PCTech Forums

by **Gecko** » Mon Jun 25, 2007 1:17 pm

peahead,

The RACLE~1 is a dos shortened path referance, look for a folder name that starts with RACLE the file will be inside that folder.

by **peahead** » Mon Jun 25, 2007 4:07 pm

Hmm still not finding RACLE in the system 32 folder

by **Gecko** » Mon Jun 25, 2007 8:36 pm

peahead,

You might have a rootkit that would explain why we cannot not get rid of it and why you cannot find the folder.

I suggest that you download extract it to your root like this:
C:\rkr\RootkitRevealer.exe

Close all other programs, windows and disable your screen saver before you start RootkitRevealer.
While RootkitRevealer is running, you shouldn't do anything at all with the PC.
Put down the mouse, back away slowly, and let the program do its work.

Start RootkitRevealer.exe and press the Scan button.
It will take some time to finish an hour is common so just wait it out.
Once the scanning is finished RootkitRevealer will create a log, please copy the contents of that log into your reply.

by **peahead** » Tue Jun 26, 2007 6:04 pm

Hey, think it found like 500 or summit...when i ran it first it picked up around 1000 but it crashed while saving the log

so did it again heres the log.

HKU\.DEFAULT\Control Panel\International 21/06/2007 18:56 0 bytes Security mismatch.
HKU\.DEFAULT\Control Panel\International\Geo 21/06/2007 18:56 0 bytes Security mismatch.
HKU\S-1-5-21-1715567821-261903793-725345543-1003\Control Panel\International 21/06/2007 18:56 0 bytes Security mismatch.
HKU\S-1-5-21-1715567821-261903793-725345543-1003\Control Panel\International\Geo 21/06/2007 18:56 0 bytes Security mismatch.
HKU\S-1-5-21-1715567821-261903793-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon\ 26/06/2007 17:20 74 bytes Data mismatch between Windows API and raw hive data.
HKU\S-1-5-18\Control Panel\International 21/06/2007 18:56 0 bytes Security mismatch.
HKU\S-1-5-18\Control Panel\International\Geo 21/06/2007 18:56 0 bytes Security mismatch.
HKLM\SECURITY\Policy\Secrets\SAC* 06/11/2006 23:04 0 bytes Key name contains embedded nulls (*)
HKLM\SECURITY\Policy\Secrets\SAI* 06/11/2006 23:05 0 bytes Key name contains embedded nulls (*)
HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg 09/01/2007 00:32 0 bytes Access is denied.
C:\Documents and Settings\Brad\Contacts\djpea06@hotmail.co.uk\7F6406B0-D574-44AA-8ACD-4803537EAD98.WindowsLiveContact 26/06/2007 17:21 2.47 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\amy_x_vinny@hotmail.co.uk\DFSR\Staging\CS{8B51C576-5FC5-F981-B718-D6FACB9EC39E}\01\12-{8B51C576-5FC5-F981-B718-D6FACB9EC39E}-v1-{E508C 31/01/2007 17:03 8 bytes Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\blair1050@hotmail.com\DFSR\Staging\CS{8C4628BA-78F6-6D83-31A1-9304470C46B3}\01\715-{8C4628BA-78F6-6D83-31A1-9304470C46B3}-v1-{E508C77C 22/06/2007 23:29 8 bytes Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\cutiepie_175@hotmail.co.uk\DFSR\Staging\CS{08C1784B-1FF7-9F2E-0854-370DF36F1F10}\01\11-{08C1784B-1FF7-9F2E-0854-370DF36F1F10}-v1-{E508 20/11/2006 09:00 8 bytes Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\00\200-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v200-{B 26/04/2007 08:55 25.39 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\00\200-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v200-{B 26/04/2007 08:55 1.89 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\00\200-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v200-{B 26/04/2007 08:55 2.77 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\01\201-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v201-{B 26/04/2007 08:57 23.48 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\01\201-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v201-{B 26/04/2007 08:57 1.66 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\01\201-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v201-{B 26/04/2007 08:57 2.67 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\01\502-{E508C77C-C570-4908-A153-4E3B161B6184}-v501-{E 25/04/2007 06:19 22.18 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\01\502-{E508C77C-C570-4908-A153-4E3B161B6184}-v501-{E 25/04/2007 06:19 2.54 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\02\202-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v202-{B 26/04/2007 08:59 23.78 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\02\202-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v202-{B 26/04/2007 08:59 1.80 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\02\202-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v202-{B 26/04/2007 08:59 2.69 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\03\504-{E508C77C-C570-4908-A153-4E3B161B6184}-v503-{E 25/04/2007 06:19 21.70 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\03\504-{E508C77C-C570-4908-A153-4E3B161B6184}-v503-{E 25/04/2007 06:19 2.47 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\05\506-{E508C77C-C570-4908-A153-4E3B161B6184}-v505-{E 25/04/2007 06:19 22.49 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\05\506-{E508C77C-C570-4908-A153-4E3B161B6184}-v505-{E 25/04/2007 06:19 2.53 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\07\508-{E508C77C-C570-4908-A153-4E3B161B6184}-v507-{E 25/04/2007 06:20 23.92 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\07\508-{E508C77C-C570-4908-A153-4E3B161B6184}-v507-{E 25/04/2007 06:20 2.66 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\09\510-{E508C77C-C570-4908-A153-4E3B161B6184}-v509-{E 25/04/2007 06:20 23.90 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\09\510-{E508C77C-C570-4908-A153-4E3B161B6184}-v509-{E 25/04/2007 06:20 2.70 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\32\32-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v32-{BD6 25/04/2007 06:02 23.21 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\32\32-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v32-{BD6 25/04/2007 06:02 1.72 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\32\32-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v32-{BD6 25/04/2007 06:02 2.63 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\33\234-{E508C77C-C570-4908-A153-4E3B161B6184}-v233-{E 25/04/2007 06:17 23.46 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\33\234-{E508C77C-C570-4908-A153-4E3B161B6184}-v233-{E 25/04/2007 06:17 2.71 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\33\33-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v33-{BD6 25/04/2007 06:03 24.97 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\33\33-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v33-{BD6 25/04/2007 06:03 1.93 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\33\33-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v33-{BD6 25/04/2007 06:03 2.77 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\33\334-{E508C77C-C570-4908-A153-4E3B161B6184}-v333-{E 25/04/2007 06:19 28.77 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\33\334-{E508C77C-C570-4908-A153-4E3B161B6184}-v333-{E 25/04/2007 06:19 3.19 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\33\434-{E508C77C-C570-4908-A153-4E3B161B6184}-v433-{E 25/04/2007 06:19 24.15 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\33\434-{E508C77C-C570-4908-A153-4E3B161B6184}-v433-{E 25/04/2007 06:19 2.76 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\34\34-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v34-{BD6 25/04/2007 06:05 23.72 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\34\34-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v34-{BD6 25/04/2007 06:05 1.79 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\34\34-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v34-{BD6 25/04/2007 06:05 2.67 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\35\236-{E508C77C-C570-4908-A153-4E3B161B6184}-v235-{E 25/04/2007 06:17 24.02 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\35\236-{E508C77C-C570-4908-A153-4E3B161B6184}-v235-{E 25/04/2007 06:17 2.66 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\35\336-{E508C77C-C570-4908-A153-4E3B161B6184}-v335-{E 25/04/2007 06:19 23.41 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\35\336-{E508C77C-C570-4908-A153-4E3B161B6184}-v335-{E 25/04/2007 06:19 2.63 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\35\35-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v35-{BD6 25/04/2007 06:08 24.48 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\35\35-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v35-{BD6 25/04/2007 06:08 1.82 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\35\35-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v35-{BD6 25/04/2007 06:08 2.77 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\35\436-{E508C77C-C570-4908-A153-4E3B161B6184}-v435-{E 25/04/2007 06:19 22.93 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\35\436-{E508C77C-C570-4908-A153-4E3B161B6184}-v435-{E 25/04/2007 06:19 2.58 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\36\36-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v36-{BD6 25/04/2007 06:09 24.29 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\36\36-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v36-{BD6 25/04/2007 06:09 1.84 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\36\36-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v36-{BD6 25/04/2007 06:09 2.73 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\37\238-{E508C77C-C570-4908-A153-4E3B161B6184}-v237-{E 25/04/2007 06:17 24.23 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\37\238-{E508C77C-C570-4908-A153-4E3B161B6184}-v237-{E 25/04/2007 06:17 2.67 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\37\338-{E508C77C-C570-4908-A153-4E3B161B6184}-v337-{E 25/04/2007 06:19 25.17 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\37\338-{E508C77C-C570-4908-A153-4E3B161B6184}-v337-{E 25/04/2007 06:19 2.80 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\37\37-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v37-{BD6 25/04/2007 06:12 24.92 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\37\37-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v37-{BD6 25/04/2007 06:12 1.73 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\37\37-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v37-{BD6 25/04/2007 06:12 2.76 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\37\438-{E508C77C-C570-4908-A153-4E3B161B6184}-v437-{E 25/04/2007 06:19 24.60 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\37\438-{E508C77C-C570-4908-A153-4E3B161B6184}-v437-{E 25/04/2007 06:19 2.76 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\38\38-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v38-{BD6 25/04/2007 06:14 23.04 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\38\38-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v38-{BD6 25/04/2007 06:14 1.72 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\38\38-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v38-{BD6 25/04/2007 06:14 2.59 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\39\240-{E508C77C-C570-4908-A153-4E3B161B6184}-v239-{E 25/04/2007 06:17 24.74 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\39\240-{E508C77C-C570-4908-A153-4E3B161B6184}-v239-{E 25/04/2007 06:17 2.72 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\39\340-{E508C77C-C570-4908-A153-4E3B161B6184}-v339-{E 25/04/2007 06:19 23.99 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\39\340-{E508C77C-C570-4908-A153-4E3B161B6184}-v339-{E 25/04/2007 06:19 2.66 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\39\39-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v39-{BD6 25/04/2007 06:15 24.34 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\39\39-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v39-{BD6 25/04/2007 06:15 1.79 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\39\39-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v39-{BD6 25/04/2007 06:15 2.70 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\39\440-{E508C77C-C570-4908-A153-4E3B161B6184}-v439-{E 25/04/2007 06:19 22.55 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\39\440-{E508C77C-C570-4908-A153-4E3B161B6184}-v439-{E 25/04/2007 06:19 2.55 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\41\242-{E508C77C-C570-4908-A153-4E3B161B6184}-v241-{E 25/04/2007 06:17 24.38 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\41\242-{E508C77C-C570-4908-A153-4E3B161B6184}-v241-{E 25/04/2007 06:17 2.70 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\41\342-{E508C77C-C570-4908-A153-4E3B161B6184}-v341-{E 25/04/2007 06:19 24.38 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\41\342-{E508C77C-C570-4908-A153-4E3B161B6184}-v341-{E 25/04/2007 06:19 2.73 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\41\442-{E508C77C-C570-4908-A153-4E3B161B6184}-v441-{E 25/04/2007 06:19 22.97 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\41\442-{E508C77C-C570-4908-A153-4E3B161B6184}-v441-{E 25/04/2007 06:19 2.63 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\43\244-{E508C77C-C570-4908-A153-4E3B161B6184}-v243-{E 25/04/2007 06:17 23.21 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\43\244-{E508C77C-C570-4908-A153-4E3B161B6184}-v243-{E 25/04/2007 06:17 2.66 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\43\344-{E508C77C-C570-4908-A153-4E3B161B6184}-v343-{E 25/04/2007 06:19 25.15 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\43\344-{E508C77C-C570-4908-A153-4E3B161B6184}-v343-{E 25/04/2007 06:19 2.80 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\43\444-{E508C77C-C570-4908-A153-4E3B161B6184}-v443-{E 25/04/2007 06:19 23.62 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\43\444-{E508C77C-C570-4908-A153-4E3B161B6184}-v443-{E 25/04/2007 06:19 2.69 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\45\246-{E508C77C-C570-4908-A153-4E3B161B6184}-v245-{E 25/04/2007 06:17 24.69 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\45\246-{E508C77C-C570-4908-A153-4E3B161B6184}-v245-{E 25/04/2007 06:17 2.77 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\45\346-{E508C77C-C570-4908-A153-4E3B161B6184}-v345-{E 25/04/2007 06:19 22.78 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\45\346-{E508C77C-C570-4908-A153-4E3B161B6184}-v345-{E 25/04/2007 06:19 2.56 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\45\446-{E508C77C-C570-4908-A153-4E3B161B6184}-v445-{E 25/04/2007 06:19 23.83 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\45\446-{E508C77C-C570-4908-A153-4E3B161B6184}-v445-{E 25/04/2007 06:19 2.69 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\47\248-{E508C77C-C570-4908-A153-4E3B161B6184}-v247-{E 25/04/2007 06:18 25.22 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\47\248-{E508C77C-C570-4908-A153-4E3B161B6184}-v247-{E 25/04/2007 06:18 2.83 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\47\348-{E508C77C-C570-4908-A153-4E3B161B6184}-v347-{E 25/04/2007 06:19 23.81 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\47\348-{E508C77C-C570-4908-A153-4E3B161B6184}-v347-{E 25/04/2007 06:19 2.65 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\47\448-{E508C77C-C570-4908-A153-4E3B161B6184}-v447-{E 25/04/2007 06:19 24.20 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\47\448-{E508C77C-C570-4908-A153-4E3B161B6184}-v447-{E 25/04/2007 06:19 2.67 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\49\250-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v249-{B 21/06/2007 15:46 38.07 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\49\250-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v249-{B 21/06/2007 15:46 2.88 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\49\250-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v249-{B 21/06/2007 15:46 4.20 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\49\250-{E508C77C-C570-4908-A153-4E3B161B6184}-v249-{E 25/04/2007 06:18 25.85 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\49\250-{E508C77C-C570-4908-A153-4E3B161B6184}-v249-{E 25/04/2007 06:18 2.91 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\49\350-{E508C77C-C570-4908-A153-4E3B161B6184}-v349-{E 25/04/2007 06:19 23.48 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\49\350-{E508C77C-C570-4908-A153-4E3B161B6184}-v349-{E 25/04/2007 06:19 2.65 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\49\450-{E508C77C-C570-4908-A153-4E3B161B6184}-v449-{E 25/04/2007 06:19 24.50 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\49\450-{E508C77C-C570-4908-A153-4E3B161B6184}-v449-{E 25/04/2007 06:19 2.77 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\51\252-{E508C77C-C570-4908-A153-4E3B161B6184}-v251-{E 25/04/2007 06:18 24.06 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\51\252-{E508C77C-C570-4908-A153-4E3B161B6184}-v251-{E 25/04/2007 06:18 2.69 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\51\352-{E508C77C-C570-4908-A153-4E3B161B6184}-v351-{E 25/04/2007 06:19 23.09 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\51\352-{E508C77C-C570-4908-A153-4E3B161B6184}-v351-{E 25/04/2007 06:19 2.57 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\51\452-{E508C77C-C570-4908-A153-4E3B161B6184}-v451-{E 25/04/2007 06:19 24.23 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\51\452-{E508C77C-C570-4908-A153-4E3B161B6184}-v451-{E 25/04/2007 06:19 2.73 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\53\254-{E508C77C-C570-4908-A153-4E3B161B6184}-v253-{E 25/04/2007 06:18 23.78 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\53\254-{E508C77C-C570-4908-A153-4E3B161B6184}-v253-{E 25/04/2007 06:18 2.69 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\53\354-{E508C77C-C570-4908-A153-4E3B161B6184}-v353-{E 25/04/2007 06:19 24.53 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\53\354-{E508C77C-C570-4908-A153-4E3B161B6184}-v353-{E 25/04/2007 06:19 2.70 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\53\454-{E508C77C-C570-4908-A153-4E3B161B6184}-v453-{E 25/04/2007 06:19 25.48 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\53\454-{E508C77C-C570-4908-A153-4E3B161B6184}-v453-{E 25/04/2007 06:19 2.80 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\55\256-{E508C77C-C570-4908-A153-4E3B161B6184}-v255-{E 25/04/2007 06:18 23.32 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\55\256-{E508C77C-C570-4908-A153-4E3B161B6184}-v255-{E 25/04/2007 06:18 2.63 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\55\356-{E508C77C-C570-4908-A153-4E3B161B6184}-v355-{E 25/04/2007 06:19 23.95 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\55\356-{E508C77C-C570-4908-A153-4E3B161B6184}-v355-{E 25/04/2007 06:19 2.63 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\55\456-{E508C77C-C570-4908-A153-4E3B161B6184}-v455-{E 25/04/2007 06:19 23.67 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\55\456-{E508C77C-C570-4908-A153-4E3B161B6184}-v455-{E 25/04/2007 06:19 2.73 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\57\258-{E508C77C-C570-4908-A153-4E3B161B6184}-v257-{E 25/04/2007 06:18 23.30 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\57\258-{E508C77C-C570-4908-A153-4E3B161B6184}-v257-{E 25/04/2007 06:18 2.65 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\57\358-{E508C77C-C570-4908-A153-4E3B161B6184}-v357-{E 25/04/2007 06:19 24.46 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\57\358-{E508C77C-C570-4908-A153-4E3B161B6184}-v357-{E 25/04/2007 06:19 2.74 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\57\458-{E508C77C-C570-4908-A153-4E3B161B6184}-v457-{E 25/04/2007 06:19 22.97 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\57\458-{E508C77C-C570-4908-A153-4E3B161B6184}-v457-{E 25/04/2007 06:19 2.52 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\59\260-{E508C77C-C570-4908-A153-4E3B161B6184}-v259-{E 25/04/2007 06:18 22.42 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\59\260-{E508C77C-C570-4908-A153-4E3B161B6184}-v259-{E 25/04/2007 06:18 2.52 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\59\360-{E508C77C-C570-4908-A153-4E3B161B6184}-v359-{E 25/04/2007 06:19 23.39 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\59\360-{E508C77C-C570-4908-A153-4E3B161B6184}-v359-{E 25/04/2007 06:19 2.66 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\59\460-{E508C77C-C570-4908-A153-4E3B161B6184}-v459-{E 25/04/2007 06:19 24.34 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\59\460-{E508C77C-C570-4908-A153-4E3B161B6184}-v459-{E 25/04/2007 06:19 2.70 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\61\262-{E508C77C-C570-4908-A153-4E3B161B6184}-v261-{E 25/04/2007 06:18 24.20 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\61\262-{E508C77C-C570-4908-A153-4E3B161B6184}-v261-{E 25/04/2007 06:18 2.70 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\61\362-{E508C77C-C570-4908-A153-4E3B161B6184}-v361-{E 25/04/2007 06:19 23.23 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\61\362-{E508C77C-C570-4908-A153-4E3B161B6184}-v361-{E 25/04/2007 06:19 2.56 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\61\462-{E508C77C-C570-4908-A153-4E3B161B6184}-v461-{E 25/04/2007 06:19 23.04 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\61\462-{E508C77C-C570-4908-A153-4E3B161B6184}-v461-{E 25/04/2007 06:19 2.59 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\63\264-{E508C77C-C570-4908-A153-4E3B161B6184}-v263-{E 25/04/2007 06:18 24.01 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\63\264-{E508C77C-C570-4908-A153-4E3B161B6184}-v263-{E 25/04/2007 06:18 2.71 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\63\364-{E508C77C-C570-4908-A153-4E3B161B6184}-v363-{E 25/04/2007 06:19 23.16 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\63\364-{E508C77C-C570-4908-A153-4E3B161B6184}-v363-{E 25/04/2007 06:19 2.63 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\63\464-{E508C77C-C570-4908-A153-4E3B161B6184}-v463-{E 25/04/2007 06:19 24.92 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\63\464-{E508C77C-C570-4908-A153-4E3B161B6184}-v463-{E 25/04/2007 06:19 2.76 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\65\266-{E508C77C-C570-4908-A153-4E3B161B6184}-v265-{E 25/04/2007 06:18 23.92 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\65\266-{E508C77C-C570-4908-A153-4E3B161B6184}-v265-{E 25/04/2007 06:18 2.66 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\65\366-{E508C77C-C570-4908-A153-4E3B161B6184}-v365-{E 25/04/2007 06:19 23.97 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\65\366-{E508C77C-C570-4908-A153-4E3B161B6184}-v365-{E 25/04/2007 06:19 2.70 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\65\466-{E508C77C-C570-4908-A153-4E3B161B6184}-v465-{E 25/04/2007 06:19 24.29 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\65\466-{E508C77C-C570-4908-A153-4E3B161B6184}-v465-{E 25/04/2007 06:19 2.73 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\67\268-{E508C77C-C570-4908-A153-4E3B161B6184}-v267-{E 25/04/2007 06:18 24.20 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\67\268-{E508C77C-C570-4908-A153-4E3B161B6184}-v267-{E 25/04/2007 06:18 2.70 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\67\368-{E508C77C-C570-4908-A153-4E3B161B6184}-v367-{E 25/04/2007 06:19 23.48 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\67\368-{E508C77C-C570-4908-A153-4E3B161B6184}-v367-{E 25/04/2007 06:19 2.66 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\67\468-{E508C77C-C570-4908-A153-4E3B161B6184}-v467-{E 25/04/2007 06:19 24.48 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\67\468-{E508C77C-C570-4908-A153-4E3B161B6184}-v467-{E 25/04/2007 06:19 2.77 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\69\270-{E508C77C-C570-4908-A153-4E3B161B6184}-v269-{E 25/04/2007 06:18 24.62 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\69\270-{E508C77C-C570-4908-A153-4E3B161B6184}-v269-{E 25/04/2007 06:18 2.79 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\69\370-{E508C77C-C570-4908-A153-4E3B161B6184}-v369-{E 25/04/2007 06:19 23.62 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\69\370-{E508C77C-C570-4908-A153-4E3B161B6184}-v369-{E 25/04/2007 06:19 2.64 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\69\470-{E508C77C-C570-4908-A153-4E3B161B6184}-v469-{E 25/04/2007 06:19 23.72 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\69\470-{E508C77C-C570-4908-A153-4E3B161B6184}-v469-{E 25/04/2007 06:19 2.67 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\71\272-{E508C77C-C570-4908-A153-4E3B161B6184}-v271-{E 25/04/2007 06:18 24.62 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\71\272-{E508C77C-C570-4908-A153-4E3B161B6184}-v271-{E 25/04/2007 06:18 2.80 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\71\372-{E508C77C-C570-4908-A153-4E3B161B6184}-v371-{E 25/04/2007 06:19 24.43 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\71\372-{E508C77C-C570-4908-A153-4E3B161B6184}-v371-{E 25/04/2007 06:19 2.69 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\71\472-{E508C77C-C570-4908-A153-4E3B161B6184}-v471-{E 25/04/2007 06:19 24.97 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\71\472-{E508C77C-C570-4908-A153-4E3B161B6184}-v471-{E 25/04/2007 06:19 2.77 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\73\274-{E508C77C-C570-4908-A153-4E3B161B6184}-v273-{E 25/04/2007 06:18 23.95 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\73\274-{E508C77C-C570-4908-A153-4E3B161B6184}-v273-{E 25/04/2007 06:18 2.67 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\73\374-{E508C77C-C570-4908-A153-4E3B161B6184}-v373-{E 25/04/2007 06:19 23.76 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\73\374-{E508C77C-C570-4908-A153-4E3B161B6184}-v373-{E 25/04/2007 06:19 2.64 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\73\474-{E508C77C-C570-4908-A153-4E3B161B6184}-v473-{E 25/04/2007 06:19 23.21 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\73\474-{E508C77C-C570-4908-A153-4E3B161B6184}-v473-{E 25/04/2007 06:19 2.63 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\74\174-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v174-{B 25/04/2007 04:44 2.70 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\75\175-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v175-{B 25/04/2007 04:45 2.70 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\75\276-{E508C77C-C570-4908-A153-4E3B161B6184}-v275-{E 25/04/2007 06:18 23.06 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\75\276-{E508C77C-C570-4908-A153-4E3B161B6184}-v275-{E 25/04/2007 06:18 2.64 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\75\376-{E508C77C-C570-4908-A153-4E3B161B6184}-v375-{E 25/04/2007 06:19 23.69 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\75\376-{E508C77C-C570-4908-A153-4E3B161B6184}-v375-{E 25/04/2007 06:19 2.65 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\75\476-{E508C77C-C570-4908-A153-4E3B161B6184}-v475-{E 25/04/2007 06:19 24.38 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\75\476-{E508C77C-C570-4908-A153-4E3B161B6184}-v475-{E 25/04/2007 06:19 2.70 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\76\203-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v176-{B 26/04/2007 09:00 25.04 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\76\203-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v176-{B 26/04/2007 09:00 1.84 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\76\203-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v176-{B 26/04/2007 09:00 2.77 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\77\204-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v177-{B 26/04/2007 09:02 22.30 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\77\204-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v177-{B 26/04/2007 09:02 1.61 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\77\204-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v177-{B 26/04/2007 09:02 2.50 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\77\278-{E508C77C-C570-4908-A153-4E3B161B6184}-v277-{E 25/04/2007 06:18 22.93 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\77\278-{E508C77C-C570-4908-A153-4E3B161B6184}-v277-{E 25/04/2007 06:18 2.58 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\77\378-{E508C77C-C570-4908-A153-4E3B161B6184}-v377-{E 25/04/2007 06:19 23.92 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\77\378-{E508C77C-C570-4908-A153-4E3B161B6184}-v377-{E 25/04/2007 06:19 2.66 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\77\478-{E508C77C-C570-4908-A153-4E3B161B6184}-v477-{E 25/04/2007 06:19 23.39 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\77\478-{E508C77C-C570-4908-A153-4E3B161B6184}-v477-{E 25/04/2007 06:19 2.62 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\78\178-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v178-{B 26/04/2007 08:06 23.30 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\78\178-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v178-{B 26/04/2007 08:06 1.72 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\78\178-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v178-{B 26/04/2007 08:06 2.66 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\79\179-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v179-{B 26/04/2007 08:09 25.03 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\79\179-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v179-{B 26/04/2007 08:09 1.68 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\79\179-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v179-{B 26/04/2007 08:09 2.80 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\79\280-{E508C77C-C570-4908-A153-4E3B161B6184}-v279-{E 25/04/2007 06:18 24.78 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\79\280-{E508C77C-C570-4908-A153-4E3B161B6184}-v279-{E 25/04/2007 06:18 2.80 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\79\380-{E508C77C-C570-4908-A153-4E3B161B6184}-v379-{E 25/04/2007 06:19 24.15 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\79\380-{E508C77C-C570-4908-A153-4E3B161B6184}-v379-{E 25/04/2007 06:19 2.66 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\79\480-{E508C77C-C570-4908-A153-4E3B161B6184}-v479-{E 25/04/2007 06:19 23.44 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\79\480-{E508C77C-C570-4908-A153-4E3B161B6184}-v479-{E 25/04/2007 06:19 2.63 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@hotmail.co.uk\DFSR\Staging\CS{C9908246-CD1F-5D42-315B-BC6A97CEF74D}\80\180-{BD6C9C32-42DF-4551-A278-9DDAB5ECADFE}-v180-{B 26/04/2007 08:13 25.22 KB Hidden from Windows API.
C:\Documents and Settings\Brad\Local Settings\Application Data\Microsoft\Messenger\djpea06@hotmail.co.uk\SharingMetadata\danny69fanny@ho

by **Gecko** » Thu Jun 28, 2007 2:59 pm

peahead,

Nothing to worry about in the rootkit log. You could clear out all the danny69fanny stuf.

You should not have any other open windows when you are following the procedures below.

Please download
Extract the content (a folder named SmitfraudFix) to your Desktop.

Open the SmitfraudFix folder and double-click smitfraudfix.cmd
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.

Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool";
it is not a virus, but a program used to stop system processes.
Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.

by **peahead** » Fri Jun 29, 2007 2:21 pm

Hey, thanks for the reply, will download that and post a log. The danny stuff is just from msn downloaded stuff...but will clean it anyways.

Again thanks for the reply

by **peahead** » Sat Jun 30, 2007 12:21 am

Hey, heres the log.

SmitFraudFix v2.197

Scan done at 0:20:59.26, 30/06/2007
Run from C:\Documents and Settings\Brad\Desktop\SmitfraudFix\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Thomson\SpeedTouchUSB\Dragdiag.exe
C:\Program Files\VIAudioi\SBADeck\ADeck.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Microsoft Office\Office\WINWORD.EXE
C:\Program Files\internet explorer\iexplore.exe
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts

»»»»»»»»»»»»»»»»»»»»»»»» C:\

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Brad

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Brad\Application Data

»»»»»»»»»»»»»»»»»»»»»»»» Start Menu

»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Brad\FAVORI~1

»»»»»»»»»»»»»»»»»»»»»»»» Desktop

»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys

»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{53B5F2B1-94DD-43E5-8187-EB4E31F00701}"="za"

[HKEY_CLASSES_ROOT\CLSID\{53B5F2B1-94DD-43E5-8187-EB4E31F00701}\InProcServer32]
@="C:\WINDOWS\system32\gBOgT2F7.dll"

[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{53B5F2B1-94DD-43E5-8187-EB4E31F00701}\InProcServer32]
@="C:\WINDOWS\system32\gBOgT2F7.dll"

»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""

»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""

»»»»»»»»»»»»»»»»»»»»»»»» Rustock

»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: WAN (PPP/SLIP) Interface
DNS Server Search Order: 205.188.146.145

HKLM\SYSTEM\CCS\Services\Tcpip\..\{25289900-7431-4DB5-A360-6F85BC0D0C4D}: NameServer=205.188.146.145
HKLM\SYSTEM\CS1\Services\Tcpip\..\{25289900-7431-4DB5-A360-6F85BC0D0C4D}: NameServer=205.188.146.145

»»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection

»»»»»»»»»»»»»»»»»»»»»»»» End

by **Gecko** » Sat Jun 30, 2007 3:14 am

peahead,

Let's see if we can do this by hand.

Warning these instructions are for this thread only!
You should never attempt to use them for anything else!

Please copy this to Notepad and save it to your desktop or print it. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes.

Close all open programs!
Click on Start > Run type cmd and press enter to open a Command Prompt window.
Type the below into the command box and press enter
regsvr32 /u gBOgT2F7.dll (note the spaces one before the / and the other one after the u)
Do not close the command box you will still need it!

Next press Ctrl+Alt+Delete at the same time to launch Task Manager.
Click on the Processes tab, click on the process named Explorer.exe and click on End Process.
Minimize Task Manager but leave it open.
Go back to the Command Prompt window and type the following
cd c:\ (note the space) and press enter
next type:
del c:\windows\system32\gBOgT2F7.dll and press enter

Press ALT-TAB to go back to Task Manager and click File, New Task and enter EXPLORER.EXE to restart the Windows shell.
Close Task Manager and the command box and see if Hijackthis will run now.
If it does then follow my fix instruction in my previous post.
If not then reboot the system and try Hijackthis again.

Let me know either way

by **peahead** » Sat Jun 30, 2007 11:37 pm

Hey i did the first bit ok but then when it got to...

del c:\windows\system32\gBOgT2F7.dll and press enter

I did that but then in command prompt it said that access is denied :\...i am admin of computer

by **peahead** » Sun Jul 08, 2007 11:53 am

Hey, i tried renaming it but that didnt work..so ive now moved it to my desktop and left it renamed but still wont delete. I made it into an .exe still wouldnt delete...is this the file what is stopping me from opening killbox and HJT etc?

by **peahead** » Sun Jul 08, 2007 12:12 pm

Hi again, I have another user account on this computer, so I moved the file to shared documents along with killbox. I then logged onto the other account and ran Killbox it didn't close on me. So i selected the folder to get deleted on reboot and did it. This file has now gone! I thought killbox would close on my other account but it didn't. So now i can open Killbox HJT etc on this account without it closing, so now back onto cleaning the computer

Heres a HJT log, need anything else just ask

Logfile of HijackThis v1.99.1
Scan saved at 12:07:55, on 08/07/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Thomson\SpeedTouchUSB\Dragdiag.exe
C:\Program Files\VIAudioi\SBADeck\ADeck.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\HijackThis\HJT.exe
C:\Program Files\internet explorer\iexplore.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.camelotherald.com/index.shtml
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {25AF27E3-075E-4E3E-828B-CBC106CDBF42} - C:\WINDOWS\system32\mljgh.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {53B5F2B1-94DD-43E5-8187-EB4E31F00701} - C:\WINDOWS\system32\gBOgT2F7.dll (file missing)
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouchUSB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [track monitor] C:\Program Files\MSN Track Monitor\msntrack.exe
O4 - HKLM\..\Run: [fafkbqpc.exe] C:\Documents and Settings\All Users\Application Data\fafkbqpc.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [Opso] "C:\WINDOWS\system32\RACLE~1\msconfig.exe" -vt yazb
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/ms ... b31267.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{25289900-7431-4DB5-A360-6F85BC0D0C4D}: NameServer = 205.188.146.145
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: winuns32 - winuns32.dll (file missing)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe (file missing)
O23 - Service: DomainService - Unknown owner - C:\WINDOWS\system32\wyjjwloj.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: IOHHTEABQN - Sysinternals - www.sysinternals.com - C:\DOCUME~1\Brad\LOCALS~1\Temp\IOHHTEABQN.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - Unknown owner - C:\WINDOWS\system32\HPZipm12.exe (file missing)
O23 - Service: USHDKJQ - Sysinternals - www.sysinternals.com - C:\DOCUME~1\Brad\LOCALS~1\Temp\USHDKJQ.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
O23 - Service: WMDM PMSP Service - Unknown owner - C:\WINDOWS\system32\MsPMSPSv.exe (file missing)

PCTech Forums

HJT Please Check

Who is online