SDFix: Version 1.115
Run by Owner on Thu 11/22/2007 at 10:08 AM
Microsoft Windows XP [Version 5.1.2600]
Running From: C:\SDFix
Safe Mode:
Checking Services:
Restoring Windows Registry Values
Restoring Windows Default Hosts File
Restoring Default HomePage Value
Restoring Default Desktop Components Value
Rebooting...
Normal Mode:
Checking Files:
Trojan Files Found:
C:\Documents and Settings\Owner\Desktop\Error Cleaner.url - Deleted
C:\Documents and Settings\Owner\Desktop\Privacy Protector.url - Deleted
C:\Documents and Settings\Owner\Desktop\Spyware&Malware Protection.url - Deleted
C:\WINDOWS\privacy_danger\index.htm - Deleted
C:\WINDOWS\privacy_danger\images\capt.gif - Deleted
C:\WINDOWS\privacy_danger\images\danger.jpg - Deleted
C:\WINDOWS\privacy_danger\images\down.gif - Deleted
C:\WINDOWS\privacy_danger\images\spacer.gif - Deleted
C:\Program Files\RichVideoCodec\install.ico - Deleted
C:\Program Files\RichVideoCodec\RichVideoCodec.ocx - Deleted
C:\Program Files\RichVideoCodec\Uninstall.exe - Deleted
C:\WINDOWS\rs.txt - Deleted
C:\WINDOWS\search_res.txt - Deleted
Folder C:\Program Files\RichVideoCodec - Removed
Folder C:\WINDOWS\privacy_danger - Removed
Removing Temp Files...
ADS Check:
C:\WINDOWS
No streams found.
C:\WINDOWS\system32
No streams found.
C:\WINDOWS\system32\svchost.exe
No streams found.
C:\WINDOWS\system32\ntoskrnl.exe
No streams found.
Final Check:
catchme 0.3.1262.1 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2007-11-22 10:28:07
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden services & system hive ...
scanning hidden registry entries ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0
Remaining Services:
------------------
Authorized Application Key Export:
[HKEY_LOCAL_MACHINE\system\currentcontrolset\servic es\sharedaccess\parameters\firewallpolicy\standard profile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\syste m32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\WINDOWS\\kdx\\khost.exe"="C:\\WINDOWS\\kdx\\k host.exe:*:Disabled:Secure Delivery Plug-In"
"C:\\Program Files\\Compaq Connections\\1940576\\Program\\BackWeb-1940576.exe"="C:\\Program Files\\Compaq Connections\\1940576\\Program\\BackWeb-1940576.exe:*:Disabled:BackWeb-1940576"
"C:\\Program Files\\Real\\RealOne Player\\realplay.exe"="C:\\Program Files\\Real\\RealOne Player\\realplay.exe:*:Enabled:RealOne Player"
"C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\Rar$EX01.422\\MP3Share.exe"="C:\\D ocuments and Settings\\Owner\\Local Settings\\Temp\\Rar$EX01.422\\MP3Share.exe:*:Disab led:MP3Share"
"C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\Rar$EX27.610\\MP3Share.exe"="C:\\D ocuments and Settings\\Owner\\Local Settings\\Temp\\Rar$EX27.610\\MP3Share.exe:*:Enabl ed:MP3Share"
"C:\\Program Files\\Gold Miner\\GoldMiner.exe"="C:\\Program Files\\Gold Miner\\GoldMiner.exe:*:Disabled:Gold Miner "
"C:\\Program Files\\Microsoft Games\\Ants\\Ants.exe"="C:\\Program Files\\Microsoft Games\\Ants\\Ants.exe:*:Enabled:Microsoft Ants"
"C:\\Program Files\\Kodak\\KODAK Software Updater\\7288971\\Program\\Kodak Software Updater.exe"="C:\\Program Files\\Kodak\\KODAK Software Updater\\7288971\\Program\\Kodak Software Updater.exe:*:Disabled:Kodak Software Updater"
"C:\\WINDOWS\\system32\\rundll32.exe"="C:\\WINDOWS \\system32\\rundll32.exe:*:Enabled:Run a DLL as an App"
"C:\\Program Files\\MSN Games\\Wheel of Fortune Deluxe\\Wheel of Fortune Deluxe.exe"="C:\\Program Files\\MSN Games\\Wheel of Fortune Deluxe\\Wheel of Fortune Deluxe.exe:*:Disabled:Wheel of Fortune Deluxe"
"C:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\ \SAGENT4.EXE"="C:\\WINDOWS\\system32\\spool\\drive rs\\w32x86\\3\\SAGENT4.EXE:*:Disabled:SAgent4"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\BitTorrent\\bittorrent.exe"="C:\\Program Files\\BitTorrent\\bittorrent.exe:*:Disabled:BitTo rrent"
"C:\\Program Files\\FlashGet\\flashget.exe"="C:\\Program Files\\FlashGet\\flashget.exe:*:Disabled:Flashget"
"C:\\WINDOWS\\system32\\dpvsetup.exe"="C:\\WINDOWS \\system32\\dpvsetup.exe:*:Disabled:Microsoft DirectPlay Voice Test"
"C:\\WINDOWS\\system32\\dpnsvr.exe"="C:\\WINDOWS\\ system32\\dpnsvr.exe:*:Disabled:Microsoft DirectPlay8 Server"
"C:\\WINDOWS\\system32\\dxdiag.exe"="C:\\WINDOWS\\ system32\\dxdiag.exe:*:Disabled:Microsoft DirectX Diagnostic Tool"
"C:\\Program Files\\WildTangent\\Polar Bowler\\polar.exe"="C:\\Program Files\\WildTangent\\Polar Bowler\\polar.exe:*:Disabled:polar"
"C:\\Program Files\\LucasArts\\SWKotOR\\swupdate.exe"="C:\\Prog ram Files\\LucasArts\\SWKotOR\\swupdate.exe:*:Disabled :Star Wars: Knights of the old Republic Update Program"
"C:\\Program Files\\TurboTax\\Deluxe 2006\\32bit\\ttax.exe"="C:\\Program Files\\TurboTax\\Deluxe 2006\\32bit\\ttax.exe:LocalSubNet:Disabled:TurboTa x"
"C:\\Program Files\\TurboTax\\Deluxe 2006\\32bit\\updatemgr.exe"="C:\\Program Files\\TurboTax\\Deluxe 2006\\32bit\\updatemgr.exe:LocalSubNet:Disabled:Tu rboTax Update Manager"
"C:\\Program Files\\Yahoo! Games\\Wheel of Fortune\\Wheel of Fortune.exe"="C:\\Program Files\\Yahoo! Games\\Wheel of Fortune\\Wheel of Fortune.exe:*:Disabled:Wheel of Fortune"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Disabled:Windows Live Messenger 8.0 (Phone)"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Disabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Disabled:Windows Live Messenger 8.1 (Phone)"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Disabled:Windows Messenger"
"C:\\Program Files\\CSLU\\Tcl80\\bin\\wish80.exe"="C:\\Program Files\\CSLU\\Tcl80\\bin\\wish80.exe:*:Disabled:wis h80"
"C:\\Program Files\\MSN Gaming Zone\\zclient.exe"="C:\\Program Files\\MSN Gaming Zone\\zclient.exe:*:Disabled:Zone Datafile"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\Common Files\\McAfee\\MNA\\McNASvc.exe"="C:\\Program Files\\Common Files\\McAfee\\MNA\\McNASvc.exe:*:Enabled:McAfee Network Agent"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\servic es\sharedaccess\parameters\firewallpolicy\domainpr ofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\syste m32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
Remaining Files:
---------------
File Backups: - C:\SDFix\backups\backups.zip
Files with Hidden Attributes:
Sat 19 Jun 2004 196 A.SHR --- "C:\BOOT.BAK"
Wed 29 Sep 2004 0 A.SH. --- "C:\WINDOWS\SMINST\HPCD.sys"
Wed 14 Dec 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(3)(10).sys"
Thu 22 Sep 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(3)(8).sys"
Wed 30 Nov 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(3)(9).sys"
Sun 25 Sep 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(3)(6).sys"
Wed 28 Sep 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(3)(7).sys"
Tue 27 Sep 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(3)(5).sys"
Sun 25 Sep 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(4)(6).sys"
Mon 5 Dec 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(4)(7).sys"
Fri 16 Sep 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(5)(6).sys"
Fri 4 Feb 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(10)(2)(2).sys"
Fri 21 Jan 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(10)(3).sys"
Fri 21 Jan 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(11)(2).sys"
Sun 25 Sep 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(11)(3).sys"
Wed 19 Jan 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(12)(2).sys"
Tue 18 Jan 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(13)(2).sys"
Fri 14 Jan 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(14)(2).sys"
Fri 14 Jan 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(15)(2).sys"
Wed 12 Jan 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(16)(2).sys"
Fri 7 Jan 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(17)(2).sys"
Thu 6 Jan 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(18)(2).sys"
Fri 21 Jan 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(19)(2).sys"
Thu 28 Jul 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(2).sys"
Tue 28 Dec 2004 985 A.SH. --- "C:\WINDOWS\system32\mmf(2)(2)(2).sys"
Wed 15 Dec 2004 985 A.SH. --- "C:\WINDOWS\system32\mmf(2)(3).sys"
Sun 6 Feb 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(2)(4).sys"
Sun 24 Apr 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(2)(2).sys"
Mon 27 Dec 2004 985 A.SH. --- "C:\WINDOWS\system32\mmf(22)(2).sys"
Sun 26 Dec 2004 985 A.SH. --- "C:\WINDOWS\system32\mmf(23)(2).sys"
Sun 26 Dec 2004 985 A.SH. --- "C:\WINDOWS\system32\mmf(24)(2).sys"
Sat 25 Dec 2004 985 A.SH. --- "C:\WINDOWS\system32\mmf(25)(2).sys"
Fri 24 Dec 2004 985 A.SH. --- "C:\WINDOWS\system32\mmf(26)(2).sys"
Fri 24 Dec 2004 985 A.SH. --- "C:\WINDOWS\system32\mmf(27)(2).sys"
Tue 21 Dec 2004 985 A.SH. --- "C:\WINDOWS\system32\mmf(28)(2).sys"
Sat 18 Dec 2004 985 A.SH. --- "C:\WINDOWS\system32\mmf(29)(2).sys"
Wed 29 Dec 2004 985 A.SH. --- "C:\WINDOWS\system32\mmf(3)(2)(2).sys"
Sat 5 Feb 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(3)(3).sys"
Sun 24 Apr 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(3)(2).sys"
Fri 9 Sep 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(3)(4).sys"
Thu 16 Dec 2004 985 A.SH. --- "C:\WINDOWS\system32\mmf(31)(2).sys"
Fri 4 Feb 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(32)(2).sys"
Tue 1 Feb 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(33)(2).sys"
Sat 29 Jan 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(34)(2).sys"
Tue 25 Jan 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(35)(2).sys"
Sat 22 Jan 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(36)(2).sys"
Sun 24 Apr 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(4)(2).sys"
Fri 4 Feb 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(4)(3).sys"
Mon 26 Sep 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(4)(4).sys"
Sun 25 Sep 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(4)(5).sys"
Mon 7 Feb 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(49)(2).sys"
Mon 18 Apr 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(5)(2).sys"
Fri 4 Feb 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(5)(3).sys"
Sun 25 Sep 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(5)(4).sys"
Sun 11 Sep 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(5)(5).sys"
Sun 17 Apr 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(6)(2).sys"
Tue 1 Feb 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(6)(3).sys"
Tue 13 Sep 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(6)(4).sys"
Sun 11 Sep 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(6)(5).sys"
Fri 4 Mar 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(7)(2).sys"
Sat 29 Jan 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(7)(3).sys"
Tue 25 Jan 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(8)(3).sys"
Sat 22 Jan 2005 985 A.SH. --- "C:\WINDOWS\system32\mmf(9)(3).sys"
Thu 22 Nov 2007 985 A.SH. --- "C:\WINDOWS\system32\mmf.sys"
Sat 2 Oct 2004 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Tue 26 Apr 2005 453,632 ...H. --- "C:\Documents and Settings\Owner\My Documents\~WRL0003.tmp"
Sat 22 Jan 2005 31,744 ...H. --- "C:\Documents and Settings\Owner\My Documents\~WRL0004.tmp"
Fri 21 Jan 2005 1,487 A..H. --- "C:\Program Files\InterActual\InterActual Player\iti136.tmp"
Wed 18 Oct 2006 169 A..H. --- "C:\Program Files\InterActual\InterActual Player\iti23D.tmp"
Wed 14 Nov 2007 20,487 A.SHR --- "C:\Program Files\McAfee\MQC\MRU.bak"
Wed 14 Nov 2007 211 A.SHR --- "C:\Program Files\McAfee\MQC\qcconf.bak"
Tue 20 Nov 2007 0 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BIT10.tmp"
Wed 21 Nov 2007 0 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BIT11.tmp"
Tue 20 Nov 2007 0 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BIT12.tmp"
Tue 20 Nov 2007 0 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BIT13.tmp"
Tue 20 Nov 2007 0 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BIT14.tmp"
Wed 21 Nov 2007 0 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BIT15.tmp"
Wed 8 Aug 2007 85,946 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BIT16.tmp"
Wed 21 Nov 2007 0 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BIT29.tmp"
Wed 21 Nov 2007 0 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BIT3D.tmp"
Wed 21 Nov 2007 0 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BIT3E.tmp"
Wed 8 Aug 2007 85,946 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BITA.tmp"
Mon 19 Nov 2007 388,090 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BITBF.tmp"
Mon 19 Nov 2007 388,090 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BITC1.tmp"
Mon 19 Nov 2007 0 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BITC4.tmp"
Mon 19 Nov 2007 388,090 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BITC6.tmp"
Mon 19 Nov 2007 0 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BITC8.tmp"
Mon 19 Nov 2007 0 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BITCA.tmp"
Mon 19 Nov 2007 0 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BITCB.tmp"
Mon 19 Nov 2007 388,090 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BITCD.tmp"
Mon 19 Nov 2007 0 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BITCF.tmp"
Tue 20 Nov 2007 0 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BITD.tmp"
Mon 19 Nov 2007 0 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BITD1.tmp"
Mon 19 Nov 2007 0 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BITD3.tmp"
Tue 20 Nov 2007 0 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BITD5.tmp"
Mon 19 Nov 2007 0 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BITD7.tmp"
Mon 19 Nov 2007 0 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BITD9.tmp"
Mon 19 Nov 2007 0 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BITDB.tmp"
Mon 19 Nov 2007 0 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BITDD.tmp"
Mon 19 Nov 2007 0 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BITDF.tmp"
Tue 20 Nov 2007 388,090 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BITE.tmp"
Tue 20 Nov 2007 0 A..H. --- "C:\Documents and Settings\Alex\Local Settings\Temp\BITF.tmp"
Thu 25 Oct 2007 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv02.tmp"
Sat 7 Feb 2004 5,294,080 A..H. --- "C:\hp\patches\42WW1REC\src\App00153.exe"
Sat 7 Feb 2004 452,096 A..H. --- "C:\hp\patches\42WW1REC\src\App00292.exe"
Sat 7 Feb 2004 444,416 A..H. --- "C:\hp\patches\42WW1REC\src\App00491.exe"
Sat 7 Feb 2004 1,838,592 A..H. --- "C:\hp\patches\42WW1REC\src\App02995.exe"
Sat 7 Feb 2004 492,544 A..H. --- "C:\hp\patches\42WW1REC\src\App04827.exe"
Sat 7 Feb 2004 1,401,856 A..H. --- "C:\hp\patches\42WW1REC\src\App05447.exe"
Sat 7 Feb 2004 440,320 A..H. --- "C:\hp\patches\42WW1REC\src\App05705.exe"
Sat 7 Feb 2004 462,848 A..H. --- "C:\hp\patches\42WW1REC\src\App09961.exe"
Sat 7 Feb 2004 15,596,032 A..H. --- "C:\hp\patches\42WW1REC\src\App14604.exe"
Sat 7 Feb 2004 5,256,704 A..H. --- "C:\hp\patches\42WW1REC\src\App16827.exe"
Sat 7 Feb 2004 3,668,992 A..H. --- "C:\hp\patches\42WW1REC\src\App17421.exe"
Tue 10 Feb 2004 696,832 A..H. --- "C:\hp\patches\42WW1REC\src\App18716.exe"
Sat 7 Feb 2004 423,936 A..H. --- "C:\hp\patches\42WW1REC\src\App19169.exe"
Sat 7 Feb 2004 1,157,632 A..H. --- "C:\hp\patches\42WW1REC\src\App19718.exe"
Tue 10 Feb 2004 995,328 A..H. --- "C:\hp\patches\42WW1REC\src\App19895.exe"
Sat 7 Feb 2004 453,632 A..H. --- "C:\hp\patches\42WW1REC\src\App23281.exe"
Sat 7 Feb 2004 453,632 A..H. --- "C:\hp\patches\42WW1REC\src\App24464.exe"
Sat 7 Feb 2004 2,251,776 A..H. --- "C:\hp\patches\42WW1REC\src\App26962.exe"
Sat 7 Feb 2004 481,792 A..H. --- "C:\hp\patches\42WW1REC\src\App29358.exe"
Sat 7 Feb 2004 12,426,752 A..H. --- "C:\hp\patches\42WW1REC\src\App32391.exe"
Sat 7 Feb 2004 12,426,752 A..H. --- "C:\hp\patches\42WW1REC\src\App99990.exe"
Sat 7 Feb 2004 15,596,032 A..H. --- "C:\hp\patches\42WW1REC\src\App99992.exe"
Sat 7 Feb 2004 5,256,704 A..H. --- "C:\hp\patches\42WW1REC\src\App99993.exe"
Sat 7 Feb 2004 5,256,704 A..H. --- "C:\hp\patches\42WW1REC\src\xApp14604.exe"
Mon 3 May 2004 67,944 ...H. --- "C:\Program Files\Ahead\Nero PhotoShow\data\Nero PhotoShow Express.exe"
Mon 13 Nov 2006 319,456 A..H. --- "C:\Program Files\Common Files\Motorola Shared\MotPCSDrivers\difxapi.dll"
Thu 11 Jan 2007 3,993,088 ...H. --- "C:\Documents and Settings\Owner\Application Data\Microsoft\Word\~WRL1235.tmp"
Thu 11 Jan 2007 19,456 ...H. --- "C:\Documents and Settings\Owner\Application Data\Microsoft\Word\~WRL2114.tmp"
Sat 2 Oct 2004 4,348 ...H. --- "C:\Documents and Settings\Owner\My Documents\My Music\License Backup\drmv1key.bak"
Tue 5 Apr 2005 20 A..H. --- "C:\Documents and Settings\Owner\My Documents\My Music\License Backup\drmv1lic.bak"
Sat 2 Oct 2004 400 A.SH. --- "C:\Documents and Settings\Owner\My Documents\My Music\License Backup\drmv2key.bak"
Finished!