.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF9772.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF9818.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF9849.tmp 212992 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF9970.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF9A16.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF9A21.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF9A8D.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF9A98.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF9AC6.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF9AD1.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF9E60.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFA069.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFA0D.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFA10.tmp 180224 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFA78E.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFA93.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\{8F5938E7-9B03-42D2-A522-F3631C56C3F1}
    d:\docume~1\bill\LOCALS~1\Temp\{8F5938E7-9B03-42D2-A522-F3631C56C3F1}\_Setup.dll 164784 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\{94EC1F13-57B1-4F34-B01E-3F0CEE484A7B}
    d:\docume~1\bill\LOCALS~1\Temp\{94EC1F13-57B1-4F34-B01E-3F0CEE484A7B}\setup.isn 751321 bytes
    d:\docume~1\bill\LOCALS~1\Temp\{9CEE7B05-D005-4311-985D-B2114492C026}
    d:\docume~1\bill\LOCALS~1\Temp\{9CEE7B05-D005-4311-985D-B2114492C026}\{28006915-2739-4EBE-B5E8-49B25D32EB33}
    d:\docume~1\bill\LOCALS~1\Temp\{BDF4B94E-B6D7-42AD-8BB8-4391CEBFEA0D}
    d:\docume~1\bill\LOCALS~1\Temp\{BDF4B94E-B6D7-42AD-8BB8-4391CEBFEA0D}\{72FD5F2E-1F7A-4E9B-8838-29E842E178CD}
    d:\docume~1\bill\LOCALS~1\Temp\{BDF4B94E-B6D7-42AD-8BB8-4391CEBFEA0D}\{72FD5F2E-1F7A-4E9B-8838-29E842E178CD}\difxapi.dll 331184 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\{E402CC98-55E9-49C0-B61F-8F4203ADF31A}
    d:\docume~1\bill\LOCALS~1\Temp\{E402CC98-55E9-49C0-B61F-8F4203ADF31A}\setup.isn 52715 bytes
    d:\docume~1\bill\LOCALS~1\Temp\{FD31AEF6-B60F-481A-A862-29137E6398F5}
    d:\docume~1\bill\LOCALS~1\Temp\{FD31AEF6-B60F-481A-A862-29137E6398F5}\setup.isn 52715 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF1349.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF13A.tmp 24576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF1473.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF15ED.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF1914.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF1DE2.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF2434.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF2436.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF243F.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF24AB.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF24B6.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF24E4.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF24F7.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF2656.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF26A6.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFAC71.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFB0C.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFB0CB.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFB0D6.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFB142.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFB14D.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFB17.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFB17B.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFB186.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFB1A7.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFB1FE.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFB568.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF51C7.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF51D6.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF52E6.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF54F5.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF55E2.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF5D53.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF6061.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF6073.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF607C.tmp 294912 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF63CD.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF64E6.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF651.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF6767.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF6D40.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF70CE.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF70F0.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF70FB.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF7167.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF7172.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF7196.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF71A0.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF71AB.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF7293.tmp 65536 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF793B.tmp 28672 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF7A9A.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF7DBB.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF7DC6.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\avginfo.id 78 bytes
    d:\docume~1\bill\LOCALS~1\Temp\AVG_TB_DumpLog.txt 6441 bytes
    d:\docume~1\bill\LOCALS~1\Temp\B.tmp 321184 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\B7B.dir
    d:\docume~1\bill\LOCALS~1\Temp\B7B.dir\InstallFlashPlayer.exe 3797152 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\B7B.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\BTN%Copy%1
    d:\docume~1\bill\LOCALS~1\Temp\BTN%Copy%1\BTN%Copy%2
    d:\docume~1\bill\LOCALS~1\Temp\~DFE9A5.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFEA12.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFEA1D.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFEB1D.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFEB28.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFED61.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFEDE.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFEE2C.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFEE5B.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFEE69.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFEE9.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFF0D.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFF376.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFF5B.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFF69D.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFF79.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFF818.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFF837.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\mso1E.tmp 28160 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\msohtml1
    d:\docume~1\bill\LOCALS~1\Temp\msohtml1\01
    d:\docume~1\bill\LOCALS~1\Temp\NclRegPermissions(1).log 8035 bytes
    d:\docume~1\bill\LOCALS~1\Temp\NclRegPermissions(2).log 19990 bytes
    d:\docume~1\bill\LOCALS~1\Temp\NOD4779.tmp 36605 bytes
    d:\docume~1\bill\LOCALS~1\Temp\NOD49AA.tmp 5289984 bytes
    d:\docume~1\bill\LOCALS~1\Temp\NOD49AB.tmp 5289984 bytes
    d:\docume~1\bill\LOCALS~1\Temp\NOD49AD.tmp 3379764 bytes
    d:\docume~1\bill\LOCALS~1\Temp\NOD49AE.tmp 3184026 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFBC98.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFBECE.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFBF0A.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC17.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC22.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC454.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC5E3.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC5EE.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC6B0.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC6DD.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC6E8.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC754.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC75F.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC792.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC7B2.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC82B.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC83B.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC862.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC954.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC973.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFCE15.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD35.tmp 40960 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD58E.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD5B2.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Google Toolbar
    d:\docume~1\bill\LOCALS~1\Temp\Google Toolbar\GoogleToolbarWelcome.log 282 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Google Toolbar\gt140.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Google Toolbar\gtb144.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Google Toolbar\gtb235.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Google Toolbar\gtb3.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\GoogleToolbarInstaller1.log 3993 bytes
    d:\docume~1\bill\LOCALS~1\Temp\GoogleToolbarInstaller2.log 10803 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Greek.bin 25631 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Hebrew.bin 19937 bytes
    d:\docume~1\bill\LOCALS~1\Temp\History
    d:\docume~1\bill\LOCALS~1\Temp\History\History.IE5
    d:\docume~1\bill\LOCALS~1\Temp\History\History.IE5\desktop.ini 145 bytes
    d:\docume~1\bill\LOCALS~1\Temp\History\History.IE5\index.dat 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\hsperfdata_bill
    d:\docume~1\bill\LOCALS~1\Temp\Hungarian.bin 26549 bytes
    d:\docume~1\bill\LOCALS~1\Temp\4410798833618140.tmp 106825 bytes
    d:\docume~1\bill\LOCALS~1\Temp\44107988385977453.tmp 106825 bytes
    d:\docume~1\bill\LOCALS~1\Temp\4410798849405687.tmp 106693 bytes
    d:\docume~1\bill\LOCALS~1\Temp\4410798858648765.tmp 86069 bytes
    d:\docume~1\bill\LOCALS~1\Temp\44107988783250.tmp 106825 bytes
    d:\docume~1\bill\LOCALS~1\Temp\4410798879729312.tmp 86069 bytes
    d:\docume~1\bill\LOCALS~1\Temp\4410798888349640.tmp 86069 bytes
    d:\docume~1\bill\LOCALS~1\Temp\460194082174771640.tmp 27437 bytes
    d:\docume~1\bill\LOCALS~1\Temp\46019408230956812.tmp 27434 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFF9D.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFFB2.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFFB7B.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFFBA9.tmp 229376 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFFBD.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFFCA.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFFDEE.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFFDFF.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFFE6C.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFFE6E.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFFE77.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFFEA5.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFFEBB.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\4410798830961468.tmp 86069 bytes
    d:\docume~1\bill\LOCALS~1\Temp\btwinlog.txt 16513 bytes
    d:\docume~1\bill\LOCALS~1\Temp\dd_vcredistUI39EE.txt 11422 bytes
    d:\docume~1\bill\LOCALS~1\Temp\GLCB6.tmp 2194 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ICD1.tmp
    d:\docume~1\bill\LOCALS~1\Temp\ICD1.tmp\getPlusPlus_Adobe.exe 280400 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ICD1.tmp\getPlusPlus_Adobe_reg.exe 40344 bytes executable
    D:\Dcatchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    d:\docume~1\bill\LOCALS~1\Temp\ICD1.tmp\gp.inf 297 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ICD1.tmp\gp.ocx 51568 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\java_install_sp.log 1221 bytes
    d:\docume~1\bill\LOCALS~1\Temp\MPC9.tmp 314 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Norwegian.bin 22406 bytes
    d:\docume~1\bill\LOCALS~1\Temp\SetAA2.tmp 121168 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\tmpA97.tmp 782336 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\{855FAB0A-EB06-47F6-925D-5B0E4A78256E}
    d:\docume~1\bill\LOCALS~1\Temp\{855FAB0A-EB06-47F6-925D-5B0E4A78256E}\setup.exe 393216 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\~DF27B1.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF3832.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF508B.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF7E5C.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFA9E.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFBC8B.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD65C.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFE99A.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFF84.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181977562218.tmp 4534 bytes
    d:\docume~1\bill\LOCALS~1\Temp\4153031819778107843.tmp 4725 bytes
    d:\docume~1\bill\LOCALS~1\Temp\4153031819785500.tmp 4723 bytes
    d:\docume~1\bill\LOCALS~1\Temp\4153031819793781.tmp 4726 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181979497671.tmp 4724 bytes
    d:\docume~1\bill\LOCALS~1\Temp\4153031819795994093.tmp 4725 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181979769812.tmp 4533 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181980327484.tmp 4724 bytes
    d:\docume~1\bill\LOCALS~1\Temp\4153031819810455734.tmp 4725 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181981128953.tmp 4724 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181981935546.tmp 4726 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181982601812.tmp 4726 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181982609625.tmp 4724 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181983555078.tmp 4724 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181983974390.tmp 4739 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181984256062.tmp 4726 bytes
    d:\docume~1\bill\LOCALS~1\Temp\4153031819852203.tmp 4724 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181985365859.tmp 4740 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181985747421.tmp 4606 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181985968421.tmp 4739 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181986623015.tmp 4738 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181986646937.tmp 4739 bytes
    d:\docume~1\bill\LOCALS~1\Temp\4153031819866759062.tmp 4725 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181986727015.tmp 4723 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181986796921.tmp 4725 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0402.ini 24550 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0403.ini 25386 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0404.ini 10688 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0405.ini 23310 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0406.ini 23896 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0407.ini 25860 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0408.ini 27384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0409.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x040a.ini 25140 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x040b.ini 22724 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x040c.ini 26270 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x040d.ini 18688 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x040e.ini 23294 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0410.ini 25188 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0411.ini 14884 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0412.ini 14108 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0413.ini 25000 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0414.ini 23990 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0415.ini 24330 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0418.ini 24806 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0419.ini 23432 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x041a.ini 23614 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x041b.ini 23534 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x041d.ini 23354 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x041e.ini 22486 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x041f.ini 23034 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0421.ini 24738 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0422.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0424.ini 23950 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0426.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0427.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x042a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0804.ini 10760 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0809.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x080a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0816.ini 24772 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0c01.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0c0a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x100a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x140a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x180a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x1c0a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x200a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x240a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x280a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x2c0a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x300a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x340a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x380a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x3c0a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\10250.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1026.mst 132608 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1027.mst 83968 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1028.mst 71680 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1029.mst 83456 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1030.mst 80384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1031.mst 87552 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1033.mst 4096 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1034.mst 88064 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1035.mst 80384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1036.mst 90112 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1037.mst 96256 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1038.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1040.mst 88064 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1041.mst 103936 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1042.mst 92160 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1043.mst 82944 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1044.mst 77312 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1045.mst 84480 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1046.mst 82944 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1048.mst 86528 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1049.mst 125440 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1050.mst 80896 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1051.mst 86016 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1053.mst 78848 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1054.mst 158720 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1057.mst 77312 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1058.mst 121344 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1060.mst 79872 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1062.mst 80896 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1063.mst 80896 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1066.mst 92672 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\11274.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\12298.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\13322.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\14346.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\15370.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\2052.mst 71680 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\2057.mst 25600 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\2058.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\2070.mst 86016 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\3073.mst 105472 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\3082.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\3098.mst 125952 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\4106.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\5130.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\6154.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\7178.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\8202.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\9226.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\Google Earth.msi 1531392 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\GoogleEarth.exe 1207296 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\LocalAppData
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\LocalAppData\Google
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\LocalAppData\Google\Custom Buttons
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\LocalAppData\Google\Custom Buttons\toolbar.google.com_MXE8GT6B9RBHXCGLZ06L.xml 1946 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\program files
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\program files\Google
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\program files\Google\Google Earth
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\program files\Google\Google Earth\client
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\program files\Google\Google Earth\client\drivers.ini 75289 bytes
  4. paytonava12 Newcomer, in training

    do you still want me to post the log as it like 195000 characters
  5. Broni Malware Annihilator

    Upload the file(s) here: http://uploadmb.com/
    Copy the link inside the Direct Link box and post it in your next reply.
Thread Status:
Not open for further replies.