also @ TechSpot: Updated Microsoft EULA prohibits class action lawsuits

TechSpot
Register now for a live online demo to see how the Office 365 suite of tools
- professional email, calendars, video conferencing, and file sharing -

[Inactive] [A] Two iexplorers running in task manager

Discussion in 'Virus and Malware Removal' started by paytonava12, Jan 20, 2012.

Thread Status:
Not open for further replies.
Page 2 of 2

  1. paytonava12 Newcomer, in training

    ComboFix 12-01-30.01 - bill 30/01/2012 23:25:31.3.2 - x86 MINIMAL
    Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1790.1313 [GMT 13:00]
    Running from: d:\documents and settings\bill\Desktop\ComboFix.exe
    AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
    .
    .
    ((((((((((((((((((((((((( Files Created from 2011-12-28 to 2012-01-30 )))))))))))))))))))))))))))))))
    .
    .
    2012-01-30 09:40 . 2012-01-05 07:19 6557240 ----a-w- d:\documents and settings\All Users.WINDOWS\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{611B625E-8CFF-4553-BF41-1435744E6819}\mpengine.dll
    2012-01-29 01:24 . 2012-01-29 01:24 626688 ----a-w- d:\program files\Mozilla Firefox\msvcr80.dll
    2012-01-29 01:24 . 2012-01-29 01:24 548864 ----a-w- d:\program files\Mozilla Firefox\msvcp80.dll
    2012-01-29 01:24 . 2012-01-29 01:24 479232 ----a-w- d:\program files\Mozilla Firefox\msvcm80.dll
    2012-01-29 01:24 . 2012-01-29 01:24 43992 ----a-w- d:\program files\Mozilla Firefox\mozutils.dll
    2012-01-21 13:08 . 2012-01-05 07:19 6557240 ----a-w- d:\documents and settings\All Users.WINDOWS\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
    2012-01-21 07:43 . 2012-01-21 07:43 -------- d-----w- d:\program files\ESET
    2012-01-21 04:18 . 2012-01-21 04:18 388096 ----a-r- d:\documents and settings\bill\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
    2012-01-20 23:04 . 2012-01-04 09:26 236576 ------w- d:\windows\system32\MpSigStub.exe
    2012-01-20 22:59 . 2012-01-20 23:00 -------- d-----w- d:\program files\Microsoft Security Client
    2012-01-19 04:03 . 2012-01-19 04:03 -------- d-----w- d:\program files\TeaTimer (Spybot - Search & Destroy)
    2012-01-19 04:03 . 2012-01-19 04:03 -------- d-----w- d:\program files\File Scanner Library (Spybot - Search & Destroy)
    2012-01-19 04:01 . 2012-01-19 07:17 -------- d-----w- d:\documents and settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy
    2012-01-07 08:06 . 2012-01-07 08:06 -------- d-----w- d:\documents and settings\bill\Application Data\LimeWire
    2012-01-03 13:10 . 2012-01-03 13:10 182672 ----a-w- d:\program files\Mozilla Firefox\plugins\nppdf32.dll
    2012-01-03 13:10 . 2012-01-03 13:10 182672 ----a-w- d:\program files\Internet Explorer\Plugins\nppdf32.dll
    .
    .
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2012-01-30 03:52 . 2011-05-23 07:10 90112 ----a-w- d:\windows\DUMP6617.tmp
    2012-01-23 04:54 . 2011-05-25 01:45 414368 ----a-w- d:\windows\system32\FlashPlayerCPLApp.cpl
    2011-12-10 02:24 . 2011-11-12 20:49 20464 ----a-w- d:\windows\system32\drivers\mbam.sys
    2011-11-25 21:57 . 2006-02-28 12:00 293376 ----a-w- d:\windows\system32\winsrv.dll
    2011-11-23 13:25 . 2006-02-28 12:00 1859584 ----a-w- d:\windows\system32\win32k.sys
    2011-11-18 12:35 . 2006-02-28 12:00 60416 ----a-w- d:\windows\system32\packager.exe
    2011-11-16 14:21 . 2006-02-28 12:00 354816 ----a-w- d:\windows\system32\winhttp.dll
    2011-11-16 14:21 . 2006-02-28 12:00 152064 ----a-w- d:\windows\system32\schannel.dll
    2011-11-04 19:20 . 2006-02-28 12:00 916992 ----a-w- d:\windows\system32\wininet.dll
    2011-11-04 19:20 . 2006-02-28 12:00 43520 ----a-w- d:\windows\system32\licmgr10.dll
    2011-11-04 19:20 . 2006-02-28 12:00 1469440 ------w- d:\windows\system32\inetcpl.cpl
    2011-11-04 11:23 . 2006-02-28 12:00 385024 ----a-w- d:\windows\system32\html.iec
    2011-11-03 15:28 . 2006-02-28 12:00 386048 ----a-w- d:\windows\system32\qdvd.dll
    2011-11-03 15:28 . 2006-02-28 12:00 1292288 ----a-w- d:\windows\system32\quartz.dll
    2011-11-01 16:07 . 2006-02-28 12:00 1288704 ----a-w- d:\windows\system32\ole32.dll
    2012-01-29 01:24 . 2011-10-08 01:57 121816 ----a-w- d:\program files\mozilla firefox\components\browsercomps.dll
    .
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4
    .
    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
    d:\program files\AVG Secure Search\10.0.0.7\AVG Secure Search_toolbar.dll [BU]
    .
    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0}]
    2011-06-27 19:05 175912 ----a-w- d:\program files\IncrediMail_MediaBar_2\prxtbIncr.dll
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    "{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0}"= "d:\program files\IncrediMail_MediaBar_2\prxtbIncr.dll" [2011-06-27 175912]
    "{95B7759C-8C7F-4BF1-B163-73684A933233}"= "d:\program files\AVG Secure Search\10.0.0.7\AVG Secure Search_toolbar.dll" [BU]
    .
    [HKEY_CLASSES_ROOT\clsid\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0}]
    .
    [HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}]
    [HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj.1]
    [HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj]
    .
    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
    "{D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0}"= "d:\program files\IncrediMail_MediaBar_2\prxtbIncr.dll" [2011-06-27 175912]
    .
    [HKEY_CLASSES_ROOT\clsid\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0}]
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "IncrediMail"="d:\program files\IncrediMail\bin\IncMail.exe" [2011-08-05 366024]
    "S60 PC Suite Tray"="d:\program files\Samsung\Samsung PC Studio 7\PCSuite.exe" [2008-12-06 699392]
    "DriverFinder"="d:\program files\DriverFinder\DriverFinder.exe" [BU]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "SMSERIAL"="sm56hlpr.exe" [2004-12-29 544768]
    "RTHDCPL"="RTHDCPL.EXE" [2011-04-14 20053608]
    "Adobe ARM"="d:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
    "SunJavaUpdateSched"="d:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
    "REGSHAVE"="d:\program files\REGSHAVE\REGSHAVE.EXE" [2002-02-05 53248]
    "Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-12-24 460872]
    "MSC"="d:\program files\Microsoft Security Client\msseces.exe" [2011-06-15 997920]
    .
    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="d:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
    "Samsung.PCSync"="d:\program files\Samsung\Samsung PC Studio 7\PcSync2.exe" [2009-06-04 1294336]
    .
    d:\documents and settings\All Users.WINDOWS\Start Menu\Programs\Startup\
    BTTray.lnk - d:\program files\D-Link\Bluetooth Software\BTTray.exe [2011-5-22 565309]
    Microsoft Office.lnk - d:\program files\Microsoft Office\Office10\OSA.EXE [2011-5-22 83360]
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
    @="Service"
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ROC_roc_dec12]
    d:\program files\AVG Secure Search\ROC_roc_dec12.exe [BU]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateMyDrivers]
    d:\program files\SmartTweak Software\UpdateMyDrivers\UpdateMyDrivers.exe [BU]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vProt]
    d:\program files\AVG Secure Search\vprot.exe [BU]
    .
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "d:\\Program Files\\CNet\\Wireless LAN Driver and Utility\\RtWLan.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "d:\\Program Files\\IncrediMail\\Bin\\IncMail.exe"=
    "d:\\Program Files\\IncrediMail\\Bin\\ImApp.exe"=
    "d:\\Program Files\\IncrediMail\\Bin\\ImpCnt.exe"=
    "d:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe"=
    "d:\\WINDOWS\\system32\\mmc.exe"=
    .
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "1542:TCP"= 1542:TCP:Realtek WPS TCP Prot
    "1542:UDP"= 1542:UDP:Realtek WPS UDP Prot
    "53:UDP"= 53:UDP:Realtek AP UDP Prot
    .
    S2 gupdate;Google Update Service (gupdate);d:\program files\Google\Update\GoogleUpdate.exe [30/05/2011 10:34 a.m. 136176]
    S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [13/11/2011 9:49 a.m. 652872]
    S2 MUsbFltr;USB WTMouse Filter Service;d:\windows\system32\drivers\MUsbFltr.sys [23/03/2004 9:45 a.m. 6528]
    S3 Ambfilt;Ambfilt;d:\windows\system32\drivers\Ambfilt.sys [10/06/2011 5:43 p.m. 1691480]
    S3 gupdatem;Google Update Service (gupdatem);d:\program files\Google\Update\GoogleUpdate.exe [30/05/2011 10:34 a.m. 136176]
    S3 massfilter;Mass Storage Filter Driver;d:\windows\system32\drivers\massfilter.sys --> d:\windows\system32\drivers\massfilter.sys [?]
    S3 MBAMProtector;MBAMProtector;d:\windows\system32\drivers\mbam.sys [13/11/2011 9:49 a.m. 20464]
    S3 RTL8192cu;Realtek RTL8192CU Wireless LAN 802.11n USB 2.0 Network Adapter;d:\windows\system32\drivers\RTL8192cu.sys [23/05/2011 10:40 a.m. 987904]
    S3 zgwhsdiag;ZTE WCDMA Handset Diagnostic Port;d:\windows\system32\drivers\zgwhsdiag.sys [5/07/2011 12:46 p.m. 106752]
    S3 zgwhsmdm;ZTE WCDMA Handset USB Modem;d:\windows\system32\drivers\zgwhsmdm.sys [5/07/2011 12:46 p.m. 106752]
    S3 zgwhsnmea;WCDMA Handset NMEA Port;d:\windows\system32\drivers\zgwhsnmea.sys [5/07/2011 12:46 p.m. 106752]
    S4 AVG Security Toolbar Service;AVG Security Toolbar Service;d:\program files\AVG\AVG10\Toolbar\ToolbarBroker.exe --> d:\program files\AVG\AVG10\Toolbar\ToolbarBroker.exe [?]
    S4 vToolbarUpdater;vToolbarUpdater;d:\program files\Common Files\AVG Secure Search\vToolbarUpdater\10.0.6\ToolbarUpdater.exe [19/01/2012 10:53 p.m. 909152]
    .
    --- Other Services/Drivers In Memory ---
    .
    *NewlyCreated* - MUSBFLTR
    .
    Contents of the 'Scheduled Tasks' folder
    .
    2012-01-30 d:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - d:\program files\Google\Update\GoogleUpdate.exe [2011-05-29 21:33]
    .
    2012-01-30 d:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - d:\program files\Google\Update\GoogleUpdate.exe [2011-05-29 21:33]
    .
    2012-01-30 d:\windows\Tasks\MP Scheduled Scan.job
    - d:\program files\Microsoft Security Client\Antimalware\MpCmdRun.exe [2011-04-27 02:39]
    .
    .
    ------- Supplementary Scan -------
    .
    IE: E&xport to Microsoft Excel - d:\progra~1\MI1933~1\Office10\EXCEL.EXE/3000
    IE: Send To &Bluetooth - d:\program files\D-Link\Bluetooth Software\btsendto_ie_ctx.htm
    TCP: DhcpNameServer = 192.168.0.1
    Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - d:\program files\Common Files\AVG Secure Search\ViProtocolInstaller\10.0.6\ViProtocol.dll
    FF - ProfilePath - d:\documents and settings\bill\Application Data\Mozilla\Firefox\Profiles\ia0oe96w.default\
    FF - prefs.js: keyword.URL - hxxp://isearch.avg.com/search?cid=%7Bfcf1f193-93eb-4aac-b171-c0f56e8840ff%7D&mid=43e838ecbad847d1a77dd141e72e816f-2c3740f7878da74983a6109f0091f171a47e922a&ds=AVG&v=10.0.0.7&lang=us&pr=fr&d=2011-12-14%2008%3A49%3A15&sap=ku&q=
    FF - prefs.js: network.proxy.type - 0
    .
    - - - - ORPHANS REMOVED - - - -
    .
    WebBrowser-{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - (no file)
    AddRemove-Adobe Flash Player ActiveX - d:\windows\system32\Macromed\Flash\FlashUtil10x_ActiveX.exe
    AddRemove-AI Insems - c:\aiinsems\uninst.exe
    AddRemove-Alpro Connector - c:\alproconnector\uninst.exe
    AddRemove-AN Generator - c:\angenerator\uninst.exe
    AddRemove-{D8CE69B0-9274-4b8c-BA49-0FF6A20A3C65} - d:\program files\SAMSUNG\SYMBIAN USB Download Driver\Uninstall.exe
    .
    paytonava12, Feb 4, 2012
    #21

  2. Broni Malware Annihilator

    Retry..........
    Broni, Feb 4, 2012
    #22

  3. paytonava12 Newcomer, in training

    .
    .
    **************************************************************************
    .
    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2012-01-30 23:30
    Windows 5.1.2600 Service Pack 3 NTFS
    .
    scanning hidden processes ...
    .
    scanning hidden autostart entries ...
    .
    scanning hidden files ...
    .
    .
    d:\docume~1\bill\LOCALS~1\Temp\ICD2.tmp
    d:\docume~1\bill\LOCALS~1\Temp\ICD2.tmp\gp.ocx 51568 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ichcop 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD10.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD328.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD329.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD35.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD36.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD365.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD366.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD367.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD4.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD404.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD423.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD424.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD4BA.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD4BB.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD5.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD6.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMD7.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMDC.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMDED.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMDEE.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\CMDF.tmp 40 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM\imu425.htm 1828 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\ImApp.log 26629 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImNtUtilU.dll 95688 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImViewRU.dll 275912 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImMangrRU.dll 533960 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImMangrU.dll 1136072 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImMapiU.dll 46536 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImNotfy.exe 259528 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImNotfyRU.dll 157128 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImNotfyU.dll 161224 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImPackr.exe 103880 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImPackrRU.dll 64456 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImParserU.dll 644552 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImpCnt.exe 112072 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImpCntRU.dll 34248 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImSearchU.dll 28616 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImServU.dll 394696 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImSetup.exe 120264 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImShExtU.dll 132552 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImSpoolU.dll 640456 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImSuppRU.dll 652744 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImSuppU.dll 1578440 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImToolsU.dll 275912 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImUtilsU.dll 1373640 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImViewU.dll 1455560 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImWrappU.dll 161224 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\IncMail.exe 366024 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\IncMailRU.dll 62920 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\IncrediGalleryDesktop.url 100 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\IncrediGalleryStart.url 100 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\incredigames.ico 27766 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\IncrediGamesStart.url 100 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\IncrediMail Gallery.ico 25214 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\IncrediMail.ico 25214 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\Iobit.ico 23558 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\Iobit.url 246 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\resources
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\resources\WebMenuImg.htm 591 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\wlessfp1.dll 71112 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\SetupData
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\SetupData\Skin
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\SetupData\Skin\angelic_light.ims 17490 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\SetupData\Skin\classic_light.ims 11610 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\SetupData\Skin\fantasy_light.ims 15062 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\SetupData\Skin\frosted_light.ims 12584 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\SetupData\Skin\im2.ims 1511058 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\SetupData\Skin\paper_light.ims 20832 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\SetupData\Skin\premium.ims 229847 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\incredimailsetup_d.7z 5776883 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\skin.7z 1822909 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail_Install.log 659230 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\incredimail_installer.log 1098 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail_Setup.log 2990740 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\MsiExec.log 1042 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IMT14.xml 1994 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IMT15.xml 426 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IMT16.xml 707340 bytes
    d:\docume~1\bill\LOCALS~1\Temp\IM_142.tmp
    d:\docume~1\bill\LOCALS~1\Temp\IM_C2C.tmp
    d:\docume~1\bill\LOCALS~1\Temp\IncrediMailInstall_En.log 4572798 bytes
    d:\docume~1\bill\LOCALS~1\Temp\is-MTITT.tmp
    d:\docume~1\bill\LOCALS~1\Temp\is-MTITT.tmp\_isetup
    d:\docume~1\bill\LOCALS~1\Temp\is-MTITT.tmp\_isetup\_RegDLL.tmp 4096 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\is-MTITT.tmp\_isetup\_shfoldr.dll 23312 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\is979.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ispAA6.tmp
    d:\docume~1\bill\LOCALS~1\Temp\ispAA6.tmp\_Setup.dll 368640 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\Italian.bin 28419 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Japanese.bin 25202 bytes
    d:\docume~1\bill\LOCALS~1\Temp\JAUReg.log 301 bytes
    d:\docume~1\bill\LOCALS~1\Temp\java_install.log 27412 bytes
    d:\docume~1\bill\LOCALS~1\Temp\java_install_reg.log 1940 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF2A1C.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF2B45.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF2C66.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF2C94.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF2DAF.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF2DE4.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF2E3C.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF30F7.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF3154.tmp 40960 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF340C.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF376F.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF377A.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF37E6.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF37F1.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF3827.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD6AA.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD6D1.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD722.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD72E.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD784.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD78F.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD79A.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD7A5.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD7FB.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD806.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD834.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD83F.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD8A5.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD8B0.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD914.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD951.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD96C.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD996.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFDB14.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFDB62.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFDBF1.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFDC07.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFDC3D.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFDC4E.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFDE27.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFDF52.tmp 57344 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFE102.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFE6E3.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFE6EE.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFE71C.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFE727.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\SimChin.bin 17030 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Slovak.bin 26159 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Slovenian.bin 24330 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Spanish.bin 28759 bytes
    d:\docume~1\bill\LOCALS~1\Temp\SWEDISH.bin 24503 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for 1993-Nissan-Maxima.zip
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for 1993-Nissan-Maxima.zip\1993-Nissan-Maxima.pdf 22513177 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for 802.11b+g Atheros Wireless Lan Driver 7.1.0.90.zip
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for 802.11b+g Atheros Wireless Lan Driver 7.1.0.90.zip\802BGA
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for 802.11b+g Atheros Wireless Lan Driver 7.1.0.90.zip\802BGA\data2.cab 457070 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for 802.11b+g Atheros Wireless Lan Driver 7.1.0.90.zip\802BGA\ISSetup.dll 552214 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for 802.11b+g Atheros Wireless Lan Driver 7.1.0.90.zip\802BGA\setup.exe 455600 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1031.mst 239104 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomCs.ctm 20593 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0404.ini 3261 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0406.ini 4855 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0407.ini 5140 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0409.ini 4632 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x040a.ini 5275 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x040b.ini 4734 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x040c.ini 5406 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0410.ini 5130 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0411.ini 5014 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0412.ini 4303 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0413.ini 5118 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0414.ini 4810 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0415.ini 4887 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0416.ini 4966 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0419.ini 4896 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x041d.ini 4636 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0804.ini 3326 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1028.mst 252416 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1030.mst 233984 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1033.mst 3584 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1034.mst 237056 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1035.mst 233984 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1036.mst 239104 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1040.mst 239104 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1041.mst 288768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1042.mst 388096 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1043.mst 238592 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1044.mst 233472 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1045.mst 233984 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1046.mst 236032 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1049.mst 252416 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1053.mst 233472 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\2052.mst 251904 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\Autorun.inf 52 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\BBalloon.dll 49152 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\BtSetup.dll 167936 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\btw.ico 3638 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\BTW.msi 2367684 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\btwusb.cat 80 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\btwusb.inf 91407 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\btwusb.sys 55288 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\btw_ci.dll 77824 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomBr.ctm 20879 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomCt.ctm 20610 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomDa.ctm 20670 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomDu.ctm 20677 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomEn.ctm 20547 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomFi.ctm 20679 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomFr.ctm 20863 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomGr.ctm 20664 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomIt.ctm 20688 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomJp.ctm 20721 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomKo.ctm 20588 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomNo.ctm 20637 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomPo.ctm 20935 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomRu.ctm 21384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomSp.ctm 20767 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomSw.ctm 20659 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\Data1.cab 17224904 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\frmupgr.sys 17516 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\Inst.exe 225280 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\instmsia.exe 1708856 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\instmsiw.exe 1822520 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\license.dat 176 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\MSVCP60.DLL 401462 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\setup.exe 45056 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\Setup.ini 1332 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\Spylite.exe 360448 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\SpyliteUserGuide.pdf 339996 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\svcpack
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\svcpack\SvcPack.ini 2566 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\UsrGuide.pdf 490249 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\3KH0RH46
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\3KH0RH46\desktop.ini 67 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\BG091VWB
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\BG091VWB\desktop.ini 67 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\desktop.ini 67 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\HD20B8U0
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\HD20B8U0\desktop.ini 67 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\index.dat 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\RLJ4E61V
    d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\RLJ4E61V\desktop.ini 67 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Thai.bin 22395 bytes
    d:\docume~1\bill\LOCALS~1\Temp\tmp8F3.tmp 782336 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\tmp8F4.tmp 8091363 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\tmp8F7.tmp 782336 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\tmp8F8.tmp 8091363 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\tmp8F9.tmp 782336 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\tmp8FA.tmp 8091363 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\tmp8FC.tmp 8091363 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\tmp936.tmp 782336 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\tmp937.tmp 8091363 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\tmpA90.tmp 782336 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\tmpA91.tmp 8091363 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\de77_appcompat.txt 16812 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Deployment
    d:\docume~1\bill\LOCALS~1\Temp\Dutch.bin 26202 bytes
    d:\docume~1\bill\LOCALS~1\Temp\E.tmp 321184 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\E9.tmp 335520 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\English.bin 22808 bytes
    d:\docume~1\bill\LOCALS~1\Temp\etilqs_w3YlHDWpLSi9sRc 196632 bytes
    d:\docume~1\bill\LOCALS~1\Temp\F.tmp 328864 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\F943591.dmp 60620 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Finnish.bin 23326 bytes
    d:\docume~1\bill\LOCALS~1\Temp\fla25E.tmp 5509838 bytes
    d:\docume~1\bill\LOCALS~1\Temp\fla3D0.tmp 2401 bytes
    d:\docume~1\bill\LOCALS~1\Temp\FP_PL_PFS_INSTALLER_32bit.exe 3763360 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\French.bin 28183 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ge172
    d:\docume~1\bill\LOCALS~1\Temp\ge252
    d:\docume~1\bill\LOCALS~1\Temp\ge2816
    d:\docume~1\bill\LOCALS~1\Temp\ge3032
    d:\docume~1\bill\LOCALS~1\Temp\geColladaModelCacheLock 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\geIconCacheLock 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\German.bin 26669 bytes
    d:\docume~1\bill\LOCALS~1\Temp\GLB159.tmp 71680 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\~DF7E67.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF7F3D.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF7F48.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF81A0.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF81B0.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF83D7.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF8449.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF85F3.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF8609.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF86E0.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF897E.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF8D68.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF8DEB.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF8F7A.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF8FB0.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF9772.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF9818.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF9849.tmp 212992 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF9970.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF9A16.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF9A21.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF9A8D.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF9A98.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF9AC6.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF9AD1.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF9E60.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFA069.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFA0D.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFA10.tmp 180224 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFA78E.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFA93.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\{8F5938E7-9B03-42D2-A522-F3631C56C3F1}
    d:\docume~1\bill\LOCALS~1\Temp\{8F5938E7-9B03-42D2-A522-F3631C56C3F1}\_Setup.dll 164784 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\{94EC1F13-57B1-4F34-B01E-3F0CEE484A7B}
    d:\docume~1\bill\LOCALS~1\Temp\{94EC1F13-57B1-4F34-B01E-3F0CEE484A7B}\setup.isn 751321 bytes
    d:\docume~1\bill\LOCALS~1\Temp\{9CEE7B05-D005-4311-985D-B2114492C026}
    d:\docume~1\bill\LOCALS~1\Temp\{9CEE7B05-D005-4311-985D-B2114492C026}\{28006915-2739-4EBE-B5E8-49B25D32EB33}
    d:\docume~1\bill\LOCALS~1\Temp\{BDF4B94E-B6D7-42AD-8BB8-4391CEBFEA0D}
    d:\docume~1\bill\LOCALS~1\Temp\{BDF4B94E-B6D7-42AD-8BB8-4391CEBFEA0D}\{72FD5F2E-1F7A-4E9B-8838-29E842E178CD}
    d:\docume~1\bill\LOCALS~1\Temp\{BDF4B94E-B6D7-42AD-8BB8-4391CEBFEA0D}\{72FD5F2E-1F7A-4E9B-8838-29E842E178CD}\difxapi.dll 331184 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\{E402CC98-55E9-49C0-B61F-8F4203ADF31A}
    d:\docume~1\bill\LOCALS~1\Temp\{E402CC98-55E9-49C0-B61F-8F4203ADF31A}\setup.isn 52715 bytes
    d:\docume~1\bill\LOCALS~1\Temp\{FD31AEF6-B60F-481A-A862-29137E6398F5}
    d:\docume~1\bill\LOCALS~1\Temp\{FD31AEF6-B60F-481A-A862-29137E6398F5}\setup.isn 52715 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF1349.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF13A.tmp 24576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF1473.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF15ED.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF1914.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF1DE2.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF2434.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF2436.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF243F.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF24AB.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF24B6.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF24E4.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF24F7.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF2656.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF26A6.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFAC71.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFB0C.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFB0CB.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFB0D6.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFB142.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFB14D.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFB17.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFB17B.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFB186.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFB1A7.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFB1FE.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFB568.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF51C7.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF51D6.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF52E6.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF54F5.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF55E2.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF5D53.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF6061.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF6073.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF607C.tmp 294912 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF63CD.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF64E6.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF651.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF6767.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF6D40.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF70CE.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF70F0.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF70FB.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF7167.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF7172.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF7196.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF71A0.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF71AB.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF7293.tmp 65536 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF793B.tmp 28672 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF7A9A.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF7DBB.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF7DC6.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\avginfo.id 78 bytes
    d:\docume~1\bill\LOCALS~1\Temp\AVG_TB_DumpLog.txt 6441 bytes
    d:\docume~1\bill\LOCALS~1\Temp\B.tmp 321184 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\B7B.dir
    d:\docume~1\bill\LOCALS~1\Temp\B7B.dir\InstallFlashPlayer.exe 3797152 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\B7B.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\BTN%Copy%1
    d:\docume~1\bill\LOCALS~1\Temp\BTN%Copy%1\BTN%Copy%2
    d:\docume~1\bill\LOCALS~1\Temp\~DFE9A5.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFEA12.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFEA1D.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFEB1D.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFEB28.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFED61.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFEDE.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFEE2C.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFEE5B.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFEE69.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFEE9.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFF0D.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFF376.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFF5B.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFF69D.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFF79.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFF818.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFF837.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\mso1E.tmp 28160 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\msohtml1
    d:\docume~1\bill\LOCALS~1\Temp\msohtml1\01
    d:\docume~1\bill\LOCALS~1\Temp\NclRegPermissions(1).log 8035 bytes
    d:\docume~1\bill\LOCALS~1\Temp\NclRegPermissions(2).log 19990 bytes
    d:\docume~1\bill\LOCALS~1\Temp\NOD4779.tmp 36605 bytes
    d:\docume~1\bill\LOCALS~1\Temp\NOD49AA.tmp 5289984 bytes
    d:\docume~1\bill\LOCALS~1\Temp\NOD49AB.tmp 5289984 bytes
    d:\docume~1\bill\LOCALS~1\Temp\NOD49AD.tmp 3379764 bytes
    d:\docume~1\bill\LOCALS~1\Temp\NOD49AE.tmp 3184026 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFBC98.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFBECE.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFBF0A.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC17.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC22.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC454.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC5E3.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC5EE.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC6B0.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC6DD.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC6E8.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC754.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC75F.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC792.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC7B2.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC82B.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC83B.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC862.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC954.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFC973.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFCE15.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD35.tmp 40960 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD58E.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD5B2.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Google Toolbar
    d:\docume~1\bill\LOCALS~1\Temp\Google Toolbar\GoogleToolbarWelcome.log 282 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Google Toolbar\gt140.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Google Toolbar\gtb144.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Google Toolbar\gtb235.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Google Toolbar\gtb3.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\GoogleToolbarInstaller1.log 3993 bytes
    d:\docume~1\bill\LOCALS~1\Temp\GoogleToolbarInstaller2.log 10803 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Greek.bin 25631 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Hebrew.bin 19937 bytes
    d:\docume~1\bill\LOCALS~1\Temp\History
    d:\docume~1\bill\LOCALS~1\Temp\History\History.IE5
    d:\docume~1\bill\LOCALS~1\Temp\History\History.IE5\desktop.ini 145 bytes
    d:\docume~1\bill\LOCALS~1\Temp\History\History.IE5\index.dat 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\hsperfdata_bill
    d:\docume~1\bill\LOCALS~1\Temp\Hungarian.bin 26549 bytes
    d:\docume~1\bill\LOCALS~1\Temp\4410798833618140.tmp 106825 bytes
    d:\docume~1\bill\LOCALS~1\Temp\44107988385977453.tmp 106825 bytes
    d:\docume~1\bill\LOCALS~1\Temp\4410798849405687.tmp 106693 bytes
    d:\docume~1\bill\LOCALS~1\Temp\4410798858648765.tmp 86069 bytes
    d:\docume~1\bill\LOCALS~1\Temp\44107988783250.tmp 106825 bytes
    d:\docume~1\bill\LOCALS~1\Temp\4410798879729312.tmp 86069 bytes
    d:\docume~1\bill\LOCALS~1\Temp\4410798888349640.tmp 86069 bytes
    d:\docume~1\bill\LOCALS~1\Temp\460194082174771640.tmp 27437 bytes
    d:\docume~1\bill\LOCALS~1\Temp\46019408230956812.tmp 27434 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFF9D.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFFB2.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFFB7B.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFFBA9.tmp 229376 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFFBD.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFFCA.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFFDEE.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFFDFF.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFFE6C.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFFE6E.tmp 0 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFFE77.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFFEA5.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFFEBB.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\4410798830961468.tmp 86069 bytes
    d:\docume~1\bill\LOCALS~1\Temp\btwinlog.txt 16513 bytes
    d:\docume~1\bill\LOCALS~1\Temp\dd_vcredistUI39EE.txt 11422 bytes
    d:\docume~1\bill\LOCALS~1\Temp\GLCB6.tmp 2194 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ICD1.tmp
    d:\docume~1\bill\LOCALS~1\Temp\ICD1.tmp\getPlusPlus_Adobe.exe 280400 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\ICD1.tmp\getPlusPlus_Adobe_reg.exe 40344 bytes executable
    D:\Dcatchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    d:\docume~1\bill\LOCALS~1\Temp\ICD1.tmp\gp.inf 297 bytes
    d:\docume~1\bill\LOCALS~1\Temp\ICD1.tmp\gp.ocx 51568 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\java_install_sp.log 1221 bytes
    d:\docume~1\bill\LOCALS~1\Temp\MPC9.tmp 314 bytes
    d:\docume~1\bill\LOCALS~1\Temp\Norwegian.bin 22406 bytes
    d:\docume~1\bill\LOCALS~1\Temp\SetAA2.tmp 121168 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\tmpA97.tmp 782336 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\{855FAB0A-EB06-47F6-925D-5B0E4A78256E}
    d:\docume~1\bill\LOCALS~1\Temp\{855FAB0A-EB06-47F6-925D-5B0E4A78256E}\setup.exe 393216 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\~DF27B1.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF3832.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF508B.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DF7E5C.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFA9E.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFBC8B.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFD65C.tmp 16384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFE99A.tmp 32768 bytes
    d:\docume~1\bill\LOCALS~1\Temp\~DFF84.tmp 512 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181977562218.tmp 4534 bytes
    d:\docume~1\bill\LOCALS~1\Temp\4153031819778107843.tmp 4725 bytes
    d:\docume~1\bill\LOCALS~1\Temp\4153031819785500.tmp 4723 bytes
    d:\docume~1\bill\LOCALS~1\Temp\4153031819793781.tmp 4726 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181979497671.tmp 4724 bytes
    d:\docume~1\bill\LOCALS~1\Temp\4153031819795994093.tmp 4725 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181979769812.tmp 4533 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181980327484.tmp 4724 bytes
    d:\docume~1\bill\LOCALS~1\Temp\4153031819810455734.tmp 4725 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181981128953.tmp 4724 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181981935546.tmp 4726 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181982601812.tmp 4726 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181982609625.tmp 4724 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181983555078.tmp 4724 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181983974390.tmp 4739 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181984256062.tmp 4726 bytes
    d:\docume~1\bill\LOCALS~1\Temp\4153031819852203.tmp 4724 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181985365859.tmp 4740 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181985747421.tmp 4606 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181985968421.tmp 4739 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181986623015.tmp 4738 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181986646937.tmp 4739 bytes
    d:\docume~1\bill\LOCALS~1\Temp\4153031819866759062.tmp 4725 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181986727015.tmp 4723 bytes
    d:\docume~1\bill\LOCALS~1\Temp\415303181986796921.tmp 4725 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0402.ini 24550 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0403.ini 25386 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0404.ini 10688 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0405.ini 23310 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0406.ini 23896 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0407.ini 25860 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0408.ini 27384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0409.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x040a.ini 25140 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x040b.ini 22724 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x040c.ini 26270 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x040d.ini 18688 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x040e.ini 23294 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0410.ini 25188 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0411.ini 14884 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0412.ini 14108 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0413.ini 25000 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0414.ini 23990 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0415.ini 24330 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0418.ini 24806 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0419.ini 23432 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x041a.ini 23614 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x041b.ini 23534 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x041d.ini 23354 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x041e.ini 22486 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x041f.ini 23034 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0421.ini 24738 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0422.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0424.ini 23950 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0426.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0427.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x042a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0804.ini 10760 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0809.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x080a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0816.ini 24772 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0c01.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0c0a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x100a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x140a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x180a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x1c0a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x200a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x240a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x280a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x2c0a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x300a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x340a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x380a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x3c0a.ini 22492 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\10250.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1026.mst 132608 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1027.mst 83968 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1028.mst 71680 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1029.mst 83456 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1030.mst 80384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1031.mst 87552 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1033.mst 4096 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1034.mst 88064 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1035.mst 80384 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1036.mst 90112 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1037.mst 96256 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1038.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1040.mst 88064 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1041.mst 103936 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1042.mst 92160 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1043.mst 82944 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1044.mst 77312 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1045.mst 84480 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1046.mst 82944 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1048.mst 86528 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1049.mst 125440 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1050.mst 80896 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1051.mst 86016 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1053.mst 78848 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1054.mst 158720 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1057.mst 77312 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1058.mst 121344 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1060.mst 79872 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1062.mst 80896 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1063.mst 80896 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\1066.mst 92672 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\11274.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\12298.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\13322.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\14346.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\15370.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\2052.mst 71680 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\2057.mst 25600 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\2058.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\2070.mst 86016 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\3073.mst 105472 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\3082.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\3098.mst 125952 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\4106.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\5130.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\6154.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\7178.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\8202.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\9226.mst 88576 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\Google Earth.msi 1531392 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\GoogleEarth.exe 1207296 bytes executable
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\LocalAppData
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\LocalAppData\Google
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\LocalAppData\Google\Custom Buttons
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\LocalAppData\Google\Custom Buttons\toolbar.google.com_MXE8GT6B9RBHXCGLZ06L.xml 1946 bytes
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\program files
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\program files\Google
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\program files\Google\Google Earth
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\program files\Google\Google Earth\client
    d:\docume~1\bill\LOCALS~1\Temp\._msige60\program files\Google\Google Earth\client\drivers.ini 75289 bytes
    paytonava12, Feb 4, 2012
    #23

  4. paytonava12 Newcomer, in training

    do you still want me to post the log as it like 195000 characters
    paytonava12, Feb 4, 2012
    #24

  5. Broni Malware Annihilator

    Upload the file(s) here: http://uploadmb.com/
    Copy the link inside the Direct Link box and post it in your next reply.
    Broni, Feb 4, 2012
    #25
Page 2 of 2
Thread Status:
Not open for further replies.