winbluesoft got me as well, and hard

3 posters

WiredWX Christian Hobby Weather Tools :: GeekPolice tech support archive :: Technical Support

winbluesoft got me as well, and hard3rd June 2009, 8:55 pm

i downloaded hijackthis and ran it, but when i tried to get a log file, the virus would not let me open notepad. also, when i try to run malwarebytes antimalware, i get through the installation, then see a vbaccellerator error, runtime '0', and then a malwarebytes error 440. i dont know what to do

Re: winbluesoft got me as well, and hard3rd June 2009, 8:57 pm

Try opening the log file in Wordpad rather than Notepad.

............................................................................................
Site Admin / Security Administrator

Virus Removal ~ OS Support ~ Have we helped you? Help us! ~ GeekChat
- Please PM me if I fail to respond within 24hrs.
winbluesoft got me as well, and hard DXwU4

winbluesoft got me as well, and hard DXwU4

winbluesoft got me as well, and hard VvYDg

Re: winbluesoft got me as well, and hard3rd June 2009, 8:59 pm

how?

Re: winbluesoft got me as well, and hard3rd June 2009, 9:04 pm

Right click the .txt file > Open With.
Is "Wordpad" on the list?

Re: winbluesoft got me as well, and hard3rd June 2009, 9:08 pm

to be honest, i dont even know where the log file is saved

Re: winbluesoft got me as well, and hard3rd June 2009, 9:13 pm

Did you use the Hijack This from the proper Hijack This installer or our hijackgpthis?

If it's the proper one, the log will be saved in here:
C:\Program Files\Trend Micro\Hijack This\hijackthis.log

Re: winbluesoft got me as well, and hard3rd June 2009, 9:15 pm

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:08:37 PM, on 6/3/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\lxctcoms.exe
C:\Program Files\McAfee\Common Framework\FrameworkService.exe
C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe
C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\tempo-setup2.exe
C:\Program Files\Cisco Systems\Clean Access Agent\CCAAgent.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\dlcccoms.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Mozilla Firefox\firefox.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wcsu.edu/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan Enterprise\Scriptcl.dll
O2 - BHO: Viewpoint Toolbar BHO - {A7327C09-B521-4EDB-8509-7D2660C9EC98} - C:\Program Files\Viewpoint\Viewpoint Toolbar\3.8.0\ViewBarBHO.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [dlccmon.exe] "C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 5400 Series\ezprint.exe"
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\McAfee\Common Framework\UdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [CloneDVDElbyDelay] "C:\Program Files\Elaborate Bytes\CloneDVD\ElbyCheck.exe" /L ElbyDelay
O4 - HKLM\..\Run: [ElbyCheckAnyDVD] "C:\Program Files\SlySoft\AnyDVD\ElbyCheck.exe" /L AnyDVD
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [LXCTCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCTtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [VisualTaskTips] C:\Program Files\VisualTaskTips\VisualTaskTips.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [ATnotes.exe] C:\Program Files\ATnotes\ATnotes.exe
O4 - HKCU\..\Run: [tempo-setup2.exe] C:\WINDOWS\system32\tempo-setup2.exe
O4 - Global Startup: Clean Access Agent.lnk = C:\Program Files\Cisco Systems\Clean Access Agent\CCAAgentLauncher.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {3BFFE033-BF43-11D5-A271-00A024A51325} (iNotes6 Class) - https://student.wcsu.edu/iNotes6.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - https://upload.facebook.com/controls/FacebookPhotoUploader.cab
O20 - AppInit_DLLs: blocker.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Creative Labs Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe
O23 - Service: dlcc_device - - C:\WINDOWS\system32\dlcccoms.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: lxct_device - - C:\WINDOWS\system32\lxctcoms.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - McAfee, Inc. - C:\Program Files\McAfee\Common Framework\FrameworkService.exe
O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe
O23 - Service: McAfee Task Manager (McTaskManager) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

--
End of file - 12138 bytes

Re: winbluesoft got me as well, and hard3rd June 2009, 9:17 pm

Hello.

I see you have Viewpoint software installed.

Viewpoint Manager is considered as foistware instead of malware since it is installed without users approval but doesn't spy or do anything "bad". Read this article: here and here

I suggest you remove the program now.

Go to Start > Control Panel > Add/Remove Programs and remove the following programs if present.

Viewpoint Manager (remove only)
Viewpoint Media Player
Viewpoint Toolbar

Next,

Open HijackThis.
When Hijack This opens, click "Open the Misc Tools section"
Then select "Delete a file on reboot..."
Then find and select this file: C:\windows\system32\blocker.dll
Select okay and select yes to reboot.

After reboot, we need to clean a few things up in Hijack This.

Open HijackThis again.
Choose "Do a system scan only"
Check the boxes in front of these lines:

O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O4 - HKCU\..\Run: [tempo-setup2.exe] C:\WINDOWS\system32\tempo-setup2.exe
O20 - AppInit_DLLs: blocker.dll
Press "Fix Checked"
Close Hijack This.

Let me know once you've done all that.

Re: winbluesoft got me as well, and hard3rd June 2009, 9:31 pm

ok, done

Re: winbluesoft got me as well, and hard3rd June 2009, 9:33 pm

Download combofix from here
Link 1
Link 2

1. If you are using Firefox, make sure that your download settings are as follows:

* Tools->Options->Main tab
* Set to "Always ask me where to Save the files".

2. During the download, rename Combofix to Combo-Fix as follows:

3. It is important you rename Combofix during the download, but not after.
4. Please do not rename Combofix to other names, but only to the one indicated.
5. Close any open browsers.
6. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
We need to disable your local AV (Anti-virus) before running Combofix.
See HERE for how to disable your AV. (Mcafee)
Double click on ComboFix.exe.
Follow the prompts. NOTE:
ComboFix will check to see if the Microsoft Windows Recovery Console is installed.
***It's strongly recommended to have the Recovery Console installed before doing any malware removal.***

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will automatically proceed with its scan.
The Recovery Console provides a recovery/repair mode should a problem occur during a Combofix run.
Allow ComboFix to download the Recovery Console.
Accept the End-User License Agreement.
The Recovery Console will be installed.
You will then get this next prompt that asks if you want to continue the malware scan, select yes
Allow combofix to run
Post C:\combofix.txt back here.

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall.

Re: winbluesoft got me as well, and hard3rd June 2009, 9:54 pm

ComboFix 09-06-03.01 - Max M 06/03/2009 17:39.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.515 [GMT -4:00]
Running from: c:\documents and settings\Max McLenna\Desktop\Combo-Fix.exe
AV: McAfee VirusScan Enterprise *On-access scanning disabled* (Updated) {918A2B0B-2C60-4016-A4AB-E868DEABF7F0}
.
ADS - system32: deleted 1795 bytes in 1 streams.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\10851sp5mboz6fe9.cpl
c:\windows\1099zsp5mbotab.exe
c:\windows\1187bazkdo9r2573.dll
c:\windows\11dzthrea915743.cpl
c:\windows\120thie92z55.ocx
c:\windows\12163v5rusze9.cpl
c:\windows\12315t9oj2z2.dll
c:\windows\1251trz965.cpl
c:\windows\13295no5-a9virzs787.ocx
c:\windows\137219r5z2e5.bin
c:\windows\13925not-a5v9zus29f.cpl
c:\windows\1407thiez9885.ocx
c:\windows\14205zpamb952e7.exe
c:\windows\15182zor917f.bin
c:\windows\15203n9tza-5irus513.exe
c:\windows\152z9ha5ktool5f0.dll
c:\windows\15595pz26d.bin
c:\windows\15839worz5e.bin
c:\windows\15920zot-a-v9r5s3ba.bin
c:\windows\15924v9rusz73.ocx
c:\windows\1595virzs6b39.exe
c:\windows\15ccsparze2499.exe
c:\windows\15z52worm259.exe
c:\windows\160z5worm3119.cpl
c:\windows\16269zyware26135.bin
c:\windows\16891zpambot598.ocx
c:\windows\169z7wor925.bin
c:\windows\17547vizus915.ocx
c:\windows\17sp9wa5e145z.dll
c:\windows\18330tr5j9aez.cpl
c:\windows\18651hackt9zl15.exe
c:\windows\18z639py515.cpl
c:\windows\19122noz-a9virus2c5.ocx
c:\windows\19263trz95b.cpl
c:\windows\1926t9izf5287.exe
c:\windows\1927h9cktool38z5.exe
c:\windows\19325viruz55c.cpl
c:\windows\19398spy4cz5.ocx
c:\windows\19464no5-a-viruz41a.bin
c:\windows\19470no9-a5virus4afz.dll
c:\windows\19611zot-a-v5rus343.cpl
c:\windows\1972zv59us7da.bin
c:\windows\19744worm25z9.dll
c:\windows\19895hackzo5l29d.ocx
c:\windows\19935ir27z6.bin
c:\windows\19z29not-a-v5rus6a8.dll
c:\windows\1acctzie52959.ocx
c:\windows\1ae5s9ywaze79.bin
c:\windows\1aze5par9e1895.ocx
c:\windows\1d2ed5wn9ozder3271.exe
c:\windows\1d5cadd5a9e567z.exe
c:\windows\1ddczparse5198.cpl
c:\windows\1edzspyw9re2578.exe
c:\windows\1z0e5ownlo9der243.cpl
c:\windows\1z15v9rus459.ocx
c:\windows\1z52d9wnloader924.ocx
c:\windows\1z5fback5o9r1675.exe
c:\windows\1z729s5ambot404.bin
c:\windows\1z7sp5ware669.ocx
c:\windows\1zc7s9eal2567.bin
c:\windows\20611wo9530z.dll
c:\windows\20970viruz459.dll
c:\windows\20z8vir25249.bin
c:\windows\2137zhie91725.bin
c:\windows\213z5hacktool98d5.dll
c:\windows\21596s9569ez.bin
c:\windows\22507spaz9ot10c.ocx
c:\windows\22z69troj158.dll
c:\windows\2309vir5s63z.bin
c:\windows\23153ha9kzool5c8.ocx
c:\windows\2338zh5cktool9cd.ocx
c:\windows\23425p94ze.dll
c:\windows\234zt9ie51382.exe
c:\windows\235c9zdwar5620.ocx
c:\windows\2381t95ef25z2.exe
c:\windows\23ddste9l5856z.ocx
c:\windows\241ddownlzad9r2305.bin
c:\windows\2436z5orm79a.bin
c:\windows\24787hazktool595.exe
c:\windows\247909ot-a-virzs54f.ocx
c:\windows\24945hzck5ool142.exe
c:\windows\24f5virz199.bin
c:\windows\2550zhief1039.exe
c:\windows\25bazackdoo91860.dll
c:\windows\25easpzrse19739.bin
c:\windows\25ft5izf2920.cpl
c:\windows\25z4downl9ader2855.cpl
c:\windows\25zcbackdoor9502.exe
c:\windows\26364trz569.bin
c:\windows\2648z9eal285.bin
c:\windows\26855wo9m2z5.dll
c:\windows\2695worm57z5.dll
c:\windows\26z0spars92585.ocx
c:\windows\27045sp95c2z.dll
c:\windows\27586s95zd.dll
c:\windows\27615not-a-vir5sz9.cpl
c:\windows\27895hacktoolz54.exe
c:\windows\27z47v5rus696.cpl
c:\windows\28396t5ojz13.dll
c:\windows\28579pamzo578.bin
c:\windows\287559iruszbe.bin
c:\windows\28z59not-5-virus509.dll
c:\windows\29175zacktool649.exe
c:\windows\2932znot-a-5irus5d9.bin
c:\windows\293z9virus9e5.exe
c:\windows\29459teal5720z.dll
c:\windows\296z69py5e0.ocx
c:\windows\29817n9z-a-viru5516.dll
c:\windows\2985iruz101.bin
c:\windows\29b8thzeat65779.cpl
c:\windows\29bcthie9z355.exe
c:\windows\29e3tzr9at25963.exe
c:\windows\29z5thief2844.cpl
c:\windows\2bf4sp9ware2550z.exe
c:\windows\2c0athizf5579.bin
c:\windows\2c6bsp9ware5z54.cpl
c:\windows\2c85ste9l15z0.dll
c:\windows\2de9thzef2598.bin
c:\windows\2e10downloazer27895.ocx
c:\windows\2e1es9yw5rez89.cpl
c:\windows\2ea9spyw5ze2184.exe
c:\windows\2f54stezl595.bin
c:\windows\2z0579py47f.dll
c:\windows\2z477ha9ktool45b.exe
c:\windows\2z4daddw9re1543.bin
c:\windows\2z95backdoor847.ocx
c:\windows\2z971spy358.dll
c:\windows\2za59parse1973.cpl
c:\windows\30427v95us74dz.ocx
c:\windows\30595wormzd8.cpl
c:\windows\309zv9r45.ocx
c:\windows\30dt9reat58z29.bin
c:\windows\30fbthreat1549z.ocx
c:\windows\31050zack59ol43e.exe
c:\windows\31452wor958z.bin
c:\windows\3149znot-a9vi5us27c.dll
c:\windows\31559sp921z.dll
c:\windows\31559sp97d5z.ocx
c:\windows\318399zr513a.ocx
c:\windows\318z1sp9mbo54bd.cpl
c:\windows\31a3addwarez759.cpl
c:\windows\31ezvir1495.cpl
c:\windows\32310haz9tool4c65.ocx
c:\windows\32539spazbot1e5.cpl
c:\windows\32598wzrm1e8.ocx
c:\windows\32669spamb9tz5d.bin
c:\windows\3266hackt95lz50.exe
c:\windows\32672spambo59zc.dll
c:\windows\3393azdw95e3133.dll
c:\windows\35122virus4z9.exe
c:\windows\36899ackdoor1z985.exe
c:\windows\376es5yware923z.ocx
c:\windows\38c8s5azse994.bin
c:\windows\393zdownloa9er21755.ocx
c:\windows\395baczdoor1649.bin
c:\windows\3970s5y533z.bin
c:\windows\39745orm8z.dll
c:\windows\3986addwaze1695.bin
c:\windows\39911vzrus54a.cpl
c:\windows\39z5spy5are2807.cpl
c:\windows\3d5cback9ooz24.exe
c:\windows\3de0th5ea911z36.bin
c:\windows\3e93bac5zoor786.exe
c:\windows\3f5dth9ez2988.dll
c:\windows\3f88thief915z.bin
c:\windows\3z32t9rea525895.dll
c:\windows\3z49t5reat88919.bin
c:\windows\3z77s5ea9675.bin
c:\windows\3z7athr5at114919.dll
c:\windows\3z9backdo5r66.bin
c:\windows\406e9zy5are3144.dll
c:\windows\4197doz5loader2139.bin
c:\windows\41z5spy1f9.dll
c:\windows\41z8hac5tool940.ocx
c:\windows\42c0backdoz93051.ocx
c:\windows\435dzdd95re2569.exe
c:\windows\439fdow5loadzr273.dll
c:\windows\4499backdoor22z5.exe
c:\windows\45509dzware3123.exe
c:\windows\4579sp59se2793z.ocx
c:\windows\4589thiz520269.exe
c:\windows\45ffspazs946.ocx
c:\windows\460fdownloa9ez30125.cpl
c:\windows\477zspar591101.bin
c:\windows\47ath59z3190.bin
c:\windows\4822t5zeat49289.bin
c:\windows\4903szarse5930.dll
c:\windows\4983thi9f2z355.cpl
c:\windows\499e5teal232z.ocx
c:\windows\49z5back9oor393.exe
c:\windows\4a5csp9zare2436.exe
c:\windows\4be9vir2z645.cpl
c:\windows\4c0ftz9e5t416.exe
c:\windows\4c90s5ywarz589.bin
c:\windows\4e05zh9ef2587.bin
c:\windows\4fa9azdware2752.exe
c:\windows\50006spz4b9.dll
c:\windows\50199worm4zf.bin
c:\windows\50564h9ckzool5b1.exe
c:\windows\5075back9zor919.bin
c:\windows\5125spazse2359.dll
c:\windows\5185th9ef3210z.bin
c:\windows\519zaddware599.dll
c:\windows\52871ha9ktoolz1b.exe
c:\windows\52zhreat17194.exe
c:\windows\5315d5wn9oader20z0.ocx
c:\windows\5328v9rz9785.bin
c:\windows\534zspar9e5537.ocx
c:\windows\5390stzal2543.bin
c:\windows\540379zrm82.ocx
c:\windows\54695spamboz689.cpl
c:\windows\54879orm1zd5.exe
c:\windows\54950spy737z.bin
c:\windows\54bzdownl9ader115.bin
c:\windows\54zdthreat46459.dll
c:\windows\55849pazbot5e4.ocx
c:\windows\55939orm6z6.dll
c:\windows\55d5zteal26929.ocx
c:\windows\562zhi9f1960.dll
c:\windows\56c4spaz9e1067.exe
c:\windows\57705hackt9oz748.cpl
c:\windows\5783spyw5ze30939.exe
c:\windows\579esza5se724.dll
c:\windows\5809viz978.ocx
c:\windows\582b9zyware2852.dll
c:\windows\5851bzc59oor694.bin
c:\windows\585aba9kdoor195z.ocx
c:\windows\58620wzrm98.dll
c:\windows\5865ztea93003.exe
c:\windows\5868not9a-virus22z.exe
c:\windows\58dfzh59at22823.bin
c:\windows\5901viz542.ocx
c:\windows\590dspyzare1546.ocx
c:\windows\5924zdd5are1587.bin
c:\windows\593spzrse1540.cpl
c:\windows\5950spambzt29f.exe
c:\windows\595fvi5262z.cpl
c:\windows\5969spazse709.cpl
c:\windows\59a2a9zware544.cpl
c:\windows\59c6vzr2517.ocx
c:\windows\59df9ownloade5227z.exe
c:\windows\59zesp5ware1358.ocx
c:\windows\5b49back5oorz8929.dll
c:\windows\5b58thre5z9165.exe
c:\windows\5d5fst9al2z52.exe
c:\windows\5d93downloader21z9.ocx
c:\windows\5e04spars5149z.ocx
c:\windows\5e55szy9a5e404.bin
c:\windows\5eccdow9loadzr880.dll
c:\windows\5z497troj49a.cpl
c:\windows\5z85spy9are281.cpl
c:\windows\5zcbvir509.ocx
c:\windows\6075r9j4az.cpl
c:\windows\60b5down9oader2z01.ocx
c:\windows\613zh5ck9ool3d9.ocx
c:\windows\61z9addw5re161.dll
c:\windows\6376z59-a-virus6e1.bin
c:\windows\653zaddware9912.ocx
c:\windows\65e5thie92530z.cpl
c:\windows\65f4thiez9519.ocx
c:\windows\69725hiefz911.bin
c:\windows\69zfvir5203.bin
c:\windows\6a11bac9dozr5437.bin
c:\windows\6afaspazse590.bin
c:\windows\6bc5steal2149z.ocx
c:\windows\6c1fazd5a9e904.exe
c:\windows\6z2fdownlo9der5906.cpl
c:\windows\6z58w9rmff.cpl
c:\windows\6zd6s5arse2291.dll
c:\windows\700aba5zd9or352.bin
c:\windows\702zspamb9t7c55.bin
c:\windows\710daddwarz1395.exe
c:\windows\71z7worm1975.bin
c:\windows\729cspzwa951906.cpl
c:\windows\72aa5zreat95420.bin
c:\windows\7322baczd5or9779.exe
c:\windows\73889orm15z.exe
c:\windows\744ftz9ef5994.ocx

Re: winbluesoft got me as well, and hard3rd June 2009, 9:55 pm

continued...

c:\windows\74adownload5r9z79.cpl
c:\windows\7539azdware1149.bin
c:\windows\7595trzj1a0.exe
c:\windows\75efs5ywar924z5.bin
c:\windows\75zb9teal1859.dll
c:\windows\76be5hzeat99213.bin
c:\windows\7751thz5f9200.cpl
c:\windows\777bs5zware28229.ocx
c:\windows\77965hre9t1599z.cpl
c:\windows\78529ackzoor92.cpl
c:\windows\796azpy5are2237.exe
c:\windows\79casteaz153.ocx
c:\windows\7b54szyware2950.cpl
c:\windows\7c42sp5rse4z9.bin
c:\windows\7cf09ackdo5z3092.dll
c:\windows\7d4faddzare2599.exe
c:\windows\7d6este9lz517.ocx
c:\windows\7dbcd59nlozder12.cpl
c:\windows\7f2b9pywarez9145.ocx
c:\windows\7z5fth9eat3255.dll
c:\windows\85zn9t-a-virus7f6.bin
c:\windows\86835ot-azvi9us428.ocx
c:\windows\86f5zckdoor849.exe
c:\windows\876t5iz92210.exe
c:\windows\8995worm5zd9.exe
c:\windows\8f99owzloade51879.exe
c:\windows\8z555r9j556.ocx
c:\windows\8z995orm729.cpl
c:\windows\90259ozm625.dll
c:\windows\90284viruz4d5.exe
c:\windows\903thief553z9.ocx
c:\windows\90ebzparse11465.ocx
c:\windows\925hazktool599.exe
c:\windows\925z3worm5ef.bin
c:\windows\932zownloa5er579.dll
c:\windows\9456spazbot395.ocx
c:\windows\9489downloa5ez266.exe
c:\windows\95056wormz30.cpl
c:\windows\951zthief2582.ocx
c:\windows\95289spyzbc.dll
c:\windows\95325ot9a-virzs160.bin
c:\windows\9535steal5z34.exe
c:\windows\957zvirus2935.bin
c:\windows\9590virz276.exe
c:\windows\959troj2z3.dll
c:\windows\96381virzs545.dll
c:\windows\9659steaz486.bin
c:\windows\98295virus41cz.exe
c:\windows\987z7viru57a1.bin
c:\windows\9934spzmbot64d5.ocx
c:\windows\99909hacktooz5fb.exe
c:\windows\99z9spar5e2157.exe
c:\windows\9dz5vir3224.bin
c:\windows\9z304not-a-vi5us739.dll
c:\windows\9z36spy756.bin
c:\windows\9z566h5cktoolb5.ocx
c:\windows\9z576wor59.exe
c:\windows\a855aczdoor1509.cpl
c:\windows\b0s95wzre1049.bin
c:\windows\e27spz5se1970.ocx
c:\windows\e39st5al1087z.ocx
c:\windows\system32\10020notz5-9irus722.ocx
c:\windows\system32\101z95py69e.bin
c:\windows\system32\1025z9irus3f2.exe
c:\windows\system32\107z9sp95bot351.bin
c:\windows\system32\10952zirus50f.dll
c:\windows\system32\114969pz3815.exe
c:\windows\system32\115619iru53f5z.cpl
c:\windows\system32\116065roz259.cpl
c:\windows\system32\1168za5ktool9be.ocx
c:\windows\system32\1207995y47z.ocx
c:\windows\system32\12369hz59tool7e0.dll
c:\windows\system32\12454not-a-vi9usz9f.cpl
c:\windows\system32\1250d9wnloaderz665.dll
c:\windows\system32\12551tro9z95.cpl
c:\windows\system32\125z7hack9ool580.dll
c:\windows\system32\126119ot-a-virzs4fa5.dll
c:\windows\system32\12659hacktool59z.ocx
c:\windows\system32\12814wo9m454z.bin
c:\windows\system32\13080vz9us5955.dll
c:\windows\system32\13549zpy55a9.dll
c:\windows\system32\13595zroj4f69.dll
c:\windows\system32\1389hac5zooleb.dll
c:\windows\system32\13950spz59f.bin
c:\windows\system32\13985spaz9ot51c.cpl
c:\windows\system32\1424thr9az30585.ocx
c:\windows\system32\1426vi52z89.bin
c:\windows\system32\1429zt5oj2e3.cpl
c:\windows\system32\14595virzs753.dll
c:\windows\system32\1460thzeat29850.dll
c:\windows\system32\14875trzj289.ocx
c:\windows\system32\14a4zow9loa5er223.cpl
c:\windows\system32\15136trzj596.bin
c:\windows\system32\154z9teal1358.cpl
c:\windows\system32\15607sp59dz.exe
c:\windows\system32\15718vi5zs599.ocx
c:\windows\system32\158999orm51z.bin
c:\windows\system32\15916v9rusz4.dll
c:\windows\system32\1591hacktool69z.exe
c:\windows\system32\159745azktoold79.exe
c:\windows\system32\159spambo549z.cpl
c:\windows\system32\15z09wor5953.ocx
c:\windows\system32\15z89t5oj39.ocx
c:\windows\system32\169195arse9z5.dll
c:\windows\system32\17179wo5m565z.exe
c:\windows\system32\17480zackto59195.dll
c:\windows\system32\1753zh9ckt5ol32b.dll
c:\windows\system32\179599py39z.bin
c:\windows\system32\179c5hzeat4966.dll
c:\windows\system32\18039hief54z.cpl
c:\windows\system32\184ds95al23z9.cpl
c:\windows\system32\19009roz5aa.ocx
c:\windows\system32\19058spy59z.exe
c:\windows\system32\19394troj5aez.cpl
c:\windows\system32\194025rzj298.dll
c:\windows\system32\19544sp5mbot59fz.ocx
c:\windows\system32\19552spz1e1.cpl
c:\windows\system32\19596spzmbot25c5.ocx
c:\windows\system32\1964thr5a9156z1.dll
c:\windows\system32\197a95reat19z47.dll
c:\windows\system32\19807not-z-v9rus6b5.exe
c:\windows\system32\19895parse9974z.bin
c:\windows\system32\19955spz2cb.exe
c:\windows\system32\19995ownloaderz92.cpl
c:\windows\system32\19acadd59ze2812.cpl
c:\windows\system32\1a49addw5re2126z.ocx
c:\windows\system32\1b21stezl5998.dll
c:\windows\system32\1b49dzwnl9a5er3106.exe
c:\windows\system32\1b49spywarz1615.exe
c:\windows\system32\1c10bzckdo5r25099.cpl
c:\windows\system32\1d5fspzw95e2780.cpl
c:\windows\system32\1d74bzckdoor1959.exe
c:\windows\system32\1d945ddware195z.ocx
c:\windows\system32\1dz9spyware9495.exe
c:\windows\system32\1z01spars95104.ocx
c:\windows\system32\1z517t5oj394.exe
c:\windows\system32\1z67vir2395.ocx
c:\windows\system32\2000viz595.bin
c:\windows\system32\202635pazb9t53a.dll
c:\windows\system32\20949spa5botz9.bin
c:\windows\system32\209ath5zat26709.exe
c:\windows\system32\209fspy5zre2925.bin
c:\windows\system32\2115spyzare9156.bin
c:\windows\system32\21480tr5970z.ocx
c:\windows\system32\219915ozm951.cpl
c:\windows\system32\22998ha5ktoolzae.exe
c:\windows\system32\22z58wo59634.cpl
c:\windows\system32\22z94spy554.dll
c:\windows\system32\23109hrzat59357.bin
c:\windows\system32\23423virzs159.cpl
c:\windows\system32\2387zspambot59.exe
c:\windows\system32\23902virz579d.cpl
c:\windows\system32\2399nzt-5-virus32f.bin
c:\windows\system32\23z1worm529.bin
c:\windows\system32\245419roz544.bin
c:\windows\system32\24553sp957z.cpl
c:\windows\system32\24756spazbo55db9.dll
c:\windows\system32\24c9sp5zse2469.bin
c:\windows\system32\2515zhief956.exe
c:\windows\system32\2553spambot53z9.cpl
c:\windows\system32\256a5o9nloazer2709.ocx
c:\windows\system32\25757not-a9virus3ez.exe
c:\windows\system32\25919tzo519b.cpl
c:\windows\system32\25945zack9ool2f0.dll
c:\windows\system32\265dz5ckd9or737.ocx
c:\windows\system32\267cba9kdoor5z5.exe
c:\windows\system32\2708zvir95551.dll
c:\windows\system32\27459zorm2cf.cpl
c:\windows\system32\27598trzj7f19.cpl
c:\windows\system32\280zdow9load5r1167.ocx
c:\windows\system32\28504troz6ec9.bin
c:\windows\system32\28e4threz911592.bin
c:\windows\system32\291fbaczdoor5232.cpl
c:\windows\system32\2943backd5o916z5.dll
c:\windows\system32\29452spy2z8.exe
c:\windows\system32\294z5troj1b59.dll
c:\windows\system32\29547vizus5b5.exe
c:\windows\system32\29593vizus250.cpl
c:\windows\system32\29627hazkto9536b.ocx
c:\windows\system32\2993hackt5oz169.bin
c:\windows\system32\2995zvirus594.ocx
c:\windows\system32\29c795zrse1396.dll
c:\windows\system32\2dec5teal13z59.cpl
c:\windows\system32\2e5thze9877.cpl
c:\windows\system32\2f57downlozder11829.bin
c:\windows\system32\2f57t9ief1z80.cpl
c:\windows\system32\2f5spy9are1z165.cpl
c:\windows\system32\2fzfs9ywa5e676.cpl
c:\windows\system32\2z279v5rus200.exe
c:\windows\system32\2z34495rus53c.ocx
c:\windows\system32\2z380spambot59d.exe
c:\windows\system32\2z42thr9a532462.exe
c:\windows\system32\2z595troj4c4.exe
c:\windows\system32\2z852virus95b.cpl
c:\windows\system32\2z940vir5s25c.dll
c:\windows\system32\2z954troj5b45.cpl
c:\windows\system32\2z965roj839.exe
c:\windows\system32\2z990hacktool555.dll
c:\windows\system32\30241spam5o97fez.cpl
c:\windows\system32\302aad5zare1519.cpl
c:\windows\system32\304etzie92757.exe
c:\windows\system32\305bsp9waze1459.bin
c:\windows\system32\30788no5-a-vizus9d5.dll
c:\windows\system32\3096zpy558.bin
c:\windows\system32\3103s5yz59.exe
c:\windows\system32\319z7viru53079.cpl
c:\windows\system32\31z7t5oj963.exe
c:\windows\system32\32298s5ambot1cz.bin
c:\windows\system32\32539w9zm9b.bin
c:\windows\system32\32685not-a-vir9s4dcz.dll
c:\windows\system32\32z829ir5s212.dll
c:\windows\system32\3493thrzat225559.dll
c:\windows\system32\3513stea93z2.exe
c:\windows\system32\35327noz-a-vi9us5c0.ocx
c:\windows\system32\3585zackdoor799.exe
c:\windows\system32\35azth5e92358.dll
c:\windows\system32\35e0addzare2479.cpl
c:\windows\system32\35z9v5r2918.ocx
c:\windows\system32\36b3t5rezt9928.ocx
c:\windows\system32\3759stezl340.ocx
c:\windows\system32\37c9down5oade924z0.ocx
c:\windows\system32\38b25pywzre1396.dll
c:\windows\system32\3985wzrm30c5.cpl
c:\windows\system32\39958not-a-virus5bz.exe
c:\windows\system32\39fcdownz5ader2393.bin
c:\windows\system32\39z5not-a-virus4a.dll
c:\windows\system32\3a6daddwzre9395.dll
c:\windows\system32\3abcspywz9e2521.cpl
c:\windows\system32\3ae9tzal1054.cpl
c:\windows\system32\3b33v5z494.exe
c:\windows\system32\3b475tz9l1969.dll
c:\windows\system32\3c36thrzat315729.bin
c:\windows\system32\3cd5s5ar9z2466.dll
c:\windows\system32\3f2czp95are2288.exe
c:\windows\system32\3z549vi9us7925.dll
c:\windows\system32\42deaddw5re219z.ocx
c:\windows\system32\43839p541z.dll
c:\windows\system32\44665parsz1968.ocx
c:\windows\system32\446fstzal9995.cpl
c:\windows\system32\4516spzrse9055.dll
c:\windows\system32\459esp5rse1z68.exe
c:\windows\system32\490aspazse15679.cpl
c:\windows\system32\490dz5r2646.ocx
c:\windows\system32\49345teaz888.bin
c:\windows\system32\49755py4cz.exe
c:\windows\system32\49b5ste9l292z.exe
c:\windows\system32\4a34spyware16z59.exe
c:\windows\system32\4a35backd9orz695.cpl
c:\windows\system32\4a79z9dware1665.cpl
c:\windows\system32\4ce9stea5z61.dll
c:\windows\system32\4z5baddw9re2508.exe
c:\windows\system32\4z82do5nloa9er1277.dll
c:\windows\system32\4zc3spyw9r51031.dll
c:\windows\system32\4zesp5rse291.cpl
c:\windows\system32\5004wor5zb9.bin
c:\windows\system32\50498notza-virus2999.bin
c:\windows\system32\506cth9ef517z.cpl
c:\windows\system32\50914w9rm5z.bin
c:\windows\system32\5093azdware1119.cpl
c:\windows\system32\5125vz9928.ocx
c:\windows\system32\5193zs9y24b.ocx
c:\windows\system32\51989hacktooz1d1.exe
c:\windows\system32\519fspa5sz490.cpl
c:\windows\system32\520149zrus179.cpl
c:\windows\system32\525zspyware14509.exe
c:\windows\system32\52z69vir9s4c.dll
c:\windows\system32\52zbthreat19025.dll
c:\windows\system32\5320not9a-vizus735.dll
c:\windows\system32\53589zd5are1009.ocx
c:\windows\system32\539cdownloa95rz108.dll
c:\windows\system32\546eviz895.exe
c:\windows\system32\546faddware2z495.exe
c:\windows\system32\54741ziru92fb.exe
c:\windows\system32\549z0worm5f9.ocx
c:\windows\system32\54a1baz9door2300.exe
c:\windows\system32\54d9addw9rz795.bin
c:\windows\system32\551cviz759.cpl
c:\windows\system32\5524ste9lz334.dll
c:\windows\system32\5533a9dwzre75.dll
c:\windows\system32\554dzownloader912.bin
c:\windows\system32\5594vi9z951.cpl
c:\windows\system32\55z3spy459.cpl
c:\windows\system32\55zfst9a52273.bin
c:\windows\system32\55zfvir1193.bin
c:\windows\system32\562faddwarz1991.dll
c:\windows\system32\567fthie91z28.bin
c:\windows\system32\56988worz6d3.dll
c:\windows\system32\5698zteal29989.cpl
c:\windows\system32\579z9virus33b.cpl
c:\windows\system32\58498zirus6dc.bin
c:\windows\system32\5863tzief92895.dll
c:\windows\system32\58b9backdzor1987.exe
c:\windows\system32\58e3steal56z29.dll
c:\windows\system32\58ffd5wn9oadez1116.dll

Re: winbluesoft got me as well, and hard3rd June 2009, 9:56 pm

continued...

c:\windows\system32\5911zspy9f.exe
c:\windows\system32\5935viruz599.dll
c:\windows\system32\5960downlo59er1322z.exe
c:\windows\system32\596cdo9nloaderz022.dll
c:\windows\system32\5974spywz5e1485.dll
c:\windows\system32\5997threat12z67.cpl
c:\windows\system32\59a1dzwnl5ader25969.exe
c:\windows\system32\59cethreat29287z.exe
c:\windows\system32\5a96z5r739.bin
c:\windows\system32\5b94ad5warz15.dll
c:\windows\system32\5b96spzw9re1665.cpl
c:\windows\system32\5cf5baczdoor2259.bin
c:\windows\system32\5cfbbaczdoor30399.bin
c:\windows\system32\5cff5zars92380.ocx
c:\windows\system32\5d81threa527899z.exe
c:\windows\system32\5d85threat199z8.dll
c:\windows\system32\5e52s9yware2978z.cpl
c:\windows\system32\5f1aspyware189z.dll
c:\windows\system32\5f5e9ackdoorz598.bin
c:\windows\system32\5fbdv9z51.cpl
c:\windows\system32\5fc6viz53519.cpl
c:\windows\system32\5z269ack5ool4b9.exe
c:\windows\system32\5z59not-a-v9rus20e.dll
c:\windows\system32\60zas9eal24115.exe
c:\windows\system32\6115h9ckzool4d2.dll
c:\windows\system32\6188tzr9at207695.cpl
c:\windows\system32\6205stz9l2535.dll
c:\windows\system32\645spy9arz497.cpl
c:\windows\system32\65fbdownload9556z.bin
c:\windows\system32\66719teal102z5.ocx
c:\windows\system32\6681s5amboz7b9.cpl
c:\windows\system32\6714vi9zs53.exe
c:\windows\system32\67fcdzwnl9ader28845.bin
c:\windows\system32\68aeaddwaze2956.cpl
c:\windows\system32\6913tr9j2z5.bin
c:\windows\system32\69c55i91243z.bin
c:\windows\system32\6b53baczdoo9896.ocx
c:\windows\system32\6e00do9zloader335.cpl
c:\windows\system32\6e54backd9or1372z.bin
c:\windows\system32\6e8zthie51895.exe
c:\windows\system32\6f41bac5zo9r2816.bin
c:\windows\system32\7055troj9ez.cpl
c:\windows\system32\70e5zackdoo9520.ocx
c:\windows\system32\7195zo9nloader2493.bin
c:\windows\system32\7229hacktozl495.dll
c:\windows\system32\7245szeal19955.bin
c:\windows\system32\729zspy5e95.cpl
c:\windows\system32\7489addwzre17935.cpl
c:\windows\system32\74a9sparse15z9.cpl
c:\windows\system32\7501tzief975.bin
c:\windows\system32\755n9t-a-zirus4ac.cpl
c:\windows\system32\75zspars9828.bin
c:\windows\system32\7690s5yzdc.bin
c:\windows\system32\77z5ir2639.dll
c:\windows\system32\7859vir1z88.bin
c:\windows\system32\78859pyz0.cpl
c:\windows\system32\78z85t9al983.bin
c:\windows\system32\7954viz3025.dll
c:\windows\system32\79c5th5zf2012.exe
c:\windows\system32\7a1cd9wn5ozder1658.bin
c:\windows\system32\7b6zbac9do5r586.ocx
c:\windows\system32\7dz9backdo59927.bin
c:\windows\system32\7fa2s5zrse799.ocx
c:\windows\system32\7z54tro55f19.dll
c:\windows\system32\813zw95mcc.ocx
c:\windows\system32\8224s59mbot363z.ocx
c:\windows\system32\8392s5az9ot69.bin
c:\windows\system32\843zhackto5l69b.bin
c:\windows\system32\845thi5923z9.ocx
c:\windows\system32\8502spambzt169.cpl
c:\windows\system32\8519worm23z.dll
c:\windows\system32\8554t9o555z.dll
c:\windows\system32\86bsp9waze2559.ocx
c:\windows\system32\8762spa59oz48e.exe
c:\windows\system32\8896vizus5cb.cpl
c:\windows\system32\9056wzrm2195.dll
c:\windows\system32\9068viruz5d5.exe
c:\windows\system32\906985pamboz482.exe
c:\windows\system32\90789spambotz50.ocx
c:\windows\system32\908spy9a5e1431z.exe
c:\windows\system32\9155w5rz1a39.cpl
c:\windows\system32\915ddownlozder2791.cpl
c:\windows\system32\922a5ddware18z5.ocx
c:\windows\system32\927zbackdoor1375.exe
c:\windows\system32\93592worm2z8.exe
c:\windows\system32\937szam5ot35f.cpl
c:\windows\system32\94zcv5r500.bin
c:\windows\system32\9535zp51.exe
c:\windows\system32\95420spambot32z.ocx
c:\windows\system32\9554s596z.cpl
c:\windows\system32\95z65viruse2.bin
c:\windows\system32\965s5y27z.bin
c:\windows\system32\974add5aze2819.bin
c:\windows\system32\988z5worm7d9.cpl
c:\windows\system32\98d5z9ef350.dll
c:\windows\system32\993z4v5rus6e3.dll
c:\windows\system32\997sza59e1412.ocx
c:\windows\system32\9994not-59vzrus471.exe
c:\windows\system32\9d61sparze652.exe
c:\windows\system32\9e38szars52975.ocx
c:\windows\system32\9zb7thi5f971.exe
c:\windows\system32\9zethief5277.exe
c:\windows\system32\c0ft5iefz971.ocx
c:\windows\system32\db5spz9are25025.exe
c:\windows\system32\dc5thz9at6461.ocx
c:\windows\system32\drivers\Msft_Kernel_WinUSB_01007.Wdf
c:\windows\system32\drivers\Msft_Kernel_zumbus_01007.Wdf
c:\windows\system32\drivers\Msft_User_ZuneDriver_01_07_00.Wdf
c:\windows\system32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf
c:\windows\system32\drivers\MsftWdf_user_01_07_00.Wdf
c:\windows\system32\ec3a9dwzr580.cpl
c:\windows\system32\fathi9f7z15.dll
c:\windows\system32\Memman.vxd
c:\windows\system32\skinboxer43.dll
c:\windows\system32\z0594troj459.cpl
c:\windows\system32\z2cd5teal1964.bin
c:\windows\system32\z328addwa5e59.exe
c:\windows\system32\z3829virus795.ocx
c:\windows\system32\z3fcthreat28589.bin
c:\windows\system32\z5617spy393.cpl
c:\windows\system32\z59cvir1009.cpl
c:\windows\system32\z5b159yware1371.ocx
c:\windows\system32\z7194viru5336.cpl
c:\windows\system32\z7963tr5j229.exe
c:\windows\system32\z79ha9ktool7115.dll
c:\windows\system32\z7f2s5ars92832.cpl
c:\windows\system32\z8055wo9m2bd.ocx
c:\windows\system32\z8471spy5539.ocx
c:\windows\system32\z905worm74b.ocx
c:\windows\system32\z9073s5976a.dll
c:\windows\system32\z935no9-a-vir5s11d.exe
c:\windows\system32\z9551hackt9ol656.cpl
c:\windows\system32\z95esteal2452.dll
c:\windows\system32\zb94sparse589.bin
c:\windows\z0195tro553e.bin
c:\windows\z2425not-a-vi9usb3.bin
c:\windows\z2954not-a-virus5d5.dll
c:\windows\z3977wor539b.dll
c:\windows\z439spar5e1538.bin
c:\windows\z525spy5a39.exe
c:\windows\z52abackd9or715.cpl
c:\windows\z5426spyf9.cpl
c:\windows\z5541virus9a5.cpl
c:\windows\z579thr9at14466.dll
c:\windows\z589vir1990.dll
c:\windows\z599sparse5099.cpl
c:\windows\z5dds5a9se145.exe
c:\windows\z6406virus2559.cpl
c:\windows\z6979t9oj65c5.exe
c:\windows\z749v95us12c.dll
c:\windows\z79threa513261.dll
c:\windows\z920thief1452.exe
c:\windows\z9407wor523e.bin
c:\windows\z999worm255.cpl
c:\windows\z9dfspy5are3196.exe
c:\windows\zafcspars52309.exe
c:\windows\zc0a95r448.bin
c:\windows\zc31thief22995.bin
c:\windows\zc66addware29659.ocx
c:\windows\zc9vi5578.dll
c:\windows\zd39ba5k9oor271.cpl
c:\windows\zf02backdoor859.dll

Re: winbluesoft got me as well, and hard3rd June 2009, 9:56 pm

continued...

((((((((((((((((((((((((( Files Created from 2009-05-03 to 2009-06-03 )))))))))))))))))))))))))))))))
.

2009-06-03 21:23 . 2009-06-03 21:24 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
2009-06-03 20:47 . 2009-06-03 20:47 -------- d-----w- c:\program files\Trend Micro
2009-06-03 20:42 . 2009-05-26 17:20 40160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-06-03 20:42 . 2009-06-03 20:42 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-06-03 20:42 . 2009-06-03 20:42 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-06-03 20:42 . 2009-05-26 17:19 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-06-03 20:22 . 2008-07-28 15:29 160792 ----a-w- c:\windows\system32\drivers\pctfw2.sys
2009-06-03 20:22 . 2009-06-03 20:22 -------- d-----w- c:\program files\Common Files\PC Tools
2009-06-03 20:22 . 2008-06-02 19:19 29576 ----a-w- c:\windows\system32\drivers\kcom.sys
2009-06-03 20:22 . 2008-06-11 01:22 81288 ----a-w- c:\windows\system32\drivers\iksyssec.sys
2009-06-03 20:22 . 2008-06-02 19:19 66952 ----a-w- c:\windows\system32\drivers\iksysflt.sys
2009-06-03 20:22 . 2008-06-02 19:19 42376 ----a-w- c:\windows\system32\drivers\ikfilesec.sys
2009-06-03 20:22 . 2009-06-03 20:29 -------- d-----w- c:\program files\Spyware Doctor
2009-06-03 20:22 . 2009-06-03 20:22 -------- d-----w- c:\documents and settings\Max McLenna\Application Data\PC Tools
2009-06-03 20:22 . 2009-06-03 20:22 -------- d-----w- c:\documents and settings\All Users\Application Data\PC Tools
2009-06-03 03:21 . 2009-06-03 03:21 -------- d-----w- c:\documents and settings\Administrator\Application Data\GlarySoft
2009-06-03 03:00 . 2009-06-03 03:00 361472 ----a-w- c:\windows\system32\tempo-setup2.exe
2009-06-02 23:10 . 2009-06-02 23:12 -------- d-----w- c:\program files\QuickTime
2009-05-22 23:13 . 2009-05-22 23:13 -------- d-----w- c:\program files\Microsoft Silverlight
2009-05-18 02:49 . 2009-05-18 02:49 -------- d-----w- c:\program files\iPod
2009-05-18 02:49 . 2009-05-18 02:49 -------- d-----w- c:\program files\iTunes
2009-05-18 02:49 . 2009-05-18 02:49 -------- d-----w- c:\documents and settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
2009-05-18 02:42 . 2009-05-18 02:42 75048 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 8.1.1.10\SetupAdmin.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-03 21:17 . 2006-11-08 20:01 -------- d-----w- c:\program files\Viewpoint
2009-06-03 21:17 . 2006-11-08 20:01 -------- d-----w- c:\documents and settings\All Users\Application Data\Viewpoint
2009-06-03 19:56 . 2006-11-08 16:16 -------- d-----w- c:\program files\RGB
2009-06-03 02:50 . 2008-11-26 05:19 -------- d-----w- c:\documents and settings\Max McLenna\Application Data\uTorrent
2009-05-24 20:28 . 2007-01-27 07:03 -------- d-----w- c:\program files\Lx_cats
2009-05-19 14:56 . 2007-01-17 19:58 -------- d-----w- c:\documents and settings\Max McLenna\Application Data\U3
2009-05-18 02:49 . 2007-06-29 23:22 -------- d-----w- c:\program files\Common Files\Apple
2009-05-01 05:03 . 2009-05-01 05:03 -------- d-----w- c:\program files\Avago-HP
2009-05-01 05:03 . 2009-05-01 05:03 -------- d-----w- c:\program files\Hewlett-Packard
2009-04-24 21:27 . 2009-04-24 21:17 -------- d-----w- c:\documents and settings\Max McLenna\Application Data\GlarySoft
2009-04-24 21:19 . 2009-04-24 21:19 -------- d-----w- c:\program files\GKrellM
2009-04-24 21:12 . 2009-04-24 21:12 -------- d-----w- c:\program files\Glary Utilities
2009-04-23 16:42 . 2009-04-23 16:42 390664 ----a-w- c:\documents and settings\Max McLenna\Application Data\Real\RealPlayer\Update\RealPlayer11.exe
2009-04-23 04:59 . 2009-04-23 04:59 64160 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\update\Drivers\32\lbd.sys
2009-04-23 04:59 . 2009-04-09 04:58 64160 ----a-w- c:\windows\system32\drivers\Lbd.sys
2009-04-22 04:58 . 2007-12-28 13:52 -------- d-----w- c:\documents and settings\Max McLenna\Application Data\dvdcss
2009-04-16 01:50 . 2006-11-08 19:24 -------- d-----w- c:\program files\EphPod
2009-04-09 04:54 . 2009-04-09 04:54 -------- dc-h--w- c:\documents and settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}
2009-04-09 04:54 . 2009-04-09 04:54 -------- d-----w- c:\program files\Lavasoft
2009-04-07 18:32 . 2006-11-08 19:00 -------- d-----w- c:\program files\Java
2009-04-07 18:30 . 2009-04-07 18:30 152576 ----a-w- c:\documents and settings\Max McLenna\Application Data\Sun\Java\jre1.6.0_13\lzma.dll
2009-03-19 20:32 . 2009-03-19 20:32 23400 ----a-w- c:\documents and settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}\x86\x86\GEARAspiWDM.sys
2009-03-19 20:32 . 2008-01-29 16:01 23400 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2009-03-12 08:17 . 2009-04-09 04:54 2902048 -c--a-w- c:\documents and settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}\Ad-AwareAE.exe
2009-03-12 01:45 . 2009-03-12 01:45 348160 ----a-w- c:\documents and settings\Max McLenna\Application Data\Sun\Java\Deployment\cache\6.0\38\39ba6e6-389041ec-n\msvcr71.dll
2009-03-12 01:45 . 2009-03-12 01:45 503808 ----a-w- c:\documents and settings\Max McLenna\Application Data\Sun\Java\Deployment\cache\6.0\38\39ba6e6-389041ec-n\msvcp71.dll
2009-03-12 01:45 . 2009-03-12 01:45 499712 ----a-w- c:\documents and settings\Max McLenna\Application Data\Sun\Java\Deployment\cache\6.0\38\39ba6e6-389041ec-n\jmc.dll
2009-03-12 01:42 . 2009-03-12 01:42 152576 ----a-w- c:\documents and settings\Max McLenna\Application Data\Sun\Java\jre1.6.0_12\lzma.dll
2009-03-09 09:19 . 2008-12-05 07:15 410984 ----a-w- c:\windows\system32\deploytk.dll
2009-03-06 14:22 . 2004-08-10 11:00 284160 ----a-w- c:\windows\system32\pdh.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.

Re: winbluesoft got me as well, and hard3rd June 2009, 9:56 pm

last one...

*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]
"VisualTaskTips"="c:\program files\VisualTaskTips\VisualTaskTips.exe" [2006-07-31 36864]
"H/PC Connection Agent"="c:\program files\Microsoft ActiveSync\Wcescomm.exe" [2006-11-13 1289000]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2007-12-14 1688872]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"Aim6"="c:\program files\AIM6\aim6.exe" [2008-08-06 50472]
"ATnotes.exe"="c:\program files\ATnotes\ATnotes.exe" [2005-01-05 1015808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-05 64512]
"IntelZeroConfig"="c:\program files\Intel\Wireless\bin\ZCfgSvc.exe" [2005-12-28 667718]
"IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2005-12-28 602182]
"Dell QuickSet"="c:\program files\Dell\QuickSet\quickset.exe" [2006-06-29 1032192]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2005-12-13 98304]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-12-13 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2005-12-13 118784]
"dlccmon.exe"="c:\program files\Dell Photo AIO Printer 924\dlccmon.exe" [2005-10-21 430080]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-03-08 761947]
"EzPrint"="c:\program files\Lexmark 5400 Series\ezprint.exe" [2006-06-07 98304]
"NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2007-12-03 2213160]
"NeroFilterCheck"="c:\program files\Common Files\Nero\Lib\NeroCheck.exe" [2007-03-01 153136]
"LogitechCommunicationsManager"="c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" [2007-10-25 563984]
"LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam\Quickcam.exe" [2007-10-25 2178832]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-11-07 111936]
"ShStatEXE"="c:\program files\McAfee\VirusScan Enterprise\SHSTAT.EXE" [2006-11-30 112216]
"McAfeeUpdaterUI"="c:\program files\McAfee\Common Framework\UdaterUI.exe" [2006-11-17 136768]
"CloneDVDElbyDelay"="c:\program files\Elaborate Bytes\CloneDVD\ElbyCheck.exe" [2002-11-02 45056]
"ElbyCheckAnyDVD"="c:\program files\SlySoft\AnyDVD\ElbyCheck.exe" [2003-09-20 45056]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888]
"Ad-Watch"="c:\program files\Lavasoft\Ad-Aware\AAWTray.exe" [2009-06-01 518488]
"LXCTCATS"="c:\windows\System32\spool\DRIVERS\W32X86\3\LXCTtime.dll" [2006-06-07 106496]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-04-02 342312]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-05-26 413696]
"ISTray"="c:\program files\Spyware Doctor\pctsTray.exe" [2008-07-16 1166216]
"SigmatelSysTrayApp"="stsystra.exe" - c:\windows\stsystra.exe [2006-03-24 282624]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Clean Access Agent.lnk - c:\program files\Cisco Systems\Clean Access Agent\CCAAgentLauncher.exe [2007-12-7 28672]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"NoDispBackgroundPage"= 1 (0x1)

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /p \??\e:\0autocheck autochk *\0lsdelete

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" -osboot
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\AIM\\aim.exe"=
"c:\\WINDOWS\\system32\\dlcccoms.exe"=
"c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\dlccPSWX.EXE"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\WINDOWS\\system32\\lxctcoms.exe"=
"c:\program files\Microsoft ActiveSync\rapimgr.exe"= c:\program files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"c:\program files\Microsoft ActiveSync\wcescomm.exe"= c:\program files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"c:\program files\Microsoft ActiveSync\WCESMgr.exe"= c:\program files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
"c:\\Program Files\\AIM6\\aim6.exe"=
"c:\\Program Files\\McAfee\\Common Framework\\FrameworkService.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"135:TCP"= 135:TCP:TCP Port 135
"5000:TCP"= 5000:TCP:TCP Port 5000
"5001:TCP"= 5001:TCP:TCP Port 5001
"5002:TCP"= 5002:TCP:TCP Port 5002
"5003:TCP"= 5003:TCP:TCP Port 5003
"5004:TCP"= 5004:TCP:TCP Port 5004
"5005:TCP"= 5005:TCP:TCP Port 5005
"5006:TCP"= 5006:TCP:TCP Port 5006
"5007:TCP"= 5007:TCP:TCP Port 5007
"5008:TCP"= 5008:TCP:TCP Port 5008
"5009:TCP"= 5009:TCP:TCP Port 5009
"5010:TCP"= 5010:TCP:TCP Port 5010
"5011:TCP"= 5011:TCP:TCP Port 5011
"5012:TCP"= 5012:TCP:TCP Port 5012
"5013:TCP"= 5013:TCP:TCP Port 5013
"5014:TCP"= 5014:TCP:TCP Port 5014
"5015:TCP"= 5015:TCP:TCP Port 5015
"5016:TCP"= 5016:TCP:TCP Port 5016
"5017:TCP"= 5017:TCP:TCP Port 5017
"5018:TCP"= 5018:TCP:TCP Port 5018
"5019:TCP"= 5019:TCP:TCP Port 5019
"5020:TCP"= 5020:TCP:TCP Port 5020
"8826:TCP"= 8826:TCP:BitComet 8826 TCP
"8826:UDP"= 8826:UDP:BitComet 8826 UDP
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [4/9/2009 12:58 AM 64160]
R1 pctfw2;pctfw2;c:\windows\system32\drivers\pctfw2.sys [6/3/2009 4:22 PM 160792]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [3/9/2009 3:06 PM 1005904]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{29FCEE19-7D85-1F31-71F8-D7CC9111458D}]
c:\windows\system32:svchost.exe
.
Contents of the 'Scheduled Tasks' folder

2009-06-01 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-03-09 04:58]

2009-06-01 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 16:34]

2009-06-03 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2009-04-24 13:49]
.
- - - - ORPHANS REMOVED - - - -

SafeBoot-procexp90.Sys

.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.wcsu.edu/
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\Max McLenna\Application Data\Mozilla\Firefox\Profiles\qx8y1vbr.default\
FF - prefs.js: browser.startup.homepage - hxxps://my.screenname.aol.com/_cqr/login/login.psp?sitedomain=sns.webmail.aol.com&lang=en&locale=us&authLev=2&siteState=ver%3a3%7cac%3aWS%7cat%3aSNS%7cld%3awebmail.aol.com%7cuv%3aAOL%7clc%3aen-us%7cmt%3aAOL%7csnt%3aScreenName&seamless=novl
FF - plugin: c:\documents and settings\Max McLenna\Application Data\Mozilla\Firefox\Profiles\qx8y1vbr.default\extensions\moveplayer@movenetworks.com\platform\WINNT_x86-msvc\plugins\npmnqmp071101000055.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npmozax.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-03 17:43
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
LXCTCATS = rundll32 c:\windows\System32\spool\DRIVERS\W32X86\3\LXCTtime.dll,_RunDLLEntry@16???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2009-06-03 17:45
ComboFix-quarantined-files.txt 2009-06-03 21:45

Pre-Run: 39,147,454,464 bytes free
Post-Run: 39,399,051,264 bytes free

WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Windows XP Media Center Edition" /noexecute=optin /fastdetect

965 --- E O F --- 2009-05-23 14:23

Re: winbluesoft got me as well, and hard3rd June 2009, 10:11 pm

Now open a new notepad file.
Input this into the notepad file:

KILLALL::

File::
c:\windows\system32\tempo-setup2.exe

Folder::
c:\program files\Viewpoint
c:\documents and settings\All Users\Application Data\Viewpoint
c:\documents and settings\Max McLenna\Application Data\uTorrent
c:\Program Files\uTorrent

Registry::
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"NoDispBackgroundPage"=-
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\uTorrent\\uTorrent.exe"=-
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"135:TCP"=-
"5000:TCP"=-
"5001:TCP"=-
"5002:TCP"=-
"5003:TCP"=-
"5004:TCP"=-
"5005:TCP"=-
"5006:TCP"=-
"5007:TCP"=-
"5008:TCP"=-
"5009:TCP"=-
"5010:TCP"=-
"5011:TCP"=-
"5012:TCP"=-
"5013:TCP"=-
"5014:TCP"=-
"5015:TCP"=-
"5016:TCP"=-
"5017:TCP"=-
"5018:TCP"=-
"5019:TCP"=-
"5020:TCP"=-
"8826:TCP"=-
"8826:UDP"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{29FCEE19-7D85-1F31-71F8-D7CC9111458D}]

Save this as CFScript.txt, save it to your desktop also.
Then drag and drop CFScript.txt into combofix as seen below:
winbluesoft got me as well, and hard Sfxdaw

winbluesoft got me as well, and hard Sfxdaw

This will open combofix again, agree to it's terms and allow it to run.
It may want to reboot after it's done. (It will warn you if it wants to)
Post the resulting log back here.

Re: winbluesoft got me as well, and hard3rd June 2009, 11:10 pm

ComboFix 09-06-03.01 - Max McLenna 06/03/2009 18:50.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.349 [GMT -4:00]
Running from: c:\documents and settings\Max McLenna\Desktop\Combo-Fix.exe
Command switches used :: c:\documents and settings\Max McLenna\Desktop\CFScript.txt
AV: McAfee VirusScan Enterprise *On-access scanning disabled* (Updated) {918A2B0B-2C60-4016-A4AB-E868DEABF7F0}

FILE ::
"c:\windows\system32\tempo-setup2.exe"
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\All Users\Application Data\Viewpoint
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\ComparativeSearch.xml
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\masteralerts.xml
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\Services_Registry2.xml
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\DynamicSearchTypes.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\featureCommon.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\featureManager.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\global.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\moreManager.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\navigationEvents.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\notificationManager.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\onCloseManager.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\options\images\inner_bl.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\options\images\inner_bot.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\options\images\inner_br.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\options\images\inner_tl.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\options\images\inner_top.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\options\images\inner_tr.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\options\images\s.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\options\index.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\options\offline.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\options\offline.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\options\options.css
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\options\options.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\options\options.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\options\optionsManager.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\options\optionsWindow.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\pingManager.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\selectorManager.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\selectorManager_util.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\tellafriend\offline\images\close.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\tellafriend\offline\images\frame_bottom.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\tellafriend\offline\images\frame_gradient.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\tellafriend\offline\images\frame_left.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\tellafriend\offline\images\frame_right.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\tellafriend\offline\images\frame_top.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\tellafriend\offline\images\header_back.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\tellafriend\offline\images\icon.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\tellafriend\offline\images\left_gradient.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\tellafriend\offline\images\logo.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\tellafriend\offline\images\offlinemsg.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\tellafriend\offline\images\s.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\tellafriend\offline\index.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\tellafriend\tellafriend.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\tellafriend\tellafriend.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\tellafriend\tellafriendWindow.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\buttons\button_glossy.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\buttons\button_glossy_description.txt
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\buttons\button_glossy_dropdown.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\buttons\button_glossy_dropdown.swf

Re: winbluesoft got me as well, and hard3rd June 2009, 11:11 pm

continued...

c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\dialogs\background.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\dialogs\background_framed.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\dialogs\buttonContainer.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\dialogs\buttonContainer.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\dialogs\contents.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\dialogs\dialog.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\dialogs\dialogs.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\dialogs\dlgIcons.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\dialogs\dlgIconsLarge.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\dialogs\field.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\dialogs\info.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\dialogs\info.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\dialogs\message.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\dialogs\message2.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\dialogs\message3.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\dialogs\progress.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\dialogs\progress.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\dialogs\progress.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\dialogs\slideShowDialog.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\dialogs\titlebar.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\dropdowns\dropdown.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\dropdowns\dropdown.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\dropdowns\dropdowns.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\htmldialog\htmldialog.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\htmldialog\htmldialog.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\list\list.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\listMenu\listMenu.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\listMenu\listMenu.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\listMenu\listMenu.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\notification\notification.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\notification\notification.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\options_menu_button\graphics\viewpoint_logo.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\options_menu_button\options_btn.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\preview\preview.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\preview\preview.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\preview\preview.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\scrollbar\scrollbar.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\scrollbar\scrollbar.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\searchWidget\DefaultSearchOptions.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\searchWidget\search_buttons.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\searchWidget\searchHistory.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\searchWidget\searchhistory.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\searchWidget\searchWidget.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\searchWidget\searchWidget.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\searchWidget\searchWidgetDefinition.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\selectors\selectors.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\selectors\selectors.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\shared_graphics\background.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\shared_graphics\highlight_bottom.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\shared_graphics\highlight_top.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\shared_graphics\popup_cursor.cur
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\shared_graphics\popupmoi.wav
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\shared_graphics\redeye_cursor.cur
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\shared_graphics\size_diagonal1_cursor.cur
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\shared_graphics\size_diagonal2_cursor.cur
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\shared_graphics\size_horizontal_cursor.cur
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\shared_graphics\size_move_cursor.cur
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\shared_graphics\size_vertival_cursor.cur
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\shared_graphics\thumbnail_404.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\shared_graphics\thumbnail_bookmarks.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\shared_graphics\thumbnail_search.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\tray_scroller\tray_scroller.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\tray_scroller\trayScroller.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\utilities.js

Re: winbluesoft got me as well, and hard3rd June 2009, 11:11 pm

continued...

c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\ViewBarStringConstants.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\AdvancedOptions\AdvancedOptions.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\AdvancedOptions\AdvancedOptions.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\AdvancedOptions\feature.mtx
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\AdvancedOptions\options.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\alerts\alerts.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\alerts\alerts.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\alerts\alertsDefinition.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\alerts\feature.mtx
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\alerts\featureDefinition.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\alerts\graphics\alerts_icon.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\alerts\graphics\alerts_icon.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\alerts\graphics\alerts_text.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\alerts\graphics\list.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\alerts\graphics\list.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\alerts\graphics\panel_left_bottom.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\alerts\graphics\panel_left_top.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\alerts\graphics\panel_right_bottom.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\alerts\graphics\tray_face.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\alerts\options.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\bookmarks\bookmarks.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\bookmarks\bookmarks.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\bookmarks\bookmarksDefinition.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\bookmarks\feature.mtx
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\bookmarks\featureDefinitions.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\bookmarks\graphics\bookmarks_icon.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\bookmarks\graphics\bookmarks_icon.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\bookmarks\graphics\bookmarks_text.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\bookmarks\graphics\button_thumbnail_rollover.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\bookmarks\graphics\buttons_bookmarks.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\bookmarks\graphics\buttons_folders.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\bookmarks\graphics\dog_ear.bmp
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\bookmarks\graphics\icon_add.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\bookmarks\graphics\icon_expand.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\bookmarks\graphics\icon_folder.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\bookmarks\graphics\icon_refresh.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\bookmarks\graphics\icon_trash.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\bookmarks\graphics\securelock.bmp
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\bookmarks\graphics\tray_face.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\bookmarks\graphics\tray_face_treeview.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\bookmarks\graphics\treeIcon_folderClosed.bmp
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\bookmarks\graphics\treeIcon_folderOpen.bmp
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\bookmarks\graphics\treeIcon_root.bmp
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\bookmarks\options.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\bookmarks\treeviewDlg.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\GeneralOptions\feature.mtx
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\GeneralOptions\featureDefinition.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\GeneralOptions\GeneralOptions.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\GeneralOptions\GeneralOptions.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\GeneralOptions\graphics\options_icon.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\GeneralOptions\graphics\options_icon.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\GeneralOptions\graphics\options_text.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\GeneralOptions\graphics\traysize_icon.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\GeneralOptions\graphics\traysize_icon.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\GeneralOptions\graphics\traysize_text.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\GeneralOptions\options.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\options\images\inner_bl.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\options\images\inner_bot.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\options\images\inner_br.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\options\images\inner_tl.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\options\images\inner_top.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\options\images\inner_tr.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\options\images\s.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\options\options.css
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\options\options.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\AddToAlbumDlg.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\albums.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\comming_soon.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\dialog.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\editing.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\EditViewManager.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\emailDlg.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\feature.mtx
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\featureDefinitions.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\FileModifiedDate.dll
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frame_template\frame_template.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frame_template\frame_template_old.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\framePreview.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Autumn\borders_autumn01.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Autumn\borders_autumn01.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Autumn\borders_autumn02.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Autumn\borders_autumn02.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Autumn\borders_autumn03.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Autumn\borders_autumn03.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Birthday\borders_birthday01.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Birthday\borders_birthday01.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Birthday\borders_birthday02.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Birthday\borders_birthday02.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Birthday\borders_birthday03.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Birthday\borders_birthday03.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Chanukah\borders_chanukah01.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Chanukah\borders_chanukah01.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Chanukah\borders_chanukah02.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Chanukah\borders_chanukah02.swf

Re: winbluesoft got me as well, and hard3rd June 2009, 11:12 pm

continued...

c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Christmas\borders_christmas01.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Christmas\borders_christmas01.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Christmas\borders_christmas02.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Christmas\borders_christmas02.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Christmas\borders_christmas03.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Christmas\borders_christmas03.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Halloween\borders_halloween01.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Halloween\borders_halloween01.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Halloween\borders_halloween02.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Halloween\borders_halloween02.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Halloween\borders_halloween03.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Halloween\borders_halloween03.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Halloween\borders_halloween04.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Halloween\borders_halloween04.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\New Baby\borders_baby01.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\New Baby\borders_baby01.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\New Baby\borders_baby02.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\New Baby\borders_baby02.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\New Baby\borders_baby03.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\New Baby\borders_baby03.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\New Baby\borders_baby04.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\New Baby\borders_baby04.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\New Years\borders_NY01.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\New Years\borders_NY01.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\New Years\borders_NY02.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\New Years\borders_NY02.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Sports\borders_misc01.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Sports\borders_misc01.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Sports\borders_misc02.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Sports\borders_misc02.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Sports\borders_misc03.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Sports\borders_misc03.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\albumHeaderImage.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\button_thumbnail_rollover.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\checkbox_checked.bmp
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\checkbox_unchecked.bmp
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\comming_soon.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\defaultphoto.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\defaultphoto2.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\defaultvideoimage.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\dlgUpload.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\edit_bottomButtons.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\edit_crop.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\edit_crop.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\edit_redeye.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\edit_text_rect.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\frame_crop.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\frame_crop.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\frame_preview.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\fullScreenButtons.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\importQuestion.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\options_arrow.bmp
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\options_arrow_over.bmp
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\photoview_icon.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\photoview_icon.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\photoview_text.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\rollHeaderImage.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\searchResultAlbumHeaderImage.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\searchResultRollHeaderImage.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\SlideShowButtons.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\SmpteColorBars.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\tray_face_left.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\tray_face_right.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\tray_panel_albumButtons.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\tray_panel_edit.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\tray_panel_imgDesc.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\tray_panel_left_border.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\tray_panel_left_bottomButtons.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\tray_panel_left_help.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\tray_panel_left_import.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\tray_panel_left_search.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\tray_panel_left_showAllButtons.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\tray_panel_left_tabs.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\tray_panel_right_top.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\treeIcon_album.bmp

Re: winbluesoft got me as well, and hard3rd June 2009, 11:13 pm

continued...

c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\treeIcon_albums.bmp
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\treeIcon_roll.bmp
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\treeIcon_rolls.bmp
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\treeIcon_root.bmp
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\VideoError.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics\videoicon.bmp
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\htmlpalette.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\Import.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\importprogress.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\importQuestionDlg.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\info.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\infoBig.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\ads_offline.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\badpage_offline.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\error_offline.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\getstarted.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\images\background_578x314.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\images\button_getstarted.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\images\button_getstarted_over.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\images\error.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\images\errormsg_offline.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\images\fotomat_assist.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\images\fotomat_logo_76x19.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\images\help_offline_msg.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\images\icon_getstarted.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\images\icon_questionmark.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\images\import_video_offline.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\images\judy.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\images\logo.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\images\question_15x19.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\images\s.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\images\t_frame_bottom.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\images\t_frame_bottomleft.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\images\t_frame_bottomright.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\images\t_frame_left.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\images\t_frame_right.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\images\t_frame_top.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\images\t_frame_topleft.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\images\t_frame_topright.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\images\t_gradient_right.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\images\t_header.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\images\t_techdifficulty_text.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\videoHelp_offline.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\online.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\options.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\PhotoSharing.dll
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\photoview.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\photoview.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\photoviewDefinition.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\progress.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\publishing.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\rollsDlg.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\rotateThumbDlg.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\SaveDlg.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\SaveDlg.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\singleView.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\SlideShow.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\test.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\ui.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\uploadDlg.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\Utilities.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\videoAssistantManager.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\videoplayer.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wiaaut.dll
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard.js

Re: winbluesoft got me as well, and hard3rd June 2009, 11:14 pm

continued...

c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\albumselector.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\albumselector.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\albumselectormodule.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\emailwizard.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\fileselector.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\fileselector.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\fileselectormodule.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\folderselector.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\folderselector.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\folderselectormodule.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\back_from_online.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\compress_progress.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\create_an_album.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\email_photos.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\get_more_photos.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\help.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\help_index.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\arrow_blue_8x17.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\blue_frame_bottom.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\blue_frame_cap.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_all_albums.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_all_albums_on.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_buy_photos_308x62.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_camera_checked.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_camera_disabled.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_camera_off.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_camera_over.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_cd_checked.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_cd_disabled.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_cd_off.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_cd_over.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_create_an_account.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_create_new_album.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_fotomat_email.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_fotomat_email_308x62.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_fotomat_email_over.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_fotomat_help_114x40.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_get_photos_308x62.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_get_started_110x48.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_help.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_help_over.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_import_photos.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_import_photos_over.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_local_email.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_local_email_308x62.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_local_email_over.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_mycomputer_checked.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_mycomputer_off.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_mycomputer_over.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_order_prints.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_order_prints_dis.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_order_prints_over.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_play.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_play_disabled.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_select_album.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_share_photos.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_share_photos_308x62.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_share_photos_dis.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_share_photos_over.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_single_album.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_single_album_on.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_stop.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_sync_all_308x62.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\button_sync_individ_308x62.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\create_a_new_account.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\create_an_album_408x52.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\email.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\fotomat_email_67x47.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\fotomat_full.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\fotomat_full_over.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\fotomat_logo_126x52.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\fotomat_logo_210x52.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\frame_bottom_338x11.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\frame_top_338x10.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\gray_frame_bottom.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\gray_frame_top.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\head_email_photo_408X52.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_attaching_408x52.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_compress_option.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_compress_prog.gif

Re: winbluesoft got me as well, and hard3rd June 2009, 11:14 pm

continued...

c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_create_an_album.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_createaccount_408x52.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_email_photos.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_email_upload_prog.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_fotomat_help.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_get_more_photos.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_import_complete.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_import_photos_408x52.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_import_photos_folder.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_import_photos_photos.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_import_progress.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_import_scr_camera.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_import_scr_cdrom.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_import_scr_mypc.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_offline_408x52.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_offline_error.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_order_upload_details.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_select_import_408x52.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_select_import_dest.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_select_import_src.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_select_photos.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_select_recipients_408x52.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_selectalbum_408x52.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_share_select_photos.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_share_upload_com.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_share_upload_details.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_sharing_complete_408x52.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_sync_complete.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_sync_details.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_sync_progress.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_update_online_albums.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_upload_complete.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_upload_photos.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_upload_photos_prog.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_uploading_408x52.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_welcome.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\header_welcome_408x52.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\help.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\icon_photo_album.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\icon_photo_share.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\import_completed_408x52.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\import_video_offline.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\local_email_67x47.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\local_full.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\local_full_over.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\progress_bar.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\progress_track.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\resizeable_corner.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\s.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\select_import_dest_408x52.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\share_select_photos_408x52.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images\your_albums.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\import_complete.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\import_complete_detail.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\import_progress.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\mainframe.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\offline.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\order_select_photos.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\select_import_dest.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\select_import_folder.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\select_import_photos.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\select_import_source.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\select_import_source2.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\share_email_compress_option.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\share_select_photos.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\start_autoplay_import.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\start_email_photos.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\start_import_photos.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\upload_complete.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\upload_details.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\upload_photos_progress.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\videoHelpEmbed.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\welcome.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\wizardhtml.css
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\wizardscripts.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\importwizard.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\mediaselector.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\mediaselector.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\mediaselectormodule.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\mediaselectorwithalbums.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\mediaselectorwithalbums.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\mediaselectorwithalbumsmodule.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\tests\import.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\tests\mediaselector.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\tests\upload.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\uploadwizard.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\wizardhtmlutils.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\wizardvideoutils.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoviewVista\core\feature.mtx
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoviewVista\core\featureDefinition.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoviewVista\core\HTMLFeature.ini
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoviewVista\core\HTMLFeature.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoviewVista\core\inioptions.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoviewVista\core\PhotoViewVista.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoviewVista\core\PhotoViewVistaDefinition.module

Re: winbluesoft got me as well, and hard3rd June 2009, 11:15 pm

continued...

c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoviewVista\graphics\offline.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoviewVista\graphics\photoview_icon.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoviewVista\graphics\photoview_icon.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoviewVista\HTMLFeature.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoviewVista\includes\default.css
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoviewVista\includes\htmlutils.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoviewVista\notifier.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoviewVista\offline.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoviewVista\options.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\popups\feature.mtx
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\popups\featureDefinitions.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\popups\graphics\popups_icon.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\popups\graphics\popups_icon.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\popups\graphics\popups_text.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\popups\graphics\tray_face.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\popups\options.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\popups\popups.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\popups\popups.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\popups\popups.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\popups\popupsDefinition.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\search\feature.mtx
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\search\featureDefinitions.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\search\graphics\arrow_icon.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\search\graphics\arrow_icon.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\search\graphics\highlight_icon.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\search\graphics\highlight_icon.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\search\graphics\highlight_text.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\search\graphics\search_icon.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\search\graphics\search_icon.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\search\graphics\search_text.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\search\graphics\tray_face.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\search\options.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\search\search.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\search\search.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\search\search.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\search\searchDefinition.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\SelectorEditor\feature.mtx
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\SelectorEditor\options.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\SelectorEditor\SelectorEditor.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\SelectorEditor\SelectorEditor.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\SkinChooser\feature.mtx
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\SkinChooser\options.html
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\SkinChooser\SkinChooser.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\SkinChooser\SkinChooser.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\ThemeTemplates\Custom.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\ThemeTemplates\Default\defaultSelectors.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\ThemeTemplates\Default\Template.ini
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\ThemeTemplates\Default\Template.js
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\ThemeTemplates\Default\Template.module
c:\documents and settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\ThemeTemplates\Default\TemplateDefinition.js
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\Cache\26B77E745E435430EFF854E752CE18185B603C22
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\Cache\cache.ini
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\colorSchemes\backgrounds\Custom.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\colorSchemes\backgrounds\liberty.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\colorSchemes\backgrounds\springflowers.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\colorSchemes\backgrounds\sunflowers.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\colorSchemes\custom.image
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\colorSchemes\custom2.image
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\colorSchemes\Default.image
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\colorSchemes\Default.scheme
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\colorSchemes\Green.scheme
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\colorSchemes\liberty.image
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\colorSchemes\none.image
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\colorSchemes\Pink.scheme
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\colorSchemes\Purple.scheme
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\colorSchemes\springflowers.image
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\colorSchemes\sunflowers.image
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\colorSchemes\Yellow.scheme
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\barintro.html
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\button_dropdown.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\popupmoi.wav
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\powered_by_yahoo.bmp
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\preview.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\search_buttons.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\tellafriend_offline\images\close.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\tellafriend_offline\images\frame_bottom.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\tellafriend_offline\images\frame_gradient.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\tellafriend_offline\images\frame_left.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\tellafriend_offline\images\frame_right.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\tellafriend_offline\images\frame_top.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\tellafriend_offline\images\header_back.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\tellafriend_offline\images\icon.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\tellafriend_offline\images\left_gradient.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\tellafriend_offline\images\logo.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\tellafriend_offline\images\offlinemsg.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\tellafriend_offline\images\s.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\tellafriend_offline\index.html
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\template_buttons.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\template_buttons_green.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\template_buttons_pink.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\template_buttons_purple.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\template_buttons_yellow.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\template_logo.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\thumbnail_404.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\thumbnail_bookmarks.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\titlebar.swf

Re: winbluesoft got me as well, and hard3rd June 2009, 11:15 pm

continued...

c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\default.skin
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\defaultSelectors.js
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\DynamicSearchTypes.js
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Amazon\core\feature.mtx
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Amazon\core\featureDefinition.js
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Amazon\core\HTMLFeature.ini
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Amazon\core\HTMLFeature.js
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Amazon\core\HTMLFeature.module
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Amazon\core\HTMLFeatureDefinition.module
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Amazon\core\inioptions.js
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Amazon\core\PersonalizationWrapper.dll
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Amazon\graphics\default_icon.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Amazon\graphics\icons.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Amazon\HTMLFeature.html
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Amazon\includes\default.css
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Amazon\includes\htmlutils.js
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Amazon\notifier.html
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Amazon\offline.html
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\ThemeCustomizer\feature.mtx
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\ThemeCustomizer\images\arrow_down.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\ThemeCustomizer\images\arrow_up.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\ThemeCustomizer\images\inner_bl.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\ThemeCustomizer\images\inner_bot.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\ThemeCustomizer\images\inner_br.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\ThemeCustomizer\images\inner_tl.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\ThemeCustomizer\images\inner_top.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\ThemeCustomizer\images\inner_tr.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\ThemeCustomizer\images\s.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\ThemeCustomizer\options.html
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\ThemeCustomizer\ThemeCustomizer.ini
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\ThemeCustomizer\ThemeCustomizer.js
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\ThemeCustomizer\ThemeCustomizer.module
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Weather\core\feature.mtx
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Weather\core\featureDefinition.js
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Weather\core\HTMLFeature.ini
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Weather\core\HTMLFeature.js
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Weather\core\HTMLFeature.module
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Weather\core\HTMLFeatureDefinition.module
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Weather\core\inioptions.js
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Weather\graphics\customicon.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Weather\graphics\default_icon.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Weather\graphics\icons.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Weather\HTMLFeature.html
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Weather\includes\default.css
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Weather\includes\htmlutils.js
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Weather\notifier.html
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Weather\offline.html
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Weather\options.html
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\production\automationScripts\All Button States.isa
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\production\automationScripts\button_disabled.isa
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\production\automationScripts\button_down.isa
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\production\automationScripts\button_downover.isa
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\production\automationScripts\button_over.isa
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\production\automationScripts\button_up.isa
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\production\automationScripts\create button states.jsfl
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\production\automationScripts\create interface buttons.jsfl
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\production\automationScripts\CreateColorScheme.jsx
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\production\automationScripts\CreateImageScheme.jsx
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\production\automationScripts\interface graphics.isa
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\production\automationScripts\ThemeTemplateProcessor.jsx
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\production\color_scheme.psd
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\production\imageTemplate.image
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\production\schemeTemplate.scheme
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\production\template_button.psd
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\production\template_interface.psd
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\production\template_themes.psd
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\Template.ini

Re: winbluesoft got me as well, and hard3rd June 2009, 11:16 pm

continued...

c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\Theme.ini
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\Theme.js
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\colorSchemes\backgrounds\Custom.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\colorSchemes\backgrounds\vista_gray.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\colorSchemes\Default.image
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\colorSchemes\none.image
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\colorSchemes\Vista_DefaultAero.scheme
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\colorSchemes\Vista_Gray.image
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\colorSchemes\XP_DefaultBlue.scheme
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\colorSchemes\XP_Olive.scheme
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\colorSchemes\XP_Silver.scheme
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics\barintro.html
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics\barintro_images\logo.gif.bmp
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics\buttons_Vista.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics\buttons_Vista_dialogs.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics\buttons_XP.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics\buttons_XP_dialogs.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics\dropdown_Vista_DefaultAero.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics\dropdown_XP_DefaultBlue.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics\dropdown_XP_Olive.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics\dropdown_XP_Silver.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics\popupmoi.wav
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics\preview.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics\scrollbar_Vista_DefaultAero.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics\scrollbar_XP_DefaultBlue.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics\scrollbar_XP_Olive.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics\scrollbar_XP_Silver.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics\search_buttons.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics\searchfield.bmp
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics\selector_icon.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics\template_logo.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics\thumbnail_404.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics\thumbnail_bookmarks.jpg
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics\titlebar_Vista_DefaultAero.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics\titlebar_XP_DefaultBlue.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics\titlebar_XP_Olive.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics\titlebar_XP_Silver.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\defaultSelectors.js
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\DynamicSearchTypes.js
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Amazon\core\feature.mtx
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Amazon\core\featureDefinition.js
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Amazon\core\HTMLFeature.ini
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Amazon\core\HTMLFeature.js
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Amazon\core\HTMLFeature.module
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Amazon\core\HTMLFeatureDefinition.module
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Amazon\core\inioptions.js
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Amazon\core\PersonalizationWrapper.dll
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Amazon\graphics\default_icon.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Amazon\graphics\icons.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Amazon\HTMLFeature.html
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Amazon\notifier.html
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Amazon\offline.html
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\options\images\inner_bl.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\options\images\inner_bot.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\options\images\inner_br.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\options\images\inner_tl.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\options\images\inner_top.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\options\images\inner_tr.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\options\images\s.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\options\options.css
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\options\options.js
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\ThemeCustomizer\feature.mtx
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\ThemeCustomizer\images\arrow_down.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\ThemeCustomizer\images\arrow_up.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\ThemeCustomizer\images\inner_bl.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\ThemeCustomizer\images\inner_bot.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\ThemeCustomizer\images\inner_br.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\ThemeCustomizer\images\inner_tl.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\ThemeCustomizer\images\inner_top.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\ThemeCustomizer\images\inner_tr.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\ThemeCustomizer\images\s.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\ThemeCustomizer\options.html
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\ThemeCustomizer\ThemeCustomizer.ini
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\ThemeCustomizer\ThemeCustomizer.js
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\ThemeCustomizer\ThemeCustomizer.module
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Weather\core\feature.mtx
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Weather\core\featureDefinition.js
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Weather\core\HTMLFeature.ini
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Weather\core\HTMLFeature.js
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Weather\core\HTMLFeature.module
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Weather\core\HTMLFeatureDefinition.module
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Weather\core\inioptions.js
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Weather\graphics\customicon.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Weather\graphics\default_icon.gif
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Weather\graphics\icons.swf
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Weather\HTMLFeature.html
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Weather\includes\default.css
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Weather\includes\htmlutils.js
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Weather\notifier.html
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Weather\offline.html
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Weather\options.html
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\Template.ini
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\Theme.ini
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\Theme.js
c:\documents and settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\Windows.skin

Re: winbluesoft got me as well, and hard3rd June 2009, 11:17 pm

continued...

c:\documents and settings\Max McLenna\Application Data\uTorrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\12 Angry Men[1957]DvDrip[Eng]-Stealthmaster.avi.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\2008 - David Cook.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\30.Rock.S03E01.HDTV.XviD-LOL.avi.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\30.Rock.S03E02.HDTV.XviD-LOL.avi.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\30.Rock.S03E03.HDTV.XviD-LOL.avi.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\30.Rock.S03E04.HDTV.XviD-LOL.avi.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\30.Rock.S03E05.HDTV.XviD-LOL.avi.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\30.Rock.S03E06.Christmas.Special.HDTV.XviD-FQM.avi.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\30.Rock.S03E07.HDTV.XviD-LOL.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\A Perfect Circle (Mer De Noms).torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Absolute Christmas Collection (Top 100).torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Bedtime Stories 2008 TELESYNC XviD-KingBen (Kingdom-Release).torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Bedtime Stories[2008]DvDrip[Eng]-FXG.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Ben_Folds-Way_To_Normal-2008-BENFOLDS.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Beyonce - I Am Sasha Fierce - (Deluxe Edition) - 2008.(www.lokotorrents.com).torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Big_and_Rich-Comin_To_Your_City-2005-XXL.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Body.Of.Lies[2008]DvDrip-aXXo.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Bolt 2008 DVDSCR H264-KingBen (Kingdom-Release).torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Breaking.Bad.S02E01.HDTV.XviD-0TV.avi.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Breaking.Bad.S02E02.HDTV.XviD-0TV.avi.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Breaking.Bad.S02E03.HDTV.XviD-0TV.avi.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Breaking.Bad.Season.01.Swesub[2008]Complete.XviD.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\BreakingBad.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Burn Notice - Complete Season 2 - XviD 350MB each (HDTV rips).torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Burn Notice Season 1.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Burn Notice.Season 1-OnlyMe1.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Burn Notice.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Californication.S02E07.720p.HDTV.X264-DIMENSION.mkv.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Californication.S02E08.HDTV.XviD-0TV.avi.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Californication.S02E09.HDTV.XviD-0TV.avi.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Californication.S02E10.HDTV.XviD-0TV.avi.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Californication.S02E11.HDTV.XviD-aAF.avi.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Californication.S02E12.HDTV.XviD-aAF.avi.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Chasing Amy KLAXXON.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Choke[2008]DvDrip[Eng]-FXG.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Crimson.Tide{Extended.Version}[Eng]Dvdrip.Dino.avi.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Dead Poets Society[1989]DvDrip[Eng]-FXG.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\dht.dat
c:\documents and settings\Max McLenna\Application Data\uTorrent\dht.dat.old
c:\documents and settings\Max McLenna\Application Data\uTorrent\Dr.Horribles.Sing-Along.Blog.2008.DVDRip.XviD-FRAGMENT.[Movie-Torrentz].torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Dream Theater - 2009 - Black Clouds & Silver Linings.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Dream Theater -2009- Black Clouds & Silver Linings.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Eagle.Eye.DVDSCR.XviD-HEFTY.[movie-torrentz].torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\easyHDR PRO 1.50.2.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Fanboys.LIMITED.DVDRip.XviD-SAPHiRE.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Foxy_Shazam-Introducing-(Advance)-2008-FNT.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Frankie Valli & the Four Seasons.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Futurama.Benders.Game.2008.DVDRip.XviD-DOMiNO.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Ghost.Town[2008]DvDrip-aXXo.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Girl Talk.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Gran Torino 2008 DVDSCR XviD-KingBen (Kingdom-Release).torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Gym Class Heroes - The Quilt ( Explicit - Retail ) - Parry Gill - xclusivez.net.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Hamlet 2[2008]DvDrip[Eng]-FXG.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Heat KLAXXON DVDRIP.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Incredibad.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Iron Maiden Flight 666.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Iron_Maiden-Flight_666_the_Original_Soundtrack-2CD-(Live)-2009-ONe.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Its Always Sunny In Philadelphia.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Lamb Of God.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Let.The.Right.One.In.2008.DVDRip.XviD-VoMiT.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Mama, I'm Swollen.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Max Payne.[2008].R5.DVDRIP.XVID.[Eng]-DUQA.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Max.Payne[2008][Unrated.Edition]DvDrip-aXXo.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Mer de Noms.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\metis-ca-bd720p.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Milk (2008) DVDSCR Occor avi.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\My.Name.Is.Bruce.DVDSCR.XViD.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Payback[DVDrip]Eng-westybollocks_[NIKONRG].torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Pepper-Pink_Crustaceans_and_Good_Vibrations-2008-pLAN9.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Photomatix 3 Pro.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Reel Big Fish-Fame Fortune And Fornication (2009) [WwW.LoKoTorrents.CoM].torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Religulous.DVDScr.XViD-BaLD.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\REO Speedwagon - The Hits.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\resume.dat
c:\documents and settings\Max McLenna\Application Data\uTorrent\resume.dat.old
c:\documents and settings\Max McLenna\Application Data\uTorrent\RocknRolla[2008]DvDrip-aXXo.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\rss.dat
c:\documents and settings\Max McLenna\Application Data\uTorrent\rss.dat.old
c:\documents and settings\Max McLenna\Application Data\uTorrent\Season 1.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Season 2.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Season 4.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\settings.dat
c:\documents and settings\Max McLenna\Application Data\uTorrent\settings.dat.old
c:\documents and settings\Max McLenna\Application Data\uTorrent\seven pounds.[2008.Eng].DVDScr.DivX-LTT.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Sex.Drive[2008][Unrated.Edition]DvDrip-aXXo.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Simon And Garfunkel Discography.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Simon And Garfunkel.Greatest Hits.1972.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Southland.Tales.2007.DvDRip.Eng-FxM.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Step.Brothers[2008][Unrated.Edition]DvDrip-aXXo.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Stephen Lynch - 3 Balloons.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\The Flamingo Trigger.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\The Fugees - The Score.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\The International[2009]DvDrip[Eng]-FXG.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\The Killers - Hot Fuss.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\The Notorious B.I.G. Discography.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\The Rundown (2003).avi.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\The Wendell Baker Story.WS.2005.XviD.HHI.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\The.Curious.Case.Of.Benjamin.Button.2008.DVD.Screener_Bloodshot.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\The.Dark.Knight[2008]DvDrip-aXXo.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\The.Day.The.Earth.Stood.Still.TELESYNC.XviD-OPTiC.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\The.Day.The.Earth.Stood.Still[1951]DvDrip-aXXo.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\The.Rocker.2008.DvDRip-FxM.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\The.Wrestler.DVDSCR.XviD-ORC.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Twilight[2008]DvDrip-aXXo.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Two guys and a girl.1.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Two guys and a girl.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\utorrent.lng
c:\documents and settings\Max McLenna\Application Data\uTorrent\W.[2008]DvDrip-aXXo.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Watchmen.CAM.XViD-CAMERA.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\What.Just.Happened.2008.DvDRip-FxM.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Wyclef Jean - The Carnival.torrent
c:\documents and settings\Max McLenna\Application Data\uTorrent\Zack.And.Miri.Make.A.Porno.2008.R5.DVDRiP.XViD.torrent
c:\program files\uTorrent
c:\program files\uTorrent\uTorrent.exe
c:\program files\Viewpoint
c:\program files\Viewpoint\Viewpoint Toolbar\3.8.0\eula.txt
c:\program files\Viewpoint\Viewpoint Toolbar\3.8.0\Uninstaller.exe
c:\program files\Viewpoint\Viewpoint Toolbar\3.8.0\ViewBarBHO.dll
c:\program files\Viewpoint\Viewpoint Toolbar\3.8.0\ViewBarSystemInfo.dll
c:\windows\system32\tempo-setup2.exe

Re: winbluesoft got me as well, and hard3rd June 2009, 11:17 pm

continued...

.
((((((((((((((((((((((((( Files Created from 2009-05-03 to 2009-06-03 )))))))))))))))))))))))))))))))
.

2009-06-03 21:23 . 2009-06-03 21:24 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
2009-06-03 20:47 . 2009-06-03 20:47 -------- d-----w- c:\program files\Trend Micro
2009-06-03 20:42 . 2009-05-26 17:20 40160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-06-03 20:42 . 2009-06-03 20:42 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-06-03 20:42 . 2009-06-03 20:42 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-06-03 20:42 . 2009-05-26 17:19 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-06-03 20:22 . 2008-07-28 15:29 160792 ----a-w- c:\windows\system32\drivers\pctfw2.sys
2009-06-03 20:22 . 2009-06-03 20:22 -------- d-----w- c:\program files\Common Files\PC Tools
2009-06-03 20:22 . 2008-06-02 19:19 29576 ----a-w- c:\windows\system32\drivers\kcom.sys
2009-06-03 20:22 . 2008-06-11 01:22 81288 ----a-w- c:\windows\system32\drivers\iksyssec.sys
2009-06-03 20:22 . 2008-06-02 19:19 66952 ----a-w- c:\windows\system32\drivers\iksysflt.sys
2009-06-03 20:22 . 2008-06-02 19:19 42376 ----a-w- c:\windows\system32\drivers\ikfilesec.sys
2009-06-03 20:22 . 2009-06-03 20:29 -------- d-----w- c:\program files\Spyware Doctor
2009-06-03 20:22 . 2009-06-03 20:22 -------- d-----w- c:\documents and settings\Max McLenna\Application Data\PC Tools
2009-06-03 20:22 . 2009-06-03 20:22 -------- d-----w- c:\documents and settings\All Users\Application Data\PC Tools
2009-06-03 03:21 . 2009-06-03 03:21 -------- d-----w- c:\documents and settings\Administrator\Application Data\GlarySoft
2009-06-02 23:10 . 2009-06-02 23:12 -------- d-----w- c:\program files\QuickTime
2009-05-22 23:13 . 2009-05-22 23:13 -------- d-----w- c:\program files\Microsoft Silverlight
2009-05-18 02:49 . 2009-05-18 02:49 -------- d-----w- c:\program files\iPod
2009-05-18 02:49 . 2009-05-18 02:49 -------- d-----w- c:\program files\iTunes
2009-05-18 02:49 . 2009-05-18 02:49 -------- d-----w- c:\documents and settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
2009-05-18 02:42 . 2009-05-18 02:42 75048 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 8.1.1.10\SetupAdmin.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-03 19:56 . 2006-11-08 16:16 -------- d-----w- c:\program files\RGB
2009-05-24 20:28 . 2007-01-27 07:03 -------- d-----w- c:\program files\Lx_cats
2009-05-19 14:56 . 2007-01-17 19:58 -------- d-----w- c:\documents and settings\Max McLenna\Application Data\U3
2009-05-18 02:49 . 2007-06-29 23:22 -------- d-----w- c:\program files\Common Files\Apple
2009-05-01 05:03 . 2009-05-01 05:03 -------- d-----w- c:\program files\Avago-HP
2009-05-01 05:03 . 2009-05-01 05:03 -------- d-----w- c:\program files\Hewlett-Packard
2009-04-24 21:27 . 2009-04-24 21:17 -------- d-----w- c:\documents and settings\Max McLenna\Application Data\GlarySoft
2009-04-24 21:19 . 2009-04-24 21:19 -------- d-----w- c:\program files\GKrellM
2009-04-24 21:12 . 2009-04-24 21:12 -------- d-----w- c:\program files\Glary Utilities
2009-04-23 16:42 . 2009-04-23 16:42 390664 ----a-w- c:\documents and settings\Max McLenna\Application Data\Real\RealPlayer\Update\RealPlayer11.exe
2009-04-23 04:59 . 2009-04-23 04:59 64160 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\update\Drivers\32\lbd.sys
2009-04-23 04:59 . 2009-04-09 04:58 64160 ----a-w- c:\windows\system32\drivers\Lbd.sys
2009-04-22 04:58 . 2007-12-28 13:52 -------- d-----w- c:\documents and settings\Max McLenna\Application Data\dvdcss
2009-04-16 01:50 . 2006-11-08 19:24 -------- d-----w- c:\program files\EphPod
2009-04-09 04:54 . 2009-04-09 04:54 -------- dc-h--w- c:\documents and settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}
2009-04-09 04:54 . 2009-04-09 04:54 -------- d-----w- c:\program files\Lavasoft
2009-04-07 18:32 . 2006-11-08 19:00 -------- d-----w- c:\program files\Java
2009-04-07 18:30 . 2009-04-07 18:30 152576 ----a-w- c:\documents and settings\Max McLenna\Application Data\Sun\Java\jre1.6.0_13\lzma.dll
2009-03-19 20:32 . 2009-03-19 20:32 23400 ----a-w- c:\documents and settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}\x86\x86\GEARAspiWDM.sys
2009-03-19 20:32 . 2008-01-29 16:01 23400 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2009-03-12 08:17 . 2009-04-09 04:54 2902048 -c--a-w- c:\documents and settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}\Ad-AwareAE.exe
2009-03-12 01:45 . 2009-03-12 01:45 348160 ----a-w- c:\documents and settings\Max McLenna\Application Data\Sun\Java\Deployment\cache\6.0\38\39ba6e6-389041ec-n\msvcr71.dll
2009-03-12 01:45 . 2009-03-12 01:45 503808 ----a-w- c:\documents and settings\Max McLenna\Application Data\Sun\Java\Deployment\cache\6.0\38\39ba6e6-389041ec-n\msvcp71.dll
2009-03-12 01:45 . 2009-03-12 01:45 499712 ----a-w- c:\documents and settings\Max McLenna\Application Data\Sun\Java\Deployment\cache\6.0\38\39ba6e6-389041ec-n\jmc.dll
2009-03-12 01:42 . 2009-03-12 01:42 152576 ----a-w- c:\documents and settings\Max McLenna\Application Data\Sun\Java\jre1.6.0_12\lzma.dll
2009-03-09 09:19 . 2008-12-05 07:15 410984 ----a-w- c:\windows\system32\deploytk.dll
2009-03-06 14:22 . 2004-08-10 11:00 284160 ----a-w- c:\windows\system32\pdh.dll
.

((((((((((((((((((((((((((((( SnapShot@2009-06-03_21.43.39 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-06-03 22:57 . 2009-06-03 22:57 16384 c:\windows\temp\Perflib_Perfdata_548.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.

Re: winbluesoft got me as well, and hard3rd June 2009, 11:17 pm

last one...

*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]
"VisualTaskTips"="c:\program files\VisualTaskTips\VisualTaskTips.exe" [2006-07-31 36864]
"H/PC Connection Agent"="c:\program files\Microsoft ActiveSync\Wcescomm.exe" [2006-11-13 1289000]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2007-12-14 1688872]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"Aim6"="c:\program files\AIM6\aim6.exe" [2008-08-06 50472]
"ATnotes.exe"="c:\program files\ATnotes\ATnotes.exe" [2005-01-05 1015808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-05 64512]
"IntelZeroConfig"="c:\program files\Intel\Wireless\bin\ZCfgSvc.exe" [2005-12-28 667718]
"IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2005-12-28 602182]
"Dell QuickSet"="c:\program files\Dell\QuickSet\quickset.exe" [2006-06-29 1032192]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2005-12-13 98304]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-12-13 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2005-12-13 118784]
"dlccmon.exe"="c:\program files\Dell Photo AIO Printer 924\dlccmon.exe" [2005-10-21 430080]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-03-08 761947]
"EzPrint"="c:\program files\Lexmark 5400 Series\ezprint.exe" [2006-06-07 98304]
"NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2007-12-03 2213160]
"NeroFilterCheck"="c:\program files\Common Files\Nero\Lib\NeroCheck.exe" [2007-03-01 153136]
"LogitechCommunicationsManager"="c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" [2007-10-25 563984]
"LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam\Quickcam.exe" [2007-10-25 2178832]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-11-07 111936]
"ShStatEXE"="c:\program files\McAfee\VirusScan Enterprise\SHSTAT.EXE" [2006-11-30 112216]
"McAfeeUpdaterUI"="c:\program files\McAfee\Common Framework\UdaterUI.exe" [2006-11-17 136768]
"CloneDVDElbyDelay"="c:\program files\Elaborate Bytes\CloneDVD\ElbyCheck.exe" [2002-11-02 45056]
"ElbyCheckAnyDVD"="c:\program files\SlySoft\AnyDVD\ElbyCheck.exe" [2003-09-20 45056]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888]
"Ad-Watch"="c:\program files\Lavasoft\Ad-Aware\AAWTray.exe" [2009-06-01 518488]
"LXCTCATS"="c:\windows\System32\spool\DRIVERS\W32X86\3\LXCTtime.dll" [2006-06-07 106496]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-04-02 342312]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-05-26 413696]
"ISTray"="c:\program files\Spyware Doctor\pctsTray.exe" [2008-07-16 1166216]
"SigmatelSysTrayApp"="stsystra.exe" - c:\windows\stsystra.exe [2006-03-24 282624]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Clean Access Agent.lnk - c:\program files\Cisco Systems\Clean Access Agent\CCAAgentLauncher.exe [2007-12-7 28672]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /p \??\e:\0autocheck autochk *\0lsdelete

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" -osboot
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\AIM\\aim.exe"=
"c:\\WINDOWS\\system32\\dlcccoms.exe"=
"c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\dlccPSWX.EXE"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\WINDOWS\\system32\\lxctcoms.exe"=
"c:\program files\Microsoft ActiveSync\rapimgr.exe"= c:\program files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"c:\program files\Microsoft ActiveSync\wcescomm.exe"= c:\program files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"c:\program files\Microsoft ActiveSync\WCESMgr.exe"= c:\program files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
"c:\\Program Files\\AIM6\\aim6.exe"=
"c:\\Program Files\\McAfee\\Common Framework\\FrameworkService.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
"135:TCP"= 135:TCP:TCP Port 135

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [4/9/2009 12:58 AM 64160]
R1 pctfw2;pctfw2;c:\windows\system32\drivers\pctfw2.sys [6/3/2009 4:22 PM 160792]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [3/9/2009 3:06 PM 1005904]
.
Contents of the 'Scheduled Tasks' folder

2009-06-01 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-03-09 04:58]

2009-06-01 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 16:34]

2009-06-03 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2009-04-24 13:49]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.wcsu.edu/
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\Max McLenna\Application Data\Mozilla\Firefox\Profiles\qx8y1vbr.default\
FF - prefs.js: browser.startup.homepage - hxxps://my.screenname.aol.com/_cqr/login/login.psp?sitedomain=sns.webmail.aol.com&lang=en&locale=us&authLev=2&siteState=ver%3a3%7cac%3aWS%7cat%3aSNS%7cld%3awebmail.aol.com%7cuv%3aAOL%7clc%3aen-us%7cmt%3aAOL%7csnt%3aScreenName&seamless=novl
FF - plugin: c:\documents and settings\Max McLenna\Application Data\Mozilla\Firefox\Profiles\qx8y1vbr.default\extensions\moveplayer@movenetworks.com\platform\WINNT_x86-msvc\plugins\npmnqmp071101000055.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npmozax.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-03 18:58
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
LXCTCATS = rundll32 c:\windows\System32\spool\DRIVERS\W32X86\3\LXCTtime.dll,_RunDLLEntry@16???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'explorer.exe'(8604)
c:\program files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
c:\program files\VisualTaskTips\VttHooks.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Intel\Wireless\Bin\EvtEng.exe
c:\program files\Intel\Wireless\Bin\S24EvMon.exe
c:\program files\Intel\Wireless\Bin\WLKEEPER.exe
c:\program files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe
c:\windows\ehome\ehrecvr.exe
c:\windows\ehome\ehSched.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
c:\windows\system32\lxctcoms.exe
c:\program files\McAfee\Common Framework\FrameworkService.exe
c:\program files\McAfee\VirusScan Enterprise\VsTskMgr.exe
c:\program files\Nero\Nero8\Nero BackItUp\NBService.exe
c:\program files\McAfee\Common Framework\naPrdMgr.exe
c:\program files\Dell\QuickSet\NicConfigSvc.exe
c:\windows\system32\HPZipm12.exe
c:\program files\Intel\Wireless\Bin\RegSrvc.exe
c:\program files\CyberLink\Shared files\RichVideo.exe
c:\windows\system32\spool\drivers\w32x86\3\HP1006MC.EXE
c:\windows\ehome\mcrdsvc.exe
c:\windows\system32\wbem\unsecapp.exe
c:\windows\system32\dllhost.exe
c:\program files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
c:\windows\ehome\ehmsas.exe
c:\windows\system32\igfxsrvc.exe
c:\windows\system32\dlcccoms.exe
c:\windows\system32\wscntfy.exe
c:\program files\McAfee\Common Framework\Mctray.exe
c:\progra~1\Intel\Wireless\Bin\Dot1XCfg.exe
c:\progra~1\MICROS~3\rapimgr.exe
c:\program files\Cisco Systems\Clean Access Agent\CCAAgent.exe
c:\program files\Common Files\Nero\Lib\NMIndexingService.exe
c:\program files\iPod\bin\iPodService.exe
c:\program files\Common Files\LogiShrd\LQCVFX\COCIManager.exe
c:\program files\AIM6\aolsoftware.exe
c:\progra~1\McAfee\VIRUSS~1\Mcshield.exe
.
**************************************************************************
.
Completion time: 2009-06-03 19:05 - machine was rebooted
ComboFix-quarantined-files.txt 2009-06-03 23:05
ComboFix2.txt 2009-06-03 21:45

Pre-Run: 39,417,319,424 bytes free
Post-Run: 39,397,593,088 bytes free

1150 --- E O F --- 2009-05-23 14:23

Re: winbluesoft got me as well, and hard4th June 2009, 12:05 am

am i ok to run any virus or malware programs?

Re: winbluesoft got me as well, and hard4th June 2009, 12:47 am

You mean antivirus or antimalware programs?

Click Start > Run and copy/paste the following bolded text into the Run box and click OK:

ComboFix /u

winbluesoft got me as well, and hard CF_Cleanup

winbluesoft got me as well, and hard CF_Cleanup

This will also reset your restore points.

How is the machine running now?

Re: winbluesoft got me as well, and hard4th June 2009, 2:17 am

much better. can i run my computer and programs normally again? is there any trace of the virus left?

Re: winbluesoft got me as well, and hard4th June 2009, 3:35 am

Yes you can run them normally now, the virus is not in your computer anymore but keep in mind that your computer will not always be 100% fre of malware as it is getting harder and harder to find each day.

Below I have included a number of recommendations for how to protect your computer in order to prevent future malware infections. Please take these recommendations seriously; these few simple steps can stave off the vast majority of spyware problems. As happy as we are to help you, for your sake we would rather not have repeat customers. Goofy

1) Please navigate to http://windowsupdate.microsoft.com and download all the "critical updates" for Windows. This can patch many of the security holes through which attackers can gain access to your computer.

Please either enable Automatic Updates under Start -> Control Panel -> Automatic Updates , or get into the habit of checking for Windows updates regularly. I cannot stress enough how important this is.

2) In order to protect yourself against spyware, you should consider installing and running the following free programs:

Ad-Aware SE
A tutorial on using Ad-Aware to remove spyware from your computer may be found here.

Spybot-Search & Destroy
A tutorial on using Spybot to remove spyware from your computer may be found here. Please also remember to enable Spybot's "Immunize" and "TeaTimer" features.

SpywareBlaster
A tutorial on using SpywareBlaster to prevent spyware from ever installing on your computer may be found here.

SpywareGuard
A tutorial on using SpywareGuard for realtime protection against spyware and hijackers may be found here.

Make sure to keep these programs up-to-date and to run them regularly, as this can prevent a great deal of spyware hassle.

3) Please consider using an alternate browser. Mozilla's Firefox browser is fantastic; it is much more secure than Internet Explorer, immune to almost all known browser hijackers, and also has the best built-in popup blocker (as an added benefit!) that I have ever seen. If you are interested, Firefox may be downloaded from here:
http://www.mozilla.org/products/firefox/
I also recommand the following add-ons for Firefox, they will help keep you safe from malicious scripts or activeX exploits.
https://addons.mozilla.org/en-US/firefox/addon/722
https://addons.mozilla.org/en-US/firefox/addon/1865
https://addons.mozilla.org/en-US/firefox/addon/433

4) Also make sure to run your antivirus software regularly, and to keep it up-to-date.

To help you keep your software updated, please considering using this free software program that will check for program updates.
Update Checker

5) Finally, consider maintaining a firewall. Some good free firewalls are Kerio, or
Outpost
A tutorial on understanding and using firewalls may be found here.

Please also read Tony Klein's excellent article: How I got Infected in the First Place

If you would take a moment to fill out our feedback form, we would appreciate it.
The link can be found here.

Hopefully this should take care of your problems! Good luck. Big Grin

............................................................................................
While my help is always free, please consider donating to keep this site alive: Donate

winbluesoft got me as well, and hard 2wg6fte

winbluesoft got me as well, and hard

descriptionwinbluesoft got me as well, and hard3rd June 2009, 8:55 pm

descriptionRe: winbluesoft got me as well, and hard3rd June 2009, 8:57 pm

descriptionRe: winbluesoft got me as well, and hard3rd June 2009, 8:59 pm

descriptionRe: winbluesoft got me as well, and hard3rd June 2009, 9:04 pm

descriptionRe: winbluesoft got me as well, and hard3rd June 2009, 9:08 pm

descriptionRe: winbluesoft got me as well, and hard3rd June 2009, 9:13 pm

descriptionRe: winbluesoft got me as well, and hard3rd June 2009, 9:15 pm

descriptionRe: winbluesoft got me as well, and hard3rd June 2009, 9:17 pm

descriptionRe: winbluesoft got me as well, and hard3rd June 2009, 9:31 pm

descriptionRe: winbluesoft got me as well, and hard3rd June 2009, 9:33 pm

descriptionRe: winbluesoft got me as well, and hard3rd June 2009, 9:54 pm

descriptionRe: winbluesoft got me as well, and hard3rd June 2009, 9:55 pm

descriptionRe: winbluesoft got me as well, and hard3rd June 2009, 9:56 pm

descriptionRe: winbluesoft got me as well, and hard3rd June 2009, 9:56 pm

descriptionRe: winbluesoft got me as well, and hard3rd June 2009, 9:56 pm

descriptionRe: winbluesoft got me as well, and hard3rd June 2009, 10:11 pm

descriptionRe: winbluesoft got me as well, and hard3rd June 2009, 11:10 pm

descriptionRe: winbluesoft got me as well, and hard3rd June 2009, 11:11 pm

descriptionRe: winbluesoft got me as well, and hard3rd June 2009, 11:11 pm

descriptionRe: winbluesoft got me as well, and hard3rd June 2009, 11:12 pm

descriptionRe: winbluesoft got me as well, and hard3rd June 2009, 11:13 pm

descriptionRe: winbluesoft got me as well, and hard3rd June 2009, 11:14 pm

descriptionRe: winbluesoft got me as well, and hard3rd June 2009, 11:14 pm

descriptionRe: winbluesoft got me as well, and hard3rd June 2009, 11:15 pm

descriptionRe: winbluesoft got me as well, and hard3rd June 2009, 11:15 pm

descriptionRe: winbluesoft got me as well, and hard3rd June 2009, 11:16 pm

descriptionRe: winbluesoft got me as well, and hard3rd June 2009, 11:17 pm

descriptionRe: winbluesoft got me as well, and hard3rd June 2009, 11:17 pm

descriptionRe: winbluesoft got me as well, and hard3rd June 2009, 11:17 pm

descriptionRe: winbluesoft got me as well, and hard4th June 2009, 12:05 am

descriptionRe: winbluesoft got me as well, and hard4th June 2009, 12:47 am

descriptionRe: winbluesoft got me as well, and hard4th June 2009, 2:17 am

descriptionRe: winbluesoft got me as well, and hard4th June 2009, 3:35 am

descriptionRe: winbluesoft got me as well, and hard