Skip to main content
Start a Conversation

Unsolved

This post is more than 5 years old

lasareina

11 Posts

3791

July 19th, 2010 00:00

Windows Update problem code 80072efe, redirected google results, some internet pages not displaying

Hi,

I am having a problem sucessfully updating windows update. Also some of my google results are getting redirected to different links, and some pages were showing up as being unable to load due to no internet.

I have run a HiJack This scan, log included below. I am running Windows 7 Ultimate edition and IE 8. Please let me know if you need any further information.

I would be grateful for any help you could offer. Thanks! :)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 4:29:39 PM, on 19/07/2010
Platform: Windows 7  (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files\Dell\DellDock\DellDock.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\Dell DataSafe Online\DataSafeOnline.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Sensible Vision\Fast Access\FATrayMon.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\System32\p2phost.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\Sensible Vision\Fast Access\FATrayAlert.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10h_ActiveX.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\Internet Security\UfNavi.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\Internet Security\UfUpdUi.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.jp.msn.com/USCON/19
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Trend Micro Toolbar BHO - {43C6D902-A1C5-45c9-91F6-FD9E90337E18} - C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\TSToolbar.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: FAIESSO Helper Object - {A2F122DA-055F-4df7-8F24-7354DBDBA85B} - C:\Program Files\Sensible Vision\Fast Access\FAIESSO.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Trend Micro Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\TSToolbar.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [Dell DataSafe Online] "C:\Program Files\Dell DataSafe Online\DataSafeOnline.exe" /m
O4 - HKLM\..\Run: [dellsupportcenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P dellsupportcenter
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [QuickSet] C:\Program Files\Dell\QuickSet\QuickSet.exe
O4 - HKLM\..\Run: [UfSeAgnt.exe] "C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [FATrayAlert] C:\Program Files\Sensible Vision\Fast Access\FATrayMon.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [CollaborationHost] C:\Windows\system32\p2phost.exe -s
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - .DEFAULT User Startup: Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (User 'Default user')
O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\TSToolbar.dll
O20 - Winlogon Notify: FastAccess - C:\Program Files\Sensible Vision\Fast Access\FALogNot.dll
O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_4c73f4a9a59a84bb\aestsrv.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe
O23 - Service: FAService - Sensible Vision  - C:\Program Files\Sensible Vision\Fast Access\FAService.exe
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Trend Micro Central Control Component (SfCtlCom) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe
O23 - Service: SupportSoft Sprocket Service (DellSupportCenter) (sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_4c73f4a9a59a84bb\STacSV.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Trend Micro Unauthorized Change Prevention Service (TMBMServer) - Trend Micro Inc. - C:\Program Files\Trend Micro\BM\TMBMSRV.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (TmProxy) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\TmProxy.exe

--
End of file - 11079 bytes

kevin27_b3d29f

1.5K Posts

July 25th, 2010 12:00

Hi lasareina,

Welcome to the Dell Community Malware Removal Forum.

Sorry for the delay in getting to your thread.

If you still require assistance please post a fresh HJT log for me.

Thanks,
K27

lasareina

11 Posts

July 27th, 2010 02:00

Hi K27,

yes please would love some help. Still getting some pages refusing to load, and same error message when trying to update windows. Here is a fresh log...

 

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:02:49 PM, on 27/07/2010
Platform: Windows 7  (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Dell\DellDock\DellDock.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\Dell DataSafe Online\DataSafeOnline.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Sensible Vision\Fast Access\FATrayMon.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\System32\p2phost.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\Sensible Vision\Fast Access\FATrayAlert.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\msfeedssync.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.jp.msn.com/USCON/19
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Trend Micro Toolbar BHO - {43C6D902-A1C5-45c9-91F6-FD9E90337E18} - C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\TSToolbar.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: FAIESSO Helper Object - {A2F122DA-055F-4df7-8F24-7354DBDBA85B} - C:\Program Files\Sensible Vision\Fast Access\FAIESSO.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Trend Micro Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\TSToolbar.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [Dell DataSafe Online] "C:\Program Files\Dell DataSafe Online\DataSafeOnline.exe" /m
O4 - HKLM\..\Run: [dellsupportcenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P dellsupportcenter
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [QuickSet] C:\Program Files\Dell\QuickSet\QuickSet.exe
O4 - HKLM\..\Run: [UfSeAgnt.exe] "C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [FATrayAlert] C:\Program Files\Sensible Vision\Fast Access\FATrayMon.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [CollaborationHost] C:\Windows\system32\p2phost.exe -s
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - .DEFAULT User Startup: Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (User 'Default user')
O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {814EA0DA-E0D9-4AA4-833C-A1A6D38E79E9} (DASWebDownload Class) - http://das.microsoft.com/activate/cab/x86/i486/NTANSI/retail/DASAct.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\TSToolbar.dll
O20 - Winlogon Notify: FastAccess - C:\Program Files\Sensible Vision\Fast Access\FALogNot.dll
O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_4c73f4a9a59a84bb\aestsrv.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe
O23 - Service: FAService - Sensible Vision  - C:\Program Files\Sensible Vision\Fast Access\FAService.exe
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Trend Micro Central Control Component (SfCtlCom) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe
O23 - Service: SupportSoft Sprocket Service (DellSupportCenter) (sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_4c73f4a9a59a84bb\STacSV.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Trend Micro Unauthorized Change Prevention Service (TMBMServer) - Trend Micro Inc. - C:\Program Files\Trend Micro\BM\TMBMSRV.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (TmProxy) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\TmProxy.exe

--
End of file - 10875 bytes

 

Thanks for your help.

 

kevin27_b3d29f

1.5K Posts

July 27th, 2010 05:00

Hi lasareina

Your Welcom.

I'm K27 and i will be reviewing your log for you.

Please DO NOT run any scans/tools/fixes on your own as this will conflict with the tools we are going to use.

Please Print or Save to Notepad all instructions and please follow them carefully and if there's something you don't understand or that will not work please let me know and we will go through it together.

Please DO NOT use this system for anything apart from visiting this forum and other sites I direct you too, as this will only make the cleanup process all the more diffecult.

Failure to reply in three (3) days will result in this topic being closed and I will remove it from my notifications, If you require more time then that is fine but please let me know.

 

I need to see some additional information about what is happening in your machine.
Please perform the following scan:

  • Download DDS by sUBs from one of the following links. Save it to your desktop.
  • Double click on the DDS icon, allow it to run.
  • A small box will open, with an explanation about the tool.
  • When done, DDS will open two (2) logs
    1. DDS.txt
    2. Attach.txt
  • Save both reports to your desktop.
  • The instructions here ask you to attach the Attach.txt.
    DDS.jpg
  • Instead of attaching, please copy/past both logs into your next reply.

Please note: You may have to disable any script protection running if the scan fails to run.
After downloading the tool, disconnect from the internet and disable all antivirus protection.
Run the scan, enable your A/V and reconnect to the internet.
Information on A/V control here

 

YOU MUST DISABLE ALL REAL TIME PROTECTION BEFORE RUNNING THE NEXT TOOL,

Next, download this Antirootkit Program to a folder that you create such as C:\ARK, by choosing the "Download EXE" button on the webpage.

Please Disable all Anti-virus/Anti-Spyware/FireWall on your machine(instructions via links below)

 

Next, please perform a rootkit scan:

  • Double-click the randomly name EXE located in the C:\ARK folder that you just downloaded to launch it
  • When the program opens, it will automatically initiate a very fast scan of common rootkit hiding places.
  • When the "quick" scan is finished (a few seconds), click the Rootkit/Malware tab,and then select the Scan button.
  • Leave your system completely idle while this longer scan is in progress.
  • When the scan is done, save the scan log to the Windows clipboard
  • Open Notepad or a similar text editor
  • Paste the clipboard contents into a text file by clicking Edit | Paste or Ctl V
  • Exit the Program
  • Save the Scan log as ARK.txt and post it in your next reply.
  • Now, re-enable the active protection component of any antivirus/antimalware programs you disabled before performing the scan.

.
If the ARK tool crashes your machine or causes a Blue Screen error, please post the log results from the first inital quick scan,this can be saved in the same way as the full scan in the above instructions.

 

Please COPY/PASTE BOTH DDS logs and the ARK log back to this thread,
Thanks
K27

lasareina

11 Posts

July 27th, 2010 06:00

opps sorry double post...fixing hopefully.

lasareina

11 Posts

July 27th, 2010 06:00

Hi K27,

please find logs below...

 

DDS Log


DDS (Ver_10-03-17.01) - NTFSx86 
Run by Tess at 22:05:41.65 on Tue 27/07/2010
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Ultimate   6.1.7600.0.1252.61.1033.18.3067.1642 [GMT 10:00]


============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Program Files\Sensible Vision\Fast Access\FAService.exe
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_4c73f4a9a59a84bb\STacSV.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Program Files\Dell\DellDock\DockLogin.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_4c73f4a9a59a84bb\aestsrv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Dell\DellDock\DellDock.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\Dell DataSafe Online\DataSafeOnline.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Sensible Vision\Fast Access\FATrayMon.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\System32\p2phost.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\Sensible Vision\Fast Access\FATrayAlert.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Windows\system32\DllHost.exe
C:\Program Files\Trend Micro\Internet Security\TmPfw.exe
C:\Program Files\Trend Micro\Internet Security\TmProxy.exe
C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\ProToolbarUpdate.exe
C:\Windows\system32\conhost.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\Program Files\Trend Micro\BM\TMBMSRV.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Windows\system32\wuauclt.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe
C:\Windows\system32\AUDIODG.EXE
C:\Program Files\Microsoft Reader\MSReader.exe
C:\Program Files\Microsoft Office\Office12\WINWORD.EXE
C:\Program Files\Microsoft\Office Live\OfficeLiveSignIn.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\Tess\Desktop\dds.scr
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.com/ig?refresh=1
uInternet Settings,ProxyOverride = *.local
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: TSToolbarBHO: {43c6d902-a1c5-45c9-91f6-fd9e90337e18} - c:\program files\trend micro\trendsecure\tisprotoolbar\TSToolbar.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: FAIESSOHelper Class: {a2f122da-055f-4df7-8f24-7354dbdba85b} - c:\program files\sensible vision\fast access\FAIESSO.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll
TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll
TB: Trend Micro Toolbar: {ccac5586-44d7-4c43-b64a-f042461a97d2} - c:\program files\trend micro\trendsecure\tisprotoolbar\TSToolbar.dll
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [CollaborationHost] c:\windows\system32\p2phost.exe -s
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
uRun: [PC Suite Tray] "c:\program files\nokia\nokia pc suite 7\PCSuite.exe" -onlytray
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
mRun: [Dell DataSafe Online] "c:\program files\dell datasafe online\DataSafeOnline.exe" /m
mRun: [dellsupportcenter] "c:\program files\dell support center\bin\sprtcmd.exe" /P dellsupportcenter
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [Microsoft Default Manager] "c:\program files\microsoft\search enhancement pack\default manager\DefMgr.exe" -resume
mRun: [QuickSet] c:\program files\dell\quickset\QuickSet.exe
mRun: [UfSeAgnt.exe] "c:\program files\trend micro\internet security\UfSeAgnt.exe"
mRun: [FAStartup]
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [FATrayAlert] c:\program files\sensible vision\fast access\FATrayMon.exe
StartupFolder: c:\users\tess\appdata\roaming\micros~1\windows\startm~1\programs\startup\delldo~1.lnk - c:\program files\dell\delldock\DellDock.exe
StartupFolder: c:\users\tess\appdata\roaming\micros~1\windows\startm~1\programs\startup\onenot~1.lnk - c:\program files\microsoft office\office12\ONENOTEM.EXE
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\blueto~1.lnk - c:\program files\widcomm\bluetooth software\BTTray.exe
mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: Send image to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
DPF: {814EA0DA-E0D9-4AA4-833C-A1A6D38E79E9} - hxxp://das.microsoft.com/activate/cab/x86/i486/NTANSI/retail/DASAct.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Handler: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - c:\program files\trend micro\trendsecure\tisprotoolbar\TSToolbar.dll
Notify: FastAccess - c:\program files\sensible vision\fast access\FALogNot.dll
Notify: GoToAssist - c:\program files\citrix\gotoassist\514\G2AWinLogon.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
LSA: Notification Packages = scecli FAPassSync

============= SERVICES / DRIVERS ===============

R1 tmlwf;Trend Micro NDIS 6.0 Filter Driver;c:\windows\system32\drivers\tmlwf.sys [2009-7-30 146448]
R2 AESTFilters;Andrea ST Filters Service;c:\windows\system32\driverstore\filerepository\stwrt.inf_x86_neutral_4c73f4a9a59a84bb\AEstSrv.exe [2009-7-24 81920]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-8-18 176128]
R2 DockLoginService;Dock Login Service;c:\program files\dell\delldock\DockLogin.exe [2008-12-19 155648]
R2 FAService;FAService;c:\program files\sensible vision\fast access\FAService.exe [2010-4-4 2409800]
R2 tmpreflt;tmpreflt;c:\windows\system32\drivers\tmpreflt.sys [2010-4-24 36368]
R2 tmwfp;Trend Micro WFP Callout Driver;c:\windows\system32\drivers\tmwfp.sys [2009-7-30 283152]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\drivers\btwl2cap.sys [2009-7-24 29736]
R3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\drivers\CtClsFlt.sys [2009-7-24 143840]
R3 FACAP;facap, FastAccess Video Capture;c:\windows\system32\drivers\facap.sys [2008-9-24 232832]
R3 k57nd60x;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\k57nd60x.sys [2009-7-14 229888]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\drivers\netw5v32.sys [2009-6-11 4231168]
R3 OA008Ufd;Creative Camera OA008 Upper Filter Driver;c:\windows\system32\drivers\OA008Ufd.sys [2009-7-24 133472]
R3 OA008Vid;Creative Camera OA008 Function Driver;c:\windows\system32\drivers\OA008Vid.sys [2009-7-24 271616]
R3 tmevtmgr;tmevtmgr;c:\windows\system32\drivers\tmevtmgr.sys [2009-7-30 50704]
R3 TmPfw;Trend Micro Personal Firewall;c:\program files\trend micro\internet security\TmPfw.exe [2009-10-19 497008]
R3 TmProxy;Trend Micro Proxy Service;c:\program files\trend micro\internet security\TmProxy.exe [2009-10-19 689416]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-14 229888]
S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2010-3-3 1343400]

=============== Created Last 30 ================

2010-07-19 06:00:32 157066098 ----a-w- C:\regback.reg
2010-07-19 05:58:46 0 d-----w- c:\windows\system32\catroot2

==================== Find3M  ====================

2009-07-14 04:56:42 31548 ----a-w- c:\windows\inf\perflib\0409\perfd.dat
2009-07-14 04:56:42 31548 ----a-w- c:\windows\inf\perflib\0409\perfc.dat
2009-07-14 04:56:42 291294 ----a-w- c:\windows\inf\perflib\0409\perfi.dat
2009-07-14 04:56:42 291294 ----a-w- c:\windows\inf\perflib\0409\perfh.dat
2009-07-14 04:41:57 174 --sha-w- c:\program files\desktop.ini
2009-07-14 00:34:40 291294 ----a-w- c:\windows\inf\perflib\0000\perfi.dat
2009-07-14 00:34:40 291294 ----a-w- c:\windows\inf\perflib\0000\perfh.dat
2009-07-14 00:34:38 31548 ----a-w- c:\windows\inf\perflib\0000\perfd.dat
2009-07-14 00:34:38 31548 ----a-w- c:\windows\inf\perflib\0000\perfc.dat
2009-07-24 02:23:34 75 --sha-r- c:\windows\CT4CET.bin
2009-06-10 21:26:35 9633792 --sha-r- c:\windows\fonts\StaticCache.dat
2010-01-25 12:33:33 245760 --sha-w- c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\windows\ietldcache\index.dat
2009-07-14 01:14:45 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe

============= FINISH: 22:06:33.80 ===============

 

ATTACH LOG


UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_10-03-17.01)

Microsoft Windows 7 Ultimate
Boot Device: \Device\HarddiskVolume3
Install Date: 27/12/2009 10:05:38 PM
System Uptime: 27/07/2010 8:20:08 PM (2 hours ago)

Motherboard: Dell Inc. |  | 0C234M
Processor: Intel(R) Core(TM)2 Duo CPU     P8600  @ 2.40GHz | U2E1 | 2401/1066mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 451 GiB total, 330.525 GiB free.
D: is FIXED (NTFS) - 15 GiB total, 8.403 GiB free.
E: is CDROM ()

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP2: 29/12/2009 6:52:05 PM - Windows Update
RP3: 30/12/2009 6:45:49 PM - Installed FastAccess
RP5: 1/01/2010 12:22:23 PM - Restore point created by Trend Mico [0x00001101]
RP6: 11/01/2010 2:30:09 AM - Scheduled Checkpoint
RP7: 13/01/2010 6:11:36 PM - Windows Update
RP8: 17/01/2010 6:23:14 PM - Windows Update
RP10: 25/01/2010 7:47:37 PM - Windows Modules Installer
RP11: 28/01/2010 7:42:27 AM - Windows Update
RP12: 14/02/2010 4:59:21 PM - Windows Update
RP13: 28/02/2010 9:32:46 PM - Windows Update
RP14: 3/03/2010 3:02:21 PM - Windows Update
RP15: 10/03/2010 11:44:13 AM - Windows Update
RP16: 18/03/2010 12:41:51 AM - Scheduled Checkpoint
RP17: 28/03/2010 8:40:41 PM - Scheduled Checkpoint
RP18: 28/03/2010 11:14:58 PM - Windows Update
RP19: 6/04/2010 9:15:46 PM - Windows Update
RP20: 14/04/2010 7:52:26 PM - Scheduled Checkpoint
RP21: 22/04/2010 2:51:53 AM - Scheduled Checkpoint
RP22: 25/04/2010 7:18:55 PM - Windows Update
RP23: 10/05/2010 2:08:46 AM - Scheduled Checkpoint
RP24: 13/05/2010 1:39:42 PM - Windows Update
RP25: 24/05/2010 8:41:21 PM - Scheduled Checkpoint
RP26: 31/05/2010 10:27:38 AM - Installed FastAccess
RP27: 2/06/2010 9:28:58 AM - Windows Update
RP28: 11/06/2010 6:25:56 PM - Windows Update
RP29: 15/06/2010 2:29:28 PM - Installed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
RP30: 15/06/2010 2:31:52 PM - Installed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
RP32: 15/06/2010 2:33:26 PM - Installed DirectX
RP34: 15/06/2010 2:34:01 PM - Installed DirectX
RP36: 15/06/2010 2:34:39 PM - Installed DirectX
RP38: 15/06/2010 2:35:17 PM - Installed DirectX
RP40: 15/06/2010 2:35:53 PM - Installed DirectX
RP42: 15/06/2010 2:36:27 PM - Installed DirectX
RP43: 15/06/2010 2:37:02 PM - Installed Microsoft Primary Interoperability Assemblies 2005
RP44: 15/06/2010 2:39:11 PM - Installed Nero Multimedia Suite 10.
RP45: 17/06/2010 11:21:40 PM - Windows Modules Installer
RP46: 18/06/2010 2:15:45 AM - Restore Operation
RP47: 19/07/2010 4:19:07 PM - Installed HiJackThis

==== Installed Programs ======================

Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9.3.2
Advanced Audio FX Engine
Apple Application Support
Apple Mobile Device Support
Apple Software Update
ATI Catalyst Control Center
µTorrent
Bonjour
Catalyst Control Center - Branding
Catalyst Control Center Core Implementation
Catalyst Control Center Graphics Full Existing
Catalyst Control Center Graphics Full New
Catalyst Control Center Graphics Light
Catalyst Control Center Graphics Previews Common
Catalyst Control Center Graphics Previews Vista
Catalyst Control Center InstallProxy
Catalyst Control Center Localization Chinese Standard
Catalyst Control Center Localization Chinese Traditional
Catalyst Control Center Localization Danish
Catalyst Control Center Localization Dutch
Catalyst Control Center Localization Finnish
Catalyst Control Center Localization French
Catalyst Control Center Localization German
Catalyst Control Center Localization Italian
Catalyst Control Center Localization Japanese
Catalyst Control Center Localization Korean
Catalyst Control Center Localization Norwegian
Catalyst Control Center Localization Portuguese
Catalyst Control Center Localization Russian
Catalyst Control Center Localization Spanish
Catalyst Control Center Localization Swedish
ccc-core-static
ccc-utility
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
Compatibility Pack for the 2007 Office system
CutePDF Writer 2.8
Dell-eBay
Dell DataSafe Online
Dell Dock
Dell Edoc Viewer
Dell Getting Started Guide
Dell Support Center (Support Software)
Dell Video Chat
Dell Webcam Central
Duplicate Cleaner 1.3.2
FastAccess
GoToAssist 8.0.0.514
HiJackThis
House of Night Screensaver Screensaver
Integrated Webcam Driver (1.02.02.0106) 
iTunes
Java(TM) 6 Update 13
Junk Mail filter update
LimeWire 5.5.7
Live! Cam Avatar Creator
Macromedia Fireworks 8
Microsoft Application Error Reporting
Microsoft Choice Guard
Microsoft Default Manager
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office Home and Student 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office Live Add-in 1.5
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook Connector
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Suite Activation Assistant
Microsoft Office Word MUI (English) 2007
Microsoft Reader
Microsoft Search Enhancement Pack
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Sync Framework Runtime Native v1.0 (x86)
Microsoft Sync Framework Services Native v1.0 (x86)
Microsoft Visual C++ 2005 Redistributable
Microsoft Works
MSVC80_x86
MSVCRT
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Nokia Connectivity Cable Driver
Nokia PC Suite
Nokia Software Updater
OGA Notifier 2.0.0048.0
PC Connectivity Solution
PowerDVD DX
QuickSet
QuickTime
Roxio Creator Audio
Roxio Creator Copy
Roxio Creator Data
Roxio Creator DE
Roxio Creator Tools
Roxio Express Labeler 3
Roxio Update Manager
Safari
Security Update for 2007 Microsoft Office System (KB969559)
Security Update for 2007 Microsoft Office System (KB976321)
Security Update for 2007 Microsoft Office System (KB978380)
Security Update for Microsoft Office Excel 2007 (KB978382)
Security Update for Microsoft Office Outlook 2007 (KB972363)
Security Update for Microsoft Office PowerPoint 2007 (KB957789)
Security Update for Microsoft Office Publisher 2007 (KB980470)
Security Update for Microsoft Office system 2007 (972581)
Security Update for Microsoft Office system 2007 (KB969613)
Security Update for Microsoft Office system 2007 (KB974234)
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
Skins
Trend Micro Internet Security Pro
Update for 2007 Microsoft Office System (KB967642)
Update for 2007 Microsoft Office System (KB981715)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office Access 2007 Help (KB963663)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office InfoPath 2007 (KB976416)
Update for Microsoft Office Infopath 2007 Help (KB963662)
Update for Microsoft Office OneNote 2007 (KB980729)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Outlook 2007 Help (KB963677)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Publisher 2007 Help (KB963667)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 (KB974561)
Update for Microsoft Office Word 2007 Help (KB963665)
Update for Outlook 2007 Junk Email Filter (kb981726)
WIDCOMM Bluetooth Software 6.2.0.6600
Windows Driver Package - Nokia Modem  (02/23/2009 7.01.0.2)
Windows Driver Package - Nokia Modem  (02/24/2009 4.0)
Windows Driver Package - Nokia pccsmcfd  (08/22/2008 7.0.0.0)
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live ID Sign-in Assistant
Windows Live Mail
Windows Live Messenger
Windows Live Photo Gallery
Windows Live Sync
Windows Live Toolbar
Windows Live Upload Tool
Windows Live Writer

==== Event Viewer Messages From Past Week ========

27/07/2010 8:34:44 PM, Error: BTHUSB [17]  - The local Bluetooth adapter has failed in an undetermined manner and will not be used. The driver has been unloaded.
27/07/2010 8:34:43 PM, Error: atikmdag [43029]  - Display is not active
27/07/2010 5:57:43 PM, Error: Microsoft-Windows-DistributedCOM [10001]  - Unable to start a DCOM Server: {F87B28F1-DA9A-4F35-8EC0-800EFCF26B83} as /. The error: "5" Happened while starting this command: C:\Windows\System32\slui.exe -Embedding
27/07/2010 5:54:12 PM, Error: atikmdag [52236]  - CPLIB :: General - Invalid Parameter
24/07/2010 10:16:07 PM, Error: ACPI [13]  - : The embedded controller (EC) did not respond within the specified timeout period. This may indicate that there is an error in the EC hardware or firmware or that the BIOS is accessing the EC incorrectly. You should check with your computer manufacturer for an upgraded BIOS. In some situations, this error may cause the computer to function incorrectly.

==== End Of File ===========================

 

GMER LOG (LONG SCAN)

GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-07-27 22:18:13
Windows 6.1.7600
Running: m84j2grj.exe; Driver: C:\Users\Tess\AppData\Local\Temp\uxldqpod.sys


---- System - GMER 1.0.15 ----

SSDT            8A7A30A0                                                                                                                                            ZwCreateKey
SSDT            8A7A43E0                                                                                                                                            ZwCreateMutant
SSDT            8A7A22E0                                                                                                                                            ZwCreateProcess
SSDT            8A7A25A0                                                                                                                                            ZwCreateProcessEx
SSDT            8A7A3F00                                                                                                                                            ZwCreateThread
SSDT            8A7A40A0                                                                                                                                            ZwCreateThreadEx
SSDT            8A7A2860                                                                                                                                            ZwCreateUserProcess
SSDT            8A7A3620                                                                                                                                            ZwDeleteKey
SSDT            8A7A38E0                                                                                                                                            ZwDeleteValueKey
SSDT            8A7A4240                                                                                                                                            ZwLoadDriver
SSDT            8A7A2B20                                                                                                                                            ZwOpenProcess
SSDT            8A7A4580                                                                                                                                            ZwSetSystemInformation
SSDT            8A7A3360                                                                                                                                            ZwSetValueKey
SSDT            8A7A2DE0                                                                                                                                            ZwTerminateProcess
SSDT            8A7A3D60                                                                                                                                            ZwWriteVirtualMemory

INT 0x1F        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)                                                            83444AF8
INT 0x37        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)                                                            83444104
INT 0xC1        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)                                                            834443F4
INT 0xD1        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)                                                            8342C634
INT 0xD2        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)                                                            8342C898
INT 0xDF        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)                                                            834441DC
INT 0xE1        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)                                                            83444958
INT 0xE3        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)                                                            834446F8
INT 0xFD        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)                                                            83444F2C
INT 0xFE        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)                                                            834451A8

---- Kernel code sections - GMER 1.0.15 ----

.text           ntkrnlpa.exe!ZwSaveKeyEx + 13AD                                                                                                                     8305D599 1 Byte  [06]
.text           ntkrnlpa.exe!KiDispatchInterrupt + 5A2                                                                                                              83081F52 19 Bytes  [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text           ntkrnlpa.exe!RtlSidHashLookup + 308                                                                                                                 83089818 4 Bytes  [A0, 30, 7A, 8A]
.text           ntkrnlpa.exe!RtlSidHashLookup + 318                                                                                                                 83089828 4 Bytes  [E0, 43, 7A, 8A] {LOOPNZ 0x45; JP 0xffffffffffffff8e}
.text           ntkrnlpa.exe!RtlSidHashLookup + 32C                                                                                                                 8308983C 8 Bytes  [E0, 22, 7A, 8A, A0, 25, 7A, ...]
.text           ntkrnlpa.exe!RtlSidHashLookup + 34C                                                                                                                 8308985C 8 Bytes  [00, 3F, 7A, 8A, A0, 40, 7A, ...]
.text           ntkrnlpa.exe!RtlSidHashLookup + 364                                                                                                                 83089874 4 Bytes  [60, 28, 7A, 8A] {PUSHA ; SUB [EDX-0x76], BH}
.text           ...                                                                                                                                                
.text           C:\Windows\system32\DRIVERS\atikmdag.sys                                                                                                            section is writeable [0x9180C000, 0x2D5378, 0xE8000020]
.text           peauth.sys                                                                                                                                          A14CCC9D 28 Bytes  [4F, A3, 87, 07, 05, 08, FE, ...]
.text           peauth.sys                                                                                                                                          A14CCCC1 28 Bytes  [4F, A3, 87, 07, 05, 08, FE, ...]
PAGE            peauth.sys                                                                                                                                          A14D2B9B 72 Bytes  [E7, FB, AD, F7, 1B, 02, 5C, ...]
PAGE            peauth.sys                                                                                                                                          A14D2BEC 111 Bytes  [D0, C8, 2F, 07, 0F, 90, D2, ...]
PAGE            peauth.sys                                                                                                                                          A14D302C 102 Bytes  JMP AE522D04

---- User code sections - GMER 1.0.15 ----

.text           C:\Windows\system32\svchost.exe[1100] ntdll.dll!NtProtectVirtualMemory                                                                              77985360 5 Bytes  JMP 0036000A
.text           C:\Windows\system32\svchost.exe[1100] ntdll.dll!NtWriteVirtualMemory                                                                                77985EE0 5 Bytes  JMP 00B1000A
.text           C:\Windows\system32\svchost.exe[1100] ntdll.dll!KiUserExceptionDispatcher                                                                           77986448 5 Bytes  JMP 0027000A
.text           C:\Windows\system32\svchost.exe[1100] ole32.dll!CoCreateInstance                                                                                    772557FC 5 Bytes  JMP 00B7000A
.text           C:\Windows\system32\svchost.exe[1100] USER32.dll!GetCursorPos                                                                                       7710C198 5 Bytes  JMP 00BA000A
.text           C:\Windows\system32\wuauclt.exe[2396] ntdll.dll!NtProtectVirtualMemory                                                                              77985360 5 Bytes  JMP 0014000A
.text           C:\Windows\system32\wuauclt.exe[2396] ntdll.dll!NtWriteVirtualMemory                                                                                77985EE0 5 Bytes  JMP 0015000A
.text           C:\Windows\system32\wuauclt.exe[2396] ntdll.dll!KiUserExceptionDispatcher                                                                           77986448 5 Bytes  JMP 0012000A
.text           C:\Windows\Explorer.EXE[3148] ntdll.dll!NtProtectVirtualMemory                                                                                      77985360 5 Bytes  JMP 0062000A
.text           C:\Windows\Explorer.EXE[3148] ntdll.dll!NtWriteVirtualMemory                                                                                        77985EE0 5 Bytes  JMP 0063000A
.text           C:\Windows\Explorer.EXE[3148] ntdll.dll!KiUserExceptionDispatcher                                                                                   77986448 5 Bytes  JMP 0037000A
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] ntdll.dll!NtProtectVirtualMemory                                                              77985360 5 Bytes  JMP 005D000A
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] ntdll.dll!NtWriteVirtualMemory                                                                77985EE0 5 Bytes  JMP 005E000A
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] ntdll.dll!KiUserExceptionDispatcher                                                           77986448 5 Bytes  JMP 004C000A
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] USER32.dll!CreateDialogParamW                                                                 77109BFF 5 Bytes  JMP 6658C548 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] USER32.dll!EnableWindow                                                                       7710A72E 5 Bytes  JMP 6658C4C3 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] USER32.dll!GetAsyncKeyState                                                                   7710C09A 5 Bytes  JMP 6654D6C9 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] USER32.dll!UnhookWindowsHookEx                                                                7710CC7B 5 Bytes  JMP 666482FA C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] USER32.dll!CallNextHookEx                                                                     7710CC8F 5 Bytes  JMP 66629D00 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] USER32.dll!CreateWindowExW                                                                    77110E51 5 Bytes  JMP 666380F7 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] USER32.dll!SetWindowsHookExW                                                                  7711210A 5 Bytes  JMP 665E45DB C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] USER32.dll!GetKeyState                                                                        77114FDA 5 Bytes  JMP 6658D73A C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] USER32.dll!IsDialogMessageW                                                                   77116F06 5 Bytes  JMP 6655425C C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] USER32.dll!CreateDialogParamA                                                                 77123E79 5 Bytes  JMP 6675FE19 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] USER32.dll!IsDialogMessage                                                                    7712407A 5 Bytes  JMP 6675F6BA C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] USER32.dll!CreateDialogIndirectParamA                                                         77129110 5 Bytes  JMP 6675FE50 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] USER32.dll!CreateDialogIndirectParamW                                                         771308AD 5 Bytes  JMP 6675FE87 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] USER32.dll!DialogBoxIndirectParamW                                                            77134AA7 5 Bytes  JMP 6675F218 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] USER32.dll!EndDialog                                                                          7713555C 5 Bytes  JMP 66555AC1 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] USER32.dll!DialogBoxParamW                                                                    7713564A 5 Bytes  JMP 66554B7F C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] USER32.dll!SetKeyboardState                                                                   77136B52 5 Bytes  JMP 6675FA1F C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] USER32.dll!SendInput                                                                          77137055 5 Bytes  JMP 667605E8 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] USER32.dll!SetCursorPos                                                                       7714C1D8 5 Bytes  JMP 66760640 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] USER32.dll!DialogBoxParamA                                                                    7714CF6A 5 Bytes  JMP 6675F1B5 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] USER32.dll!DialogBoxIndirectParamA                                                            7714D29C 5 Bytes  JMP 6675F27B C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] USER32.dll!MessageBoxIndirectA                                                                7715E8C9 5 Bytes  JMP 6675F14A C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] USER32.dll!MessageBoxIndirectW                                                                7715E9C3 5 Bytes  JMP 6675F0DF C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] USER32.dll!MessageBoxExA                                                                      7715EA29 5 Bytes  JMP 6675F07D C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] USER32.dll!MessageBoxExW                                                                      7715EA4D 5 Bytes  JMP 6675F01B C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] USER32.dll!keybd_event                                                                        7715EC9B 5 Bytes  JMP 66760973 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] SHELL32.dll!SHChangeNotification_Lock + 45BA                                                  75F1B3E8 4 Bytes  [11, 36, 9E, 62]
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] SHELL32.dll!SHChangeNotification_Lock + 45C2                                                  75F1B3F0 8 Bytes  [5F, 35, 9E, 62, D0, 73, 9D, ...]
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] ole32.dll!OleLoadFromStream                                                                   77205B88 5 Bytes  JMP 6675F576 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] ole32.dll!CoCreateInstance                                                                    772557FC 5 Bytes  JMP 66638BE5 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[6104] ntdll.dll!NtProtectVirtualMemory                                                              77985360 5 Bytes  JMP 004E000A
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[6104] ntdll.dll!NtWriteVirtualMemory                                                                77985EE0 5 Bytes  JMP 004F000A
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[6104] ntdll.dll!KiUserExceptionDispatcher                                                           77986448 5 Bytes  JMP 002C000A
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[6104] USER32.dll!CreateWindowExW                                                                    77110E51 5 Bytes  JMP 666380F7 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[6104] USER32.dll!DialogBoxIndirectParamW                                                            77134AA7 5 Bytes  JMP 6675F218 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[6104] USER32.dll!DialogBoxParamW                                                                    7713564A 5 Bytes  JMP 66554B7F C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[6104] USER32.dll!DialogBoxParamA                                                                    7714CF6A 5 Bytes  JMP 6675F1B5 C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[6104] USER32.dll!DialogBoxIndirectParamA                                                            7714D29C 5 Bytes  JMP 6675F27B C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[6104] USER32.dll!MessageBoxIndirectA                                                                7715E8C9 5 Bytes  JMP 6675F14A C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[6104] USER32.dll!MessageBoxIndirectW                                                                7715E9C3 5 Bytes  JMP 6675F0DF C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[6104] USER32.dll!MessageBoxExA                                                                      7715EA29 5 Bytes  JMP 6675F07D C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\IEXPLORE.EXE[6104] USER32.dll!MessageBoxExW                                                                      7715EA4D 5 Bytes  JMP 6675F01B C:\Windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text           C:\Program Files\Microsoft Office\Office12\WINWORD.EXE[7760] kernel32.dll!SetUnhandledExceptionFilter                                               76EE3162 5 Bytes  JMP 5C965335 C:\Program Files\Common Files\Microsoft Shared\office12\mso.dll (2007 Microsoft Office component/Microsoft Corporation)

---- User IAT/EAT - GMER 1.0.15 ----

IAT             C:\Windows\Explorer.EXE[3148] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipAlloc]                                                                     [747A2494] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[3148] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusStartup]                                                                [74785624] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[3148] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusShutdown]                                                               [747856E2] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[3148] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipFree]                                                                      [747A250F] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[3148] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDeleteGraphics]                                                            [74798573] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[3148] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDisposeImage]                                                              [74794D27] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[3148] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageWidth]                                                             [747950CE] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[3148] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageHeight]                                                            [747951A3] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[3148] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromHBITMAP]                                                   [747966D0] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[3148] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateFromHDC]                                                             [747982CA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[3148] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetCompositingMode]                                                        [74798819] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[3148] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetInterpolationMode]                                                      [7479907A] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[3148] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDrawImageRectI]                                                            [7479E21D] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[3148] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCloneImage]                                                                [74794C59] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\ProToolbarUpdate.exe[3900] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress]   [759E5E25] C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation)
IAT             C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\ProToolbarUpdate.exe[3900] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress]     [759E5E25] C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation)
IAT             C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\ProToolbarUpdate.exe[3900] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress]    [759E5E25] C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation)
IAT             C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\ProToolbarUpdate.exe[3900] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress]  [759E5E25] C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation)
IAT             C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\ProToolbarUpdate.exe[3900] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress]   [759E5E25] C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation)
IAT             C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\ProToolbarUpdate.exe[3900] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!GetProcAddress]   [759E5E25] C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress]                              [629C9F14] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SearchPathW]                                   [629D3932] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW]                                [629D1ED3] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateProcessW]                                [629CC028] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SetCurrentDirectoryW]                          [629D3B9B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindClose]                                     [629D595C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW]                                 [629D47A8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW]                                [629D4EB8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExA]                                [629D1D43] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetPrivateProfileStringW]                      [629CF312] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress]                                [629C9F14] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW]                                  [629D1BBF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateFileW]                                   [629D06BA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!WritePrivateProfileStringW]                    [629CFAB6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW]                                 [629D1ED3] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA]                                   [629D1A3B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CopyFileW]                                      [629D0043] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!DeleteFileW]                                    [629D0CA0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!SearchPathW]                                    [629D3932] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW]                                   [629D1BBF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress]                                 [629C9F14] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CreateFileW]                                    [629D06BA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW]                                 [629D1BBF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!DeleteFileW]                                  [629D0CA0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!ReplaceFileW]                                 [629D2ADB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringA]                     [629CF1BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringW]                     [629CF312] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!WritePrivateProfileStringW]                   [629CFAB6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA]                                 [629D1A3B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW]                               [629D1ED3] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW]                               [629D4EB8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW]                                [629D47A8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesW]                           [629CDF55] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileW]                                  [629D06BA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathW]                                  [629D3932] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesW]                           [629CDCFA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesA]                           [629CDE25] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileA]                                  [629D0571] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress]                               [629C9F14] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA]                               [629D1D43] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesA]                           [629CDBCF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathA]                                  [629D41F1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindClose]                                    [629D595C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA]                                [629D4735] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA]                               [629D4B56] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRootA]                                   [629D823A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathStripToRootW]                              [629D89C0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsURLW]                                    [629D8584] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathFindOnPathW]                               [629D7E55] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHCreateStreamOnFileW]                         [629D8CD4] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHOpenRegStream2W]                             [629D90D9] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathCombineW]                                  [629D7C72] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteKeyA]                                  [629D8D26] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryW]                              [629D7F8E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryStringByKeyW]                        [629D794A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathCreateFromUrlW]                            [629D7D19] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathSkipRootW]                                 [629D8898] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathRelativePathToW]                           [629D86C0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathRemoveArgsW]                               [629D8760] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsContentTypeW]                            [629D7EF3] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegQueryUSValueW]                            [629D9B99] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegEnumUSKeyW]                               [629D958E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegOpenUSKeyA]                               [629D99D2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryEmptyW]                         [629D8026] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryA]                              [629D7F42] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathBuildRootA]                                [629D7AE4] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetPathW]                                 [629D97FC] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathCanonicalizeW]                             [629D7BD1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegSetPathW]                                 [629D9C52] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetUSValueW]                              [629D98B5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryKeyW]                                [629D77ED] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetBoolUSValueW]                          [629D96FD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRelativeW]                               [629D81EE] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsNetworkPathW]                            [629D80BE] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRootW]                                   [629D8286] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteKeyW]                                  [629D8D75] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathFileExistsW]                               [629D7DBA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHEnumValueW]                                  [629D8F70] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathStripPathW]                                [629D892C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegOpenUSKeyW]                               [629D9A2A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHQueryValueExW]                               [629D92E3] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHSetValueW]                                   [629D9E71] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteValueW]                                [629D8E16] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathBuildRootW]                                [629D7B33] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHGetValueW]                                   [629D9029] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryStringW]                             [629D789A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCW]                                    [629D83BC] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathMakeSystemFolderW]                         [629D861C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathUnExpandEnvStringsW]                       [629D8A5E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCServerW]                              [629D8454] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCServerShareW]                         [629D84EC] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetValueW]                                [629D9974] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHEnumKeyExW]                                  [629D8EBD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile]                            [629CD9AD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [USER32.dll!LoadImageW]                                     [629D0F2A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [USER32.dll!WinHelpW]                                       [629D1904] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [USER32.dll!PrivateExtractIconsW]                           [629D141F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA]                                 [629D1A3B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateHardLinkW]                              [629D09C2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileStringW]                   [629CFAB6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileSectionW]                  [629CF834] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionNamesW]               [629CF084] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileExW]                                  [629D27FF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW]                                 [629D1BBF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileStringW]                     [629CF312] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileIntW]                        [629CEB7A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameA]                            [629CE563] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!ReplaceFileW]                                 [629D2ADB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileW]                                    [629D27DA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetBinaryTypeW]                               [629CE901] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CopyFileW]                                    [629D0043] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionW]                    [629CEE02] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW]                                   [629D1BBF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA]                                   [629D1A3B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress]                               [629C9F14] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\IEXPLORE.EXE[5688] @ C:\Windows\System32\Secur32.dll [KERNEL32.dll!GetProcAddress]                               [629C9F14] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Microsoft Office\Office12\WINWORD.EXE[7760] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress]                       [759E5E25] C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation)
IAT             C:\Program Files\Microsoft Office\Office12\WINWORD.EXE[7760] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress]                          [759E5E25] C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation)
IAT             C:\Program Files\Microsoft Office\Office12\WINWORD.EXE[7760] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress]                         [759E5E25] C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation)
IAT             C:\Program Files\Microsoft Office\Office12\WINWORD.EXE[7760] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress]                        [759E5E25] C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation)
IAT             C:\Program Files\Microsoft Office\Office12\WINWORD.EXE[7760] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!GetProcAddress]                        [759E5E25] C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation)
IAT             C:\Program Files\Microsoft Office\Office12\WINWORD.EXE[7760] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress]                        [759E5E25] C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation)
IAT             C:\Program Files\Microsoft Office\Office12\WINWORD.EXE[7760] @ C:\Windows\system32\secur32.dll [KERNEL32.dll!GetProcAddress]                        [759E5E25] C:\Windows\system32\apphelp.dll (Application Compatibility Client Library/Microsoft Corporation)

---- Devices - GMER 1.0.15 ----

AttachedDevice  \Driver\kbdclass \Device\KeyboardClass0                                                                                                             Wdf01000.sys (Kernel Mode Driver Framework Runtime/Microsoft Corporation)

---- Registry - GMER 1.0.15 ----

Reg             HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\002556d87ba8                                                                        
Reg             HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Upgrade\LocalRadioSettings                                                                          
Reg             HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\002556d87ba8 (not active ControlSet)                                                    
Reg             HKLM\SYSTEM\ControlSet002\services\BTHPORT\Upgrade\LocalRadioSettings (not active ControlSet)                                                      

---- Disk sectors - GMER 1.0.15 ----

Disk            \Device\Harddisk0\DR0                                                                                                                               sector 01: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 02: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 03: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 04: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 05: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 06: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 07: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 08: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 09: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 10: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 11: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 12: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 13: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 14: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 15: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 16: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 17: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 18: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 19: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 20: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 21: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 22: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 23: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 24: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 25: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 26: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 27: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 28: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 29: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 30: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 31: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 32: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 33: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 34: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 35: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 36: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 37: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 38: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 39: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 40: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 41: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 42: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 43: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 44: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 45: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 46: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 47: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 48: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 49: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 50: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 51: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 52: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 53: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 54: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 55: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 56: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 57: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 58: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 59: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 60: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 61: copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 62: rootkit-like behavior; copy of MBR
Disk            \Device\Harddisk0\DR0                                                                                                                               sector 63: rootkit-like behavior; copy of MBR

---- EOF - GMER 1.0.15 ----

Thank you :)

kevin27_b3d29f

1.5K Posts

July 27th, 2010 14:00

Hi lasareina,

We need to check the master boot record for infection's.

 

After that I would like you to please download MBRCheck and save it directly to your Desktop

  • Double click MBRCheck.exe to run the tool answering yes to any prompt's you may receive from Windows
  • If a malicious MBR code is found DO NOT take any action against it, it will leave you with an unbootable machine and you will more than likely have to reinstall Windows
  • If a malicious code is found please type Y and then press Enter (NOTE: If no malicious code was found, please exit the programs and report that back to this thread)
  • Then please press 1 and then press enter
  • Then press zero (0) to get a dump file of your C:\ drive's MBR.
  • You will then be prompted to type a location to store the file, please type C:\mbrdump.txt and then press enter
  • Then type -1 to exit the program
  • A notepad file will then be on the desktop, Please copy/paste the contents of that file back to me for analysis. I would also like you to navigate to the file C:\MBRdump.txt and attach it in your next reply.

This can be done by clicking the option's box above the text box when you next reply, and then clicking the "Add/Update" button and then navigating to the dump file that you created at C:\mbrdump.txt

 

(NOTE: This program is not a toy and if used wrong, it may very well render your machine useless, DO NOT run this tool unless under the strict supervision of a trained analyst.)

EXTRA NOTE: If MBRCheck will not allow you to produce a dump file of your MBR, please exit the program and post the log that will be saved to the desktop

Please copy/paste the content's of the mbrcheck.txt file that will be save to the desktop and please attach the dump file located at C:\mbrdump.txt.


Thanks,
K27.

lasareina

11 Posts

July 28th, 2010 03:00

Hi K27,

Here is the log - it exited straight away after I typed Y Enter so I'm guessing there are no malicious codes found?

 

MBRCheck, version 1.1.1

(c) 2010, AD

 

\\.\C: --> \\.\PhysicalDrive0

\\.\D: --> \\.\PhysicalDrive0

 

      Size  Device Name          MBR Status

 

Thanks :)

  --------------------------------------------

    465 GB  \\.\PhysicalDrive0   Windows 7 MBR code detected

 

 

Done!  Press ENTER to exit...

 

kevin27_b3d29f

1.5K Posts

July 28th, 2010 08:00

Hi,

You are quite right that the MBR is not looking to be infected. But something is surely amiss.

  • Please download Rootkit Unhooker and save it to your desktop.
  • Double-click RKUnhookerLE.exe to run it.
  • Click the Report tab, then click Scan
  • Check Drivers, Stealth Code, Files, and Code Hooks
  • Uncheck the rest, then click OK
  • When prompted to Select Disks for Scan, make sure C:\ is checked and click OK
  • Wait till the scanner has finished then go File > Save Report
  • Save the report somewhere you can find it. Click Close
  • This log may be very large so please use more than one post it need be.

 

Note** you may get the following warning. It is ok, just ignore it.

"Rootkit Unhooker has detected a parasite inside itself!
It is recommended to remove parasite, okay?"

lasareina

11 Posts

July 30th, 2010 09:00

Ok here is the latest log...

 

RkU Version: 3.8.388.590, Type LE (SR2)
==============================================
OS Name: Windows 7
Version 6.1.7600
Number of processors #2
==============================================
>Drivers
==============================================
0x9180E000 C:\Windows\system32\DRIVERS\atikmdag.sys 5328896 bytes (ATI Technologies Inc., ATI Radeon Kernel Mode Driver)
0x91E3A000 C:\Windows\system32\DRIVERS\netw5v32.sys 4272128 bytes (Intel Corporation, Intel® Wireless WiFi Link Driver)
0x83056000 C:\Windows\system32\ntkrnlpa.exe 4259840 bytes (Microsoft Corporation, NT Kernel & System)
0x83056000 PnpManager 4259840 bytes
0x83056000 RAW 4259840 bytes
0x83056000 WMIxWDM 4259840 bytes
0x81E20000 Win32k 2400256 bytes
0x81E20000 C:\Windows\System32\win32k.sys 2400256 bytes (Microsoft Corporation, Multi-User Win32 Driver)
0xA1E08000 C:\Windows\system32\DRIVERS\tmwfp.sys 1744896 bytes (Trend Micro Inc., Trend Micro WFP callout Driver (i386-fre))
0x8B83E000 C:\Windows\System32\drivers\tcpip.sys 1347584 bytes (Microsoft Corporation, TCP/IP Driver)
0x8DE5D000 C:\Windows\system32\DRIVERS\vsapint.sys 1318912 bytes (Trend Micro Inc., VsapiNT )
0x84213000 C:\Windows\System32\Drivers\Ntfs.sys 1241088 bytes (Microsoft Corporation, NT File System Driver)
0x91D23000 C:\Windows\System32\drivers\dxgkrnl.sys 749568 bytes (Microsoft Corporation, DirectX Graphics Kernel)
0x8B631000 C:\Windows\system32\drivers\ndis.sys 749568 bytes (Microsoft Corporation, NDIS 6.20 driver)
0x836F8000 C:\Windows\system32\CI.dll 700416 bytes (Microsoft Corporation, Code Integrity Module)
0xA1604000 C:\Windows\system32\drivers\peauth.sys 618496 bytes (Microsoft Corporation, Protected Environment Authentication and Authorization Export Driver)
0x932A9000 C:\Windows\system32\drivers\HTTP.sys 544768 bytes (Microsoft Corporation, HTTP Protocol Stack)
0x9F039000 C:\Windows\system32\drivers\btwaudio.sys 528384 bytes (Broadcom Corporation., Bluetooth Audio Device)
0x83625000 C:\Windows\system32\mcupdate_GenuineIntel.dll 491520 bytes (Microsoft Corporation, Intel Microcode Update Library)
0xA1752000 C:\Windows\system32\drivers\btwavdt.sys 471040 bytes (Broadcom Corporation., Broadcom Bluetooth AVDT Service)
0x8400C000 C:\Windows\system32\drivers\Wdf01000.sys 462848 bytes (Microsoft Corporation, Kernel Mode Driver Framework Runtime)
0x95313000 C:\Windows\system32\DRIVERS\stwrt.sys 413696 bytes (IDT, Inc., IDT PC Audio)
0xA16D3000 C:\Windows\System32\Drivers\bthport.sys 409600 bytes (Microsoft Corporation, Bluetooth Bus Driver)
0x9121A000 C:\Windows\system32\drivers\csc.sys 409600 bytes (Microsoft Corporation, Windows Client Side Caching Driver)
0x84380000 C:\Windows\System32\Drivers\cng.sys 380928 bytes (Microsoft Corporation, Kernel Cryptography, Next Generation)
0x90455000 C:\Windows\system32\drivers\afd.sys 368640 bytes (Microsoft Corporation, Ancillary Function Driver for WinSock)
0x922F3000 C:\Windows\system32\DRIVERS\rixdptsk.sys 335872 bytes (REDC, RICOH XD SM Driver)
0x9F116000 C:\Windows\System32\DRIVERS\srv.sys 331776 bytes (Microsoft Corporation, Server driver)
0x9527B000 C:\Windows\system32\drivers\HdAudio.sys 327680 bytes (Microsoft Corporation, High Definition Audio Function Driver)
0x9F0C7000 C:\Windows\System32\DRIVERS\srv2.sys 323584 bytes (Microsoft Corporation, Smb 2.0 Server driver)
0x912FE000 C:\Windows\system32\DRIVERS\USBPORT.SYS 307200 bytes (Microsoft Corporation, USB 1.1 & 2.0 Port Driver)
0x8413A000 C:\Windows\System32\drivers\volmgrx.sys 307200 bytes (Microsoft Corporation, Volume Manager Extension Driver)
0x8DF9F000 C:\Windows\system32\DRIVERS\tmxpflt.sys 299008 bytes (Trend Micro Inc., Post Filter For XP)
0x8408B000 C:\Windows\system32\DRIVERS\ACPI.sys 294912 bytes (Microsoft Corporation, ACPI Driver for NT)
0x93240000 C:\Windows\system32\DRIVERS\nwifi.sys 286720 bytes (Microsoft Corporation, NativeWiFi Miniport Driver)
0x95226000 C:\Windows\system32\DRIVERS\usbhub.sys 278528 bytes (Microsoft Corporation, Default Hub Driver for USB)
0x95399000 C:\Windows\system32\DRIVERS\OA008Vid.sys 274432 bytes (Creative Technology Ltd., Video Capture Device Driver)
0x836B6000 C:\Windows\system32\CLFS.SYS 270336 bytes (Microsoft Corporation, Common Log File System Driver)
0x90573000 C:\Windows\system32\DRIVERS\rdbss.sys 266240 bytes (Microsoft Corporation, Redirected Drive Buffering SubSystem Driver)
0x8B9C1000 C:\Windows\system32\DRIVERS\volsnap.sys 258048 bytes (Microsoft Corporation, Volume Shadow Copy Driver)
0x8B6E8000 C:\Windows\system32\drivers\NETIO.SYS 253952 bytes (Microsoft Corporation, Network I/O Subsystem)
0x9224D000 C:\Windows\system32\DRIVERS\k57nd60x.sys 245760 bytes (Broadcom Corporation, Broadcom NetLink (TM) Gigabit Ethernet NDIS6.x Unified Driver.)
0x9337C000 C:\Windows\system32\DRIVERS\mrxsmb10.sys 241664 bytes (Microsoft Corporation, Longhorn SMB Downlevel SubRdr)
0x912C5000 C:\Windows\System32\drivers\dxgmms1.sys 233472 bytes (Microsoft Corporation, DirectX Graphics MMS)
0x9F000000 C:\Windows\system32\DRIVERS\facap.sys 229376 bytes (Sensible Vision , faCap WebCam Capture)
0x8301F000 ACPI_HAL 225280 bytes
0x8301F000 C:\Windows\system32\halmacpi.dll 225280 bytes (Microsoft Corporation, Hardware Abstraction Layer DLL)
0x837A3000 C:\Windows\system32\drivers\fltmgr.sys 212992 bytes (Microsoft Corporation, Microsoft Filesystem Filter Manager)
0x91358000 C:\Windows\system32\DRIVERS\ks.sys 212992 bytes (Microsoft Corporation, Kernel CSA Library)
0x8B75B000 C:\Windows\System32\DRIVERS\fvevol.sys 204800 bytes (Microsoft Corporation, BitLocker Drive Encryption Driver)
0x904AF000 C:\Windows\System32\DRIVERS\netbt.sys 204800 bytes (Microsoft Corporation, MBT Transport driver)
0x8B987000 C:\Windows\System32\drivers\fwpkclnt.sys 200704 bytes (Microsoft Corporation, FWP/IPsec Kernel-Mode API)
0x9236A000 C:\Windows\system32\DRIVERS\SynTP.sys 200704 bytes (Synaptics, Inc., Synaptics Touchpad Driver)
0x952CB000 C:\Windows\system32\drivers\portcls.sys 192512 bytes (Microsoft Corporation, Port Class (Class Driver for Port/Miniport Devices))
0x8B808000 C:\Windows\System32\drivers\rdyboost.sys 184320 bytes (Microsoft Corporation, ReadyBoost Driver)
0x92289000 C:\Windows\system32\DRIVERS\1394ohci.sys 180224 bytes (Microsoft Corporation, 1394 OpenHCI Driver)
0x933D2000 C:\Windows\system32\DRIVERS\tmcomm.sys 180224 bytes (Trend Micro Inc., TrendMicro Common Module)
0x84342000 C:\Windows\System32\Drivers\msrpc.sys 176128 bytes (Microsoft Corporation, Kernel Remote Procedure Call Provider)
0x9F167000 C:\Windows\System32\Drivers\fastfat.SYS 172032 bytes (Microsoft Corporation, Fast FAT File System Driver)
0x840E4000 C:\Windows\system32\DRIVERS\pci.sys 172032 bytes (Microsoft Corporation, NT Plug and Play PCI Enumerator)
0x90507000 C:\Windows\system32\DRIVERS\tmlwf.sys 155648 bytes (Trend Micro Inc., Trend Micro NDIS 6.0 Filter Driver (i386-fre))
0x8B79E000 C:\Windows\system32\DRIVERS\CLASSPNP.SYS 151552 bytes (Microsoft Corporation, SCSI Class System Dll)
0x8B726000 C:\Windows\System32\Drivers\ksecpkg.sys 151552 bytes (Microsoft Corporation, Kernel Security Support Provider Interface Packages)
0x9138C000 C:\Windows\system32\DRIVERS\CtClsFlt.sys 147456 bytes (Creative Technology Ltd., Video Class Upper Filter Driver)
0xA1FC4000 C:\Windows\system32\DRIVERS\rfcomm.sys 147456 bytes (Microsoft Corporation, Bluetooth RFCOMM Driver)
0x841B7000 C:\Windows\system32\DRIVERS\ataport.SYS 143360 bytes (Microsoft Corporation, ATAPI Driver Extension)
0x93359000 C:\Windows\system32\DRIVERS\mrxsmb.sys 143360 bytes (Microsoft Corporation, Windows NT SMB Minirdr)
0x913D3000 C:\Windows\system32\DRIVERS\ndiswan.sys 139264 bytes (Microsoft Corporation, MS PPP Framing Driver (Strong Encryption))
0x953DC000 C:\Windows\system32\DRIVERS\OA008Ufd.sys 135168 bytes (Creative Technology Ltd., Video Class Upper Filter Driver)
0xA16A5000 C:\Windows\System32\DRIVERS\srvnet.sys 135168 bytes (Microsoft Corporation, Server Network driver)
0x912A4000 C:\Windows\system32\DRIVERS\tunnel.sys 135168 bytes (Microsoft Corporation, Microsoft Tunnel Interface Driver)
0x83600000 C:\Windows\System32\drivers\VIDEOPRT.SYS 135168 bytes (Microsoft Corporation, Video Port Driver)
0x8B600000 C:\Windows\system32\DRIVERS\cdrom.sys 126976 bytes (Microsoft Corporation, SCSI CD-ROM Driver)
0x91DDA000 C:\Windows\system32\DRIVERS\HDAudBus.sys 126976 bytes (Microsoft Corporation, High Definition Audio Bus Driver)
0x904E8000 C:\Windows\system32\DRIVERS\pacer.sys 126976 bytes (Microsoft Corporation, QoS Packet Scheduler)
0x820B0000 C:\Windows\System32\cdd.dll 122880 bytes (Microsoft Corporation, Canonical Display Driver)
0xA1737000 C:\Windows\system32\DRIVERS\bthpan.sys 110592 bytes (Microsoft Corporation, Bluetooth Personal Area Networking)
0x8DE35000 C:\Windows\system32\drivers\luafv.sys 110592 bytes (Microsoft Corporation, LUA File Virtualization Filter Driver)
0x933B7000 C:\Windows\system32\DRIVERS\mrxsmb20.sys 110592 bytes (Microsoft Corporation, Longhorn SMB 2.0 Redirector)
0x93212000 C:\Windows\system32\drivers\WudfPf.sys 106496 bytes (Microsoft Corporation, Windows Driver Foundation - User-mode Driver Framework Platform Driver)
0x9332E000 C:\Windows\system32\DRIVERS\bowser.sys 102400 bytes (Microsoft Corporation, NT Lan Manager Datagram Receiver Driver)
0x952FA000 C:\Windows\system32\drivers\drmk.sys 102400 bytes (Microsoft Corporation, Microsoft Trusted Audio Drivers)
0x922B5000 C:\Windows\system32\DRIVERS\sdbus.sys 102400 bytes (Microsoft Corporation, SecureDigital Bus Driver)
0x9127E000 C:\Windows\System32\Drivers\dfsc.sys 98304 bytes (Microsoft Corporation, DFS Namespace Client Driver)
0x92345000 C:\Windows\system32\DRIVERS\i8042prt.sys 98304 bytes (Microsoft Corporation, i8042 Port Driver)
0x913B0000 C:\Windows\system32\DRIVERS\rasl2tp.sys 98304 bytes (Microsoft Corporation, RAS L2TP mini-port/call-manager driver)
0x91200000 C:\Windows\system32\DRIVERS\raspppoe.sys 98304 bytes (Microsoft Corporation, RAS PPPoE mini-port/call-manager driver)
0x905D4000 C:\Windows\system32\DRIVERS\raspptp.sys 94208 bytes (Microsoft Corporation, Peer-to-Peer Tunneling Protocol)
0x90400000 C:\Windows\system32\DRIVERS\rassstp.sys 94208 bytes (Microsoft Corporation, RAS SSTP Miniport Call Manager)
0x90433000 C:\Windows\system32\DRIVERS\tdx.sys 94208 bytes (Microsoft Corporation, TDI Translation Driver)
0x95382000 C:\Windows\system32\DRIVERS\usbccgp.sys 94208 bytes (Microsoft Corporation, USB Common Class Generic Parent Driver)
0x84198000 C:\Windows\System32\drivers\mountmgr.sys 90112 bytes (Microsoft Corporation, Mount Point Manager)
0x9F1A9000 C:\Windows\system32\DRIVERS\tmactmon.sys 90112 bytes (Trend Micro Inc., TrendMicro Activity Monitor Module)
0x9054E000 C:\Windows\system32\DRIVERS\tmtdi.sys 86016 bytes (Trend Micro Inc., Trend Micro TDI Driver (i386-fre))
0x922DF000 C:\Windows\system32\DRIVERS\rimsptsk.sys 81920 bytes (REDC, RICOH MS Driver)
0x8B7C3000 C:\Windows\system32\DRIVERS\HIDCLASS.SYS 77824 bytes (Microsoft Corporation, Hid Class Library)
0x8436D000 C:\Windows\System32\Drivers\ksecdd.sys 77824 bytes (Microsoft Corporation, Kernel Security Support Provider Interface)
0x93296000 C:\Windows\system32\DRIVERS\rspndr.sys 77824 bytes (Microsoft Corporation, Link-Layer Topology Responder Driver for NDIS 6)
0x9053B000 C:\Windows\system32\DRIVERS\wanarp.sys 77824 bytes (Microsoft Corporation, MS Remote Access and Routing ARP Driver)
0x923EA000 C:\Windows\system32\DRIVERS\AgileVpn.sys 73728 bytes (Microsoft Corporation, RAS Agile Vpn Miniport Call Manager)
0xA1FB2000 C:\Windows\System32\Drivers\BTHUSB.sys 73728 bytes (Microsoft Corporation, Bluetooth Miniport Driver)
0x923B0000 C:\Windows\system32\DRIVERS\intelppm.sys 73728 bytes (Microsoft Corporation, Processor Device Driver)
0x93347000 C:\Windows\System32\drivers\mpsdrv.sys 73728 bytes (Microsoft Corporation, Microsoft Protection Service Driver)
0x8B78D000 C:\Windows\system32\DRIVERS\disk.sys 69632 bytes (Microsoft Corporation, PnP Disk Driver)
0x8DE24000 C:\Windows\System32\Drivers\dump_dumpfve.sys 69632 bytes
0x837D7000 C:\Windows\system32\drivers\fileinfo.sys 69632 bytes (Microsoft Corporation, FileInfo Filter Driver)
0x9526A000 C:\Windows\System32\Drivers\NDProxy.SYS 69632 bytes (Microsoft Corporation, NDIS Proxy)
0x84119000 C:\Windows\System32\drivers\partmgr.sys 69632 bytes (Microsoft Corporation, Partition Management Driver)
0x8369D000 C:\Windows\system32\PSHED.dll 69632 bytes (Microsoft Corporation, Platform Specific Hardware Error Driver)
0x922CE000 C:\Windows\system32\DRIVERS\rimmptsk.sys 69632 bytes (REDC, RICOH SD Driver)
0x93230000 C:\Windows\system32\DRIVERS\lltdio.sys 65536 bytes (Microsoft Corporation, Link-Layer Topology Mapper I/O Driver)
0x8B74B000 C:\Windows\System32\Drivers\mup.sys 65536 bytes (Microsoft Corporation, Multiple UNC Provider Driver)
0x93286000 C:\Windows\system32\DRIVERS\ndisuio.sys 65536 bytes (Microsoft Corporation, NDIS User mode I/O driver)
0x90563000 C:\Windows\system32\DRIVERS\termdd.sys 65536 bytes (Microsoft Corporation, Remote Desktop Server Driver)
0x8412A000 C:\Windows\system32\DRIVERS\volmgr.sys 65536 bytes (Microsoft Corporation, Volume Manager Driver)
0x9F19A000 C:\Windows\system32\DRIVERS\tmevtmgr.sys 61440 bytes (Trend Micro Inc., TrendMicro Event Management Module)
0x91349000 C:\Windows\system32\DRIVERS\usbehci.sys 61440 bytes (Microsoft Corporation, EHCI eUSB Miniport Driver)
0x91296000 C:\Windows\system32\DRIVERS\blbdrive.sys 57344 bytes (Microsoft Corporation, BLB Drive Driver)
0x9052D000 C:\Windows\system32\DRIVERS\netbios.sys 57344 bytes (Microsoft Corporation, NetBIOS interface driver)
0x90425000 C:\Windows\System32\Drivers\Npfs.SYS 57344 bytes (Microsoft Corporation, NPFS Driver)
0x841E4000 C:\Windows\system32\DRIVERS\PCIIDEX.SYS 57344 bytes (Microsoft Corporation, PCI IDE Bus Driver Extension)
0x843DD000 C:\Windows\System32\drivers\pcw.sys 57344 bytes (Microsoft Corporation, Performance Counters for Windows Driver)
0x9F1CA000 C:\Windows\system32\DRIVERS\STREAM.SYS 57344 bytes (Microsoft Corporation, WDM CODEC Class Device Driver 2.0)
0x905EB000 C:\Windows\system32\DRIVERS\umbus.sys 57344 bytes (Microsoft Corporation, User-Mode Bus Enumerator)
0x8407D000 C:\Windows\system32\drivers\WDFLDR.SYS 57344 bytes (Microsoft Corporation, Kernel Mode Driver Framework Loader)
0xA1FE8000 C:\Windows\system32\DRIVERS\BthEnum.sys 53248 bytes (Microsoft Corporation, Bluetooth Bus Extender)
0x923CF000 C:\Windows\system32\DRIVERS\CompositeBus.sys 53248 bytes (Microsoft Corporation, Multi-Transport Composite Bus Enumerator)
0x8DE02000 C:\Windows\System32\Drivers\crashdmp.sys 53248 bytes (Microsoft Corporation, Crash Dump Driver)
0x9235D000 C:\Windows\system32\DRIVERS\kbdclass.sys 53248 bytes (Microsoft Corporation, Keyboard Class Driver)
0x9239D000 C:\Windows\system32\DRIVERS\mouclass.sys 53248 bytes (Microsoft Corporation, Mouse Class Driver)
0xA16C6000 C:\Windows\System32\drivers\tcpipreg.sys 53248 bytes (Microsoft Corporation, TCP/IP Registry Compatibility Driver)
0x8DE50000 C:\Windows\system32\DRIVERS\tmpreflt.sys 53248 bytes (Trend Micro Inc., Pre-Filter For XP)
0x84200000 C:\Windows\System32\drivers\watchdog.sys 53248 bytes (Microsoft Corporation, Watchdog Driver)
0x905C8000 C:\Windows\System32\drivers\discache.sys 49152 bytes (Microsoft Corporation, System Indexer/Cache Driver)
0x8B7D6000 C:\Windows\system32\DRIVERS\kbdhid.sys 49152 bytes (Microsoft Corporation, HID Keyboard Filter Driver)
0x843F4000 C:\Windows\System32\drivers\vga.sys 49152 bytes (Microsoft Corporation, VGA/Super VGA Video Driver)
0x8418D000 C:\Windows\system32\DRIVERS\BATTC.SYS 45056 bytes (Microsoft Corporation, Battery Class Driver)
0x8DE0F000 C:\Windows\System32\Drivers\dump_dumpata.sys 45056 bytes
0x9520B000 C:\Windows\system32\DRIVERS\hidusb.sys 45056 bytes (Microsoft Corporation, USB Miniport Driver for Input Devices)
0x95200000 C:\Windows\system32\DRIVERS\monitor.sys 45056 bytes (Microsoft Corporation, Monitor Driver)
0x8B7E2000 C:\Windows\system32\DRIVERS\mouhid.sys 45056 bytes (Microsoft Corporation, HID Mouse Filter Driver)
0x9041A000 C:\Windows\System32\Drivers\Msfs.SYS 45056 bytes (Microsoft Corporation, Mailslot driver)
0x913C8000 C:\Windows\system32\DRIVERS\ndistapi.sys 45056 bytes (Microsoft Corporation, NDIS 3.0 connection wrapper driver)
0x9044A000 C:\Windows\system32\DRIVERS\TDI.SYS 45056 bytes (Microsoft Corporation, TDI Wrapper)
0x91800000 C:\Windows\system32\DRIVERS\usbuhci.sys 45056 bytes (Microsoft Corporation, UHCI USB Miniport Driver)
0x8410E000 C:\Windows\system32\DRIVERS\vdrvroot.sys 45056 bytes (Microsoft Corporation, Virtual Drive Root Enumerator)
0x9F0BA000 C:\Windows\system32\DRIVERS\btwl2cap.sys 40960 bytes (Broadcom Corporation., Broadcom Bluetooth L2CAP Service)
0x8DE1A000 C:\Windows\System32\Drivers\dump_msahci.sys 40960 bytes
0x95378000 C:\Windows\System32\drivers\Dxapi.sys 40960 bytes (Microsoft Corporation, DirectX API Driver)
0x841DA000 C:\Windows\system32\DRIVERS\msahci.sys 40960 bytes (Microsoft Corporation, MS AHCI 1.0 Standard Driver)
0x905BE000 C:\Windows\system32\DRIVERS\mssmbios.sys 40960 bytes (Microsoft Corporation, System Management BIOS Driver)
0x905B4000 C:\Windows\system32\drivers\nsiproxy.sys 40960 bytes (Microsoft Corporation, NSI Proxy)
0x913F5000 C:\Windows\system32\DRIVERS\rdpbus.sys 40960 bytes (Microsoft Corporation, Microsoft RDP Bus Device driver)
0xA169B000 C:\Windows\System32\Drivers\secdrv.SYS 40960 bytes (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K., Macrovision SECURITY Driver)
0x841F2000 C:\Windows\system32\DRIVERS\amdxata.sys 36864 bytes (Advanced Micro Devices, Storage Filter Driver)
0x9F191000 C:\Windows\system32\DRIVERS\asyncmac.sys 36864 bytes (Microsoft Corporation, MS Remote Access serial network driver)
0x841AE000 C:\Windows\system32\DRIVERS\atapi.sys 36864 bytes (Microsoft Corporation, ATAPI IDE Miniport Driver)
0x843EB000 C:\Windows\System32\Drivers\Fs_Rec.sys 36864 bytes (Microsoft Corporation, File System Recognizer Driver)
0x9F1BF000 C:\Windows\System32\Drivers\Normandy.SYS 36864 bytes (RKU Driver)
0x84000000 C:\Windows\System32\Drivers\PxHelp20.sys 36864 bytes (Sonic Solutions, Px Engine Device Driver for Windows 2000/XP)
0x82080000 C:\Windows\System32\TSDDD.dll 36864 bytes (Microsoft Corporation, Framebuffer Display Driver)
0x8B9B8000 C:\Windows\system32\DRIVERS\vmstorfl.sys 36864 bytes (Microsoft Corporation, Virtual Storage Filter Driver)
0x923C2000 C:\Windows\system32\DRIVERS\wmiacpi.sys 36864 bytes (Microsoft Corporation, Windows Management Interface for ACPI)
0x840D3000 C:\Windows\system32\DRIVERS\WMILIB.SYS 36864 bytes (Microsoft Corporation, WMILIB WMI support library Dll)
0x836AE000 C:\Windows\system32\BOOTVID.dll 32768 bytes (Microsoft Corporation, VGA Boot Driver)
0x84185000 C:\Windows\system32\DRIVERS\compbatt.sys 32768 bytes (Microsoft Corporation, Composite Battery Driver)
0x8B835000 C:\Windows\System32\drivers\hwpolicy.sys 32768 bytes (Microsoft Corporation, Hardware Policy Driver)
0x80BA4000 C:\Windows\system32\kdcom.dll 32768 bytes (Microsoft Corporation, Serial Kernel Debugger)
0x840DC000 C:\Windows\system32\DRIVERS\msisadrv.sys 32768 bytes (Microsoft Corporation, ISA Driver)
0x8B7F6000 C:\Windows\System32\DRIVERS\RDPCDD.sys 32768 bytes (Microsoft Corporation, RDP Miniport)
0x837E8000 C:\Windows\system32\drivers\rdpencdd.sys 32768 bytes (Microsoft Corporation, RDP Encoder Miniport)
0x837F0000 C:\Windows\system32\drivers\rdprefmp.sys 32768 bytes (Microsoft Corporation, RDP Reflector Driver Miniport)
0x8B800000 C:\Windows\System32\Drivers\spldr.sys 32768 bytes (Microsoft Corporation, loader for security processor)
0x8B626000 C:\Windows\System32\Drivers\Beep.SYS 28672 bytes (Microsoft Corporation, BEEP Driver)
0x95216000 C:\Windows\system32\DRIVERS\HIDPARSE.SYS 28672 bytes (Microsoft Corporation, Hid Parsing Library)
0x8B61F000 C:\Windows\System32\Drivers\Null.SYS 28672 bytes (Microsoft Corporation, NULL Driver)
0x904E1000 C:\Windows\system32\DRIVERS\wfplwf.sys 28672 bytes (Microsoft Corporation, WFP NDIS 6.20 Lightweight Filter Driver)
0x923AA000 C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 24576 bytes (GEAR Software Inc., CD DVD Filter)
0x923CB000 C:\Windows\system32\DRIVERS\CmBatt.sys 16384 bytes (Microsoft Corporation, Control Method Battery Driver)
0x9F0C4000 C:\Windows\system32\DRIVERS\btwrchid.sys 12288 bytes (Broadcom Corporation., Bluetooth Remote Control HID Minidriver)
0x9F1D8000 C:\Windows\system32\drivers\MSPCLOCK.sys 8192 bytes (Microsoft Corporation, MS Proxy Clock)
0x9F1C8000 C:\Windows\system32\drivers\MSPQM.sys 8192 bytes (Microsoft Corporation, MS Proxy Quality Manager)
0x923FC000 C:\Windows\system32\DRIVERS\swenum.sys 8192 bytes (Microsoft Corporation, Plug and Play Software Device Enumerator)
0x9239B000 C:\Windows\system32\DRIVERS\USBD.SYS 8192 bytes (Microsoft Corporation, Universal Serial Bus Driver)
!!!!!!!!!!!Hidden driver:  0x8694CAEA ?_empty_? 1302 bytes
!!!!!!!!!!!Hidden driver:  0x86F0A850 ?_empty_? 0 bytes
==============================================
>Stealth
==============================================
0x841AE000 WARNING: suspicious driver modification [atapi.sys::0x8694CAEA]
0x10000000 Hidden Image-->UfSeAgnt.exe.mui [ EPROCESS 0x85D0D860 ] PID: 300, 114688 bytes
0x01AF0000 Hidden Image-->SupportSoft.Agent.Sprocket.dll [ EPROCESS 0x85EB4D40 ] PID: 2308, 28672 bytes
0x01470000 Hidden Image-->SupportSoft.Agent.Sprocket.SupportMessage.dll [ EPROCESS 0x85EB4D40 ] PID: 2308, 45056 bytes
0x8B631000 WARNING: Virus alike driver modification [ndis.sys], 749568 bytes
0x01420000 Hidden Image-->sprtmessage.dll [ EPROCESS 0x85EB4D40 ] PID: 2308, 77824 bytes
==============================================
>Files
==============================================
!-->[Hidden] C:\Program Files\Trend Micro\Internet Security\Log\31072010_TmPfw.log
!-->[Hidden] C:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex.146.Crwl
!-->[Hidden] C:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex.146.gthr
!-->[Hidden] C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_B28B3677.exe_73d37c10f8b4b156ca26efdf7ea28d8b56ffbcb_1a91867f\Report.wer
!-->[Hidden] C:\Users\Tess\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\30F7B429BB1DACA9B591B41E016BED66_D834AF5A25A091C0AEFC63C4C4001467
!-->[Hidden] C:\Users\Tess\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B78D0651A8251F3D1155DE2A3B10E5A5_4B03320AA2A15545057F4DA72ECDE881
!-->[Hidden] C:\Users\Tess\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\30F7B429BB1DACA9B591B41E016BED66_D834AF5A25A091C0AEFC63C4C4001467
!-->[Hidden] C:\Users\Tess\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B78D0651A8251F3D1155DE2A3B10E5A5_4B03320AA2A15545057F4DA72ECDE881
!-->[Hidden] C:\Users\Tess\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\10UMJET8\www.vodafone[1].xml
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\{4884B7DA-9BE6-11DF-92C5-002556D87BA8}.dat
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\{5D40A2E5-9BE0-11DF-92C5-002556D87BA8}.dat::$DATA
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\{9A8A7EE4-9BE5-11DF-92C5-002556D87BA8}.dat
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\{9A8A7EE7-9BE5-11DF-92C5-002556D87BA8}.dat
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\{9A8A7EE9-9BE5-11DF-92C5-002556D87BA8}.dat
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\{A3A0C74C-9BE1-11DF-92C5-002556D87BA8}.dat::$DATA
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\{A5336743-9BDE-11DF-92C5-002556D87BA8}.dat::$DATA
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\{A800A295-9BE3-11DF-92C5-002556D87BA8}.dat
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\{B4096883-9BE3-11DF-92C5-002556D87BA8}.dat
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\{C9B019A8-9BE6-11DF-92C5-002556D87BA8}.dat
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Internet Explorer\Recovery\Last Active\{BB3DD805-9BE3-11DF-92C5-002556D87BA8}.dat
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012010073120100801\index.dat
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\History\Low\History.IE5\MSHist012010073120100801\index.dat
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\APRL2ACG\favicon:emotion-29:.ico
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\APRL2ACG\favicon[9].ico
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BNP22OE2\favicon[7].ico
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SX33FMTX\BlobServer[2].ico
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SX33FMTX\favicon[3].ico
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WXJ91W17\favicon[7].ico
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WXJ91W17\favicon:emotion-29:.ico
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\1columnBorder[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\1columnFooter_v2[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\1[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\22px-Flag_of_Bangladesh.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\22px-Flag_of_Equatorial_Guinea.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\22px-Flag_of_Kenya.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\22px-Flag_of_Pakistan.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\22px-Flag_of_Spain.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\22px-Flag_of_the_Isle_of_Man.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\22px-Flag_of_the_Netherlands.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\22px-Flag_of_Turkey.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\22px-Flag_of_Ukraine.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\3g[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\3[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\421b1586b11992cbd6fa93a8979b170a[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\5[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\8[1].swf
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\ab1d344a070ee7c7bda8ba864dddd6e2ab739821_full_normal[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\actionCall_standard[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\af3c75e1630c355cc3f6907ee6d8dcc5[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\ajax-loader-bg[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\ajax-loader[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\AllBroadbandOffers[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\AllPost-PaidOffers[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\app_interface[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\arrow-grassGreen[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\arrow_black[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\base[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\bdv_rd[1].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\bdv_rd[2].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\bg-home-promo-a[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\bg-mn-dd-bt[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\bgtile[2].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\bg_grad[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\BlobServer[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\BlobServer[5].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\brisbane_3g[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\bris_DB[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\btn-login-go-a[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\btn_backtomobiles[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\btn_enlarge[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\btn_right[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\btn_seemobiles[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\business_hover[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\button_cursor[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\contentheading_bgtile[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\coverage[1].swf
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\cq[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\details_active_bgrd[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\dev_008204[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\dev_008220[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\dottedLine-refresh[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\drainage[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\ext-cart[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\fieldgroup[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\global[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\google_custom_search_watermark[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\greyLeft[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\handset_plan_Nokia-E72-grey[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\handset_plan_Nokia-X6[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\hdr_filteryoursearch[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\hdr_hotdeals[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\header_bg[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\header_bottom_border[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\header_brisbane[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\header_overlay[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\help_16[1]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\home[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\icon-price-d[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\icon-promo-rotator-active[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\icon_p3[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\idd_logo[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\ie8[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\image[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\jquery.ajax.cart[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\jquery[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\key_newCoverage[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\left_cnr_bot_w[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\link-myspace[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\login-btn[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\logo_Entrust[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\lr[1].php
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\m150024stg_Nokia_E63_Black_Small[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\m460011stg_Nokia_5230_Small[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\m610002stg_Sweet_Deal_Mobiles[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\m700010stg_3store_iPhone4_large[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\main[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\map2g_small[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\map3g_default[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\map3g_default[2].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\map3g_small[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\mediacentre[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\mobileplan_mcap2[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\mobiles[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\mootools-yui-compressed[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\new[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\Nokia-N900[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\numbering-b[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\october[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\online_store_Spotlight[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\pct_mx[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\pic_red_nt[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\pic_red_qld[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\plugins.combined.min[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\presentation_tables[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\purple-sign-up[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\p[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\p_834014675=4CA5K3P0B.txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\p_834014675=4[10].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\p_834014675=4[11].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\p_834014675=4:emotion-14:.txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\p_834014675=4[7].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\p_834014675=4:emotion-29:.txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\p_834014675=4[9].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\quote-image-daily269[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\rating-4_3[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\RE4PIC9hKEAJ[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\redRight_v2[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\rightSideBase_tile[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\right_cnr_b[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\rv_boxbase2[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\rv_boxtop2b[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\search-ltr[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\search[2].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\search[4]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\search[5]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\second-level-nav-item[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\shadowbox-en[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\shadowbox-html[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\shadowbox-iframe[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\sizzle[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\soho-light[1].swf
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\SprySlidingPanels[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\SprySlidingPanels[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\standard[1]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\swfobject[2].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\tab-normal-fade[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\tab_2g[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\td5_bg_newFSM2[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\td_col5[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\td_col6[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\td_col7[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\td_monthlycost[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\td_phonedetails[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\thickbox[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\titlemobile[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\titlemobile_clearcap_res[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\unlimited_capsBar[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\user[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\vcadr-scode[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\Vector.combined.min[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\13WAMIJV\widget41[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\009831d3d7f9769084fe695a9d7e699b[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\1columnFooter[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\22px-Flag_of_El_Salvador.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\22px-Flag_of_Lesotho.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\22px-Flag_of_Sweden.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\22px-Flag_of_the_United_States.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\22px-Flag_of_Togo.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\22px-Flag_of_Venezuela.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\55d9332b9651a7f897940cc37018a1d8[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\a14e3eaedebe32ada906bfd5510fbd17[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\aapt-core[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\aaptIE[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\actionCall_850[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\agm_10.Par.86657.Image.o[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\ajax-loader[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\arrow_mobilePlans[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\AuthenticationService[2].Authenticate
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\bazaarvoice[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\bazaarvoice[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\bg-col-a[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\bg-sidebar-top-b[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\bg[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\bg_field_inner[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\bg_grad[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\BlobServer[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\BlobServer[4].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\Broadband_Heading[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\btn-search-go-a[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\btn_retrievecart[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\btn_seeonvoda[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\bullet-a[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\business.Par.73615.Image.o[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\callnow[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\cap_19[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\clearcap-cheap-mobile-handset-deals[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\combined.min[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\combo-caps-plus[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\common[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\compat[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\ContentServer[2].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\control_bookmark_btn[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\core[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\coverage[1].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\coverage_table01[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\DBL[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\default[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\dev_008161[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\dev_008163[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\dev_008211[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\dev_008212[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\dev_008219[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\dev_008221[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\divider_bar_2px[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\global[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\handset_details_Nokia-E72-grey[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\hdr_mobiles[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\header-starter-kit[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\headerlinks_vert[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\home_hover[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\icon_international[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\iepngfix[1].htc
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\iepngfix[2].htc
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\images.Par.95329.Image.o[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\image[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\index[1].php
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\jquery-latest[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\jquery-ui-1.7.2[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\jquery.min[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\jquery.scrollable[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\jquery.selectboxes[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\jqzoom[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\key_3gRoaming[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\logo[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\lozenge_email[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\m10006_icon_barphone[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\m10010_icon_slidephone[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\m210006stg_50-Credit-Sticker[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\m390031stg_INQ_Mini_Small[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\m390040stg_Samsung_Jet_Small[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\m540048stg_Blackberry_Storm_2_Black_Small[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\m560016stg_Unlimited-Pack-119-Small[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\m605779imp_cap_69_large[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\m605786imp_cap_79_large[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\m630006stg_Sony_Ericsson_Elm_Black_Small[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\m710012stg_3store_SamsungWave_small[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\m90062stg_Nokia_E63_Red_Small[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\main-nav[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\main[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\map2g_small[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\map3g_default[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\map3g_small[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\mblDtl_td_col1[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\mblDtl_td_col8[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\mobilePlansDefinition[1].xml
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\mobile[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\mooflow[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\mwsuggest[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\navBottom[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\nav_bg[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\networkCoverage_banner[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\next[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\node[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\Nokia-N900_0[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\NSW[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\numbering-c[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\offer-iphone4a[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\offer-members-lounge[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\pic_red_nsw[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\pixel[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\portal-break[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\Post-Paid_heading[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\p[2].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\p_834014675=4CA3ZL0PL.txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\p_834014675=4CAOFJ10K.txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\p_834014675=4CAZHPCCN.txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\p_834014675=4[11].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\qld_2g[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\qld_3g_db[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\qld_3g_sb[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\quicknav_bgtile[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\rating-4_5[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\redLeft_v2[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\Refine[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\reset[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\results[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\rightSideContainerHeader[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\rightSideContainerTile[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\safeSecure_img[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\search[10]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\search[1].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\search:emotion-29:
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\search[9]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\shared[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\site-search-btn[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\site[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\Sony-Ericson-X10[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\sponsorship[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\subhead_empty[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\s[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\s_code[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\TABS_DualBand_Over[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\td4_bg_new[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\td5_bg_newFSM[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\td_col1[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\td_memory[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\td_sub_col4[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\three_com_au[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\tick2[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\title-19[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\tpgmobile_header[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\vcadr-testing[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\viewlarger_green[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\viewlarger_red[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\vodafone[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4MGBYIM7\what_vodafone_is_doing.Par.95032.Image.o[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\$49%20Cap[1].xml
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\1columnBorder_v2[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\1[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\22px-Flag_of_Guatemala.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\22px-Flag_of_Hong_Kong.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\22px-Flag_of_Malta.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\22px-Flag_of_Mozambique.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\22px-Flag_of_Norway.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\22px-Flag_of_Thailand.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\22px-Flag_of_the_Czech_Republic.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\22px-Flag_of_the_United_Kingdom.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\3445[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\AppShell.1.2.2[1].swf
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\aqua_blue_bullet_trans[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\arrow_planet3[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\backgroundContainerTile[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\background_lowerlevel[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\bg-mn-dd-tp[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\bg-sidebar-bottom-b[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\bg_nav[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\BlobServer[1].xml
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\BlobServer[9].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\blue_bullet_trans[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\bullet-b[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\business.Par.17747.Image.-1[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\buyOnline_heading[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\cap_39[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\cap_79[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\cart_bottom[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\centralnotice[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\change_maps[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\chattous[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\combo-caps-stick[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\content[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\costpermonth_gradbg[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\dark_blue_bullet_trans[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\defaults[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\dev_007910[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\dev_007911[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\dev_008036[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\dev_008164[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\dev_008214[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\dev_008215[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\dev_008217[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\dev_008218[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\dev_008249[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\drupal[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\feature-nav[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\greyRight[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\handset_details_Motorola-W173[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\handset_details_Nokia-2730[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\handset_plan_Nokia-N97-mini-black[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\hdr_costpermonth[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\hdr_features[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\header_clearcap_res[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\hero-bonus-bank[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\history[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\hover[1].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\icon-price-b[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\icons[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\ie6[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\image[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\index[1].php
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\jfn[2].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\jquery[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\keepNumber_img[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\list-a-item-c[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\loadingAnimation[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\logo[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\m10083_icon_flipphone[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\m330107stg_Nokia_N97_Front_Main_Small[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\m50096stg_Samsun_F480_Grey_Small[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\m560036stg_3store_BlackberryStorm9500_black_small[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\m660006stg_LG_Mini_Small[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\m680009stg_3store_SamsungB5310_small[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\m710021stg_postpaid_disc_header_new2[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\m720038stg_Mobile_images_small[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\m80009stg_F480_Pink_Small[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\mailsms[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\map2g_default[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\map2g_small[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\map3g_default[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\map3g_small[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\Map[1].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\mobileplan_mcap3[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\MobileRedirect[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\mobile_clearcap[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\mobile_specs_phonebg[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\N2730classic[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\N6700[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\nsw_DB[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\offtab_gradient[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\optus_logo[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\pageTile[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\personal_hover[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\phone07[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\phone_postpaid_offer-se-vivaz[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\phone_prepaid_offer[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\pic_red_sa[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\pic_red_vic[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\pic_red_wa[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\plan-bar-indicator-blue[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\plan-nav[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\PlansDetails[1].aspx
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\plans[1].html
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\poweredby_mediawiki_88x31[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\presentation_specific[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\print_main[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\print_presentation_content[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\promo-control-a[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\purpleLeft[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\p[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\p_834014675=4CAG52SDX.txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\p_834014675=4CAKKV4R6.txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\p_834014675=4[11].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\quicknav_bg[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\red_arrow_footer[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\resizer[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\rightNavCap[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\search[10]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\search[11]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\search[9]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\shadowbox-iframe[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\shadowbox-jquery[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\shadowbox[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\shadowbox[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\shareBar[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\site-nav[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\Sony-Ericson-Blue[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\standard[2]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\s_code[3].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\tab-current-fade[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\tagline-19[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\td1_bg[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\td6_bg[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\td_blank2[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\td_col1_bot[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\td_col2[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\td_col3[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\td_col4[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\td_specialoffer_c[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\td_whatyouget[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\td_youpay[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\title-20[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\translucent[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\user-icon[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\vcadr-adserver[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\vert_divider[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\vgn-ext-templating[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\viewlarger_orange[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\what_vodafone_is_doing.Par.92341.Image.o[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HPZJLQY9\wifi-modem[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\22px-Flag_of_Cameroon.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\22px-Flag_of_France.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\22px-Flag_of_Hungary.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\22px-Flag_of_Jersey.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\22px-Flag_of_Malaysia.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\22px-Flag_of_Panama.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\22px-Flag_of_Qatar.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\22px-Flag_of_Senegal.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\22px-Flag_of_Sudan.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\22px-Flag_of_the_Turkish_Republic_of_Northern_Cyprus.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\4f338ba93e58dba341760663209a9ddc[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\aapt-main-sprite[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\about_active[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\ajaxcart[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\AllPre-PaidOffers[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\applicationTitle[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\arrow-down[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\arrowbg[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\arrow_black[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\back[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\bdvclkv2_4[1].swf
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\bg-body[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\bg-feature-template[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\bg-general-content-template[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\bg-header-a[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\bgbtm[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\BlobServerCA163KBQ.gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\BlobServerCAEKY0CH.gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\BlobServerCASXIYUV.gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\BlobServerCATW4CAN.gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\BlobServer[10].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\BlobServer[11].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\BlobServer[4].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\BlobServer[9].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\broadband[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\btn_addtocart_small[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\bullet_li[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\business[2].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\caps[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\cap_29[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\cap_99_new[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\clear[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\close[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\common[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\compare-mobiles[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\ContentServer[1].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\coveragemap[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\curtains[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\curtains[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\default[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\details_bgrd[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\ext-cart-in[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\feature-promo-1-month[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\feature-promo-3-months[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\feature-promo-img-iPhone4[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\feature-promo-smartphone[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\formatting_alt[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\framework_3.1.0.2710[1].swz
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\global[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\handset_plan_Nokia-2690-white[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\hdr_features2[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\hdr_why3[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\help_hover[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\home[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\home_icon[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\hotdeals[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\ie7[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\iepngfix_tilebg[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\images.Par.3142.Image.o[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\index[1].php
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\index[2].php
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\iPhone[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\jquery-1.4.2[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\jquery-cookie[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\jquery-genericFlash_handler[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\jquery-ui.min[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\jquery.scrollTo-min[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\jquery[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\key_noCoverage[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\largetab_red[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\legend_coverage[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\linkimage[1].php
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\list-a-item-b[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\list-a-item-d[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\List_of_mobile_network_operators[1].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\loadingAnimation[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\login_bg[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\logo[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\m10018_filter_cap_049_greyed[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\m260012stg_Apple_iPhone_Cap_$39_Large[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\m605766imp_cap_29_large[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\m605770imp_cap_39_large[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\m700004stg_3store_iPhone4_small[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\m70009bu_filter_cap_069_greyed[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\m80003bu_filter_cap_79_greyed[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\main[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\main[2].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\main[3].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\map2g_default[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\map2g_small[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\map3g_default[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\map3g_small[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\masthead-keyline[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\mbox-scroller[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\mbox[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\mobileplan_mcap1[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\new[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\next[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\notifierclient[1].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\ontab_gradient[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\Page[1].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\page_top[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\pause[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\pct_mx[2].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\plan-label-sms[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\plan-label-voice[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\play[2].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\PN_NetworkCoverage[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\Pre-Paid_heading[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\prepaid[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\price[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\pricing[1].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\print[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\p_834014675=4[10].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\p_834014675=4:emotion-14:.txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\p_834014675=4[7].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\p_834014675=4:emotion-29:.txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\p_834014675=4[9].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\qld_3g[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\redLeftnoShadow[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\res-mCap2[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\res-mCap3[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\right_cnr_bot_w[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\rollover[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\screen[2].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\search:emotion-14:
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\search[7]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\see-more-mobile-plans_long[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\shadowbox-en[2].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\shadowbox-swf[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\site_template[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\sizzle[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\skin_fetch[2].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\slimbox[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\socialicons[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\spacer_tile[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\SpryTabbedPanels[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\standard[2]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\standard[3]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\swfobject[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\swfobject[2].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\s_code[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\tabsonly[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\TABS_3G_Over[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\tab_3g_over[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\tagline-8[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\td_blank[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\tools[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\topnav_bg[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\tpgmobile_header_long[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\transparent[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\ttl-network_coverage[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\vcadr-vars[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\vodafone_unavailable[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\we-can-call-you-back_mobile[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HVYGTB1Z\wikimedia-button[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\0d8dbc4beceffc7f669f7591ce24b8e8[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\22px-Flag_of_Argentina.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\22px-Flag_of_Australia.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\22px-Flag_of_Austria.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\22px-Flag_of_Botswana.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\22px-Flag_of_Italy.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\22px-Flag_of_Montenegro.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\22px-Flag_of_Peru.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\22px-Flag_of_Portugal.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\22px-Flag_of_the_Seychelles.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\23227_1484294958_9059_q[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\3columnBorder[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\41488_1668090645_2706_q[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\498c71de3a7cc081000c973d752332a5[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\64209200acaa4176ddb5d81008770b5a[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\8643393da0c9b297a178bb479ee5fda4[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\91dc0af8df0ebe84601364eab4dba0dd[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\about[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\addthis_widget[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\ajax[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\arrow-grey-refresh[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\arrow-right[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\arrow_international[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\banners[1].xml
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\bd47521201a48a6a17a47113c5aa1932[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\Bean_Counter_115x358[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\bg-promo-link-a[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\bg-sn-sl-tp[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\bgtile[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\BlobServer[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\BlobServer[2].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\BlobServer[5].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\bodyspan[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\books[2].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\brand[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\btn_search[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\bullet-dk-blue[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\callsandmore[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\cappermonth_bg[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\cap_119_new[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\cap_49[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\carticon[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\close_nor[1]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\collapse_nor[2]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\common[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\Config[1].xml
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\csshover[1].htc
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\details_active_bottom_bgrd[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\expand_nor[2]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\footer_logo[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\freeDelivery_img[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\freestuff[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\gettweet-homepage[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\globalnav_image_funcs[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\handset_details_Nokia-N97-black[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\handset_details_Nokia-X6-black[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\hdr_broadband[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\hdr_pricing_options[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\history[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\icon_mbbPlans[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\icon_speechbubble[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\index[1].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\index[1].php
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\ipv4[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\jquery-1.3.2.min[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\jquery.validationEngine-en[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\jquery.validationEngine[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\jquery[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\jqzoom.pack.1.0.1[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\know_more[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\leftNavCap[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\left_cnr_top_w[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\link-digg[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\logo-small[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\m160029stg_Samsung_B2700_Small[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\m250028stg_Sony_Ericsson_T707_Black_Small[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\m540006stg_Nokia_N97_Mini_Black_Small[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\m605774imp_cap_49_large[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\m650085stg_blackberry_9700_white_small[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\m680002stg__119Unlimited_Grey_Lozenge_small[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\m70018bu_filter_cap_99_greyed[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\main[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\map2g_default[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\map2g_default[2].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\map2g_default[3].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\map2g_small[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\MembersLogin_title[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\mobilebanner-already-have-a-handset[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\mobilebanner-generous-call-value[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\mobilebanner-low-monthly-fees[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\mobilebanner-view-more-handsets[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\mobile[1].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\moblie_bg[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\network-coverage[1].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\offer-c1[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\ontab[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\ontab_divider[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\openwin[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\pin_bg[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\postpaid_disc_header_new2[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\previous[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\print_default[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\p_834014675=4[10].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\p_834014675=4[11].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\p_834014675=4[7].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\p_834014675=4:emotion-29:.txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\p_834014675=4[9].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\quicknav_bg[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\rating-4_4[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\rightSideBase_cnr[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\right_cnr[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\rules[1].php
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\rules[2].php
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\search[1].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\search[1].json
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\search[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\search:emotion-14:
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\search[7]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\search:emotion-29:
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\search_but_inner[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\segment_header_About[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\shadowbox-wmp[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\singtel[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\site[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\skin_fetch[2].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\skin_xml_to_css[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\Sony-Ericson-Mini[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\spacer[2].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\SpryData[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\SpryHTMLDataSet[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\standard[2]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\standard[3]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\system[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\tab-break[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\tabswelcome[1]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\tab_r_on[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\td_sub_col1[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\td_sub_col6[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\thickbox[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\tick[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\title-7[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\twitterbg[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\ubrowser[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\uc_order[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\uc_product[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\uc_store[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\unlimited_caps_header[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\validationEngine.jquery[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\vcacustom_iphone[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\vert_divider[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\vodafone_logo[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\wikibits[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\youget[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\I315QKPF\youpay[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\22px-Flag_of_Brazil.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\22px-Flag_of_Cote_d'Ivoire.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\22px-Flag_of_Denmark.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\22px-Flag_of_Fiji.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\22px-Flag_of_Guernsey.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\22px-Flag_of_India.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\22px-Flag_of_Liechtenstein.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\22px-Flag_of_Morocco.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\22px-Flag_of_New_Zealand.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\23098_569376836_2482_q[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\231_46730262_admarketplace_com[1].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\3columnBorder_v2[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\3columnFooter_v2[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\3shop-sitecatalyst-v1[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\3shop-testandtarget-v1[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\8fb1668254f9beff4930b5efb3a662f3[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\about_hover[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\activityi;src=1450759;type=virgi534;cat=homep003;ord=8395764452828[1].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\ALp0EFgdZD8J[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\analytics[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\anycap[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\arrow_grey[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\backgroundHdrTile[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\bestDeals_img[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\bg-col-a-inner[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\bg-home-promo-b[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\bg-sub-nav-a[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\bg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\BlobServer[3].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\BlobServer[4].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\border[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\btn_left[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\byoModem_btn[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\callrates_blnk[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\cap_79_unlimited[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\closelabel[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\commonPrint[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\ContentServer[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\cookie_func[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\core[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\cornedbg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\coveragemap[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\coverage_maps[1].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\dev_007905[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\dev_007906[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\dev_007907[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\dev_007909[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\dev_007969[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\dev_008043[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\dev_008044[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\dev_008213[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\divider-aux-nav[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\divider-login-links[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\divider[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\empty[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\Ericson-Blue[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\Ericson-Mini_0[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\featuresbox_bg[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\footer_bgtile[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\forms[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\go_btn_yellow_trans[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\greenLeft[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\handset_details_Nokia-E72-black[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\handset_plan_Nokia-E72-black[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\headerlinks_vert[2].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\icon-triangle-orange[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\icon_mobilePlans[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\image[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\index[1].php
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\jquery-ui[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\jquery.tools.min[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\key_talkText[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\kit_geo[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\largetab_green[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\largetab_orange[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\left_cnr_b[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\link-delicious[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\loginBG[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\lr[1].php
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\m10015_filter_cap_029_greyed[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\m10053_filter_cap_039_greyed[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\m230027stg_Apple_iPhone_Cap_$79_Large[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\m250012stg_Nokia_6700_Small[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\m510023stg_3_U7510_Small[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\m560022stg_Unlimited-Pack-99-Small[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\m640009stg_Nokia6700Slide_small[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\m690028stg_79_unlimited_pack_59x62[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\m90069stg_Nokia_E71_Black_Small[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\map2g_small[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\map3g_default[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\map3g_small[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\maps_lightwaveB[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\mblDtl_td_col9[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\menu-residential[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\moneymag[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\new_logo.Par.72849.Image.o[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\numbering-d[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\page-base[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\page-fade[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\pcaut[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\personal[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\pic_red_tas[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\plan-good4[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\plandetailsPanel[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\PlansDetails[1].aspx
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\PlansDetails[2].aspx
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\play[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\PN_CorporateResponsibility[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\previous[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\print_presentation_specific[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\print_presentation_tables[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\promoArrow[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\quicknav_bgtile[2].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\rating-3_5[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\rating-4_1[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\redRightnoShadow[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\rules[1].php
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\search-bg[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\search[1].json
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\search[5]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\secnav_top[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\sh21[1].html
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\shadowbox-img[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\shadowbox-qt[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\slimbox[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\spacer[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\specs_bgtile[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\SpryTabbedPanels[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\standard[1]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\suckerfishie[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\tabdiv_gradient[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\tabsonly[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\TABS_DualBand_Under[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\tab_dualband[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\tagline-20[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\td_col7_bot[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\td_specialoffer[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\td_sub_col5[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\terms-and-conditions[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\tick[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\title-8[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\ui.mouse[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\vcadr-adserver-v1[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\vcadr-sitecatalyst-v1[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\vcadr-testandtarget-v1[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\we-can-call-you-back_long[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\webshell[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\what_vodafone_is_doing.Par.71606.Image.o[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NRR9UA1M\zoomloader[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\22px-Flag_of_Chile.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\22px-Flag_of_Germany.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\22px-Flag_of_Poland.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\22px-Flag_of_Russia.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\22px-Flag_of_South_Africa.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\22px-Flag_of_Sri_Lanka.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\22px-Flag_of_the_Democratic_Republic_of_the_Congo.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\22px-Flag_of_the_Dominican_Republic.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\22px-Flag_of_the_People's_Republic_of_China.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\22px-Flag_of_Uruguay.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\2columnBorder_v2[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\2columnFooter_v2[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\3-sitecatalyst-v1[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\3-testandtarget-v1[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\3columnFooter[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\3GL[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\3shop-adserver-v1[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\AC_OETags[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\add-to-cart[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\akubra[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\areset[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\bg-sn-fl-sd-bt[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\BlobServer[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\BlobServer[2].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\BlobServer[3].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\BlobServer[4].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\BlobServer[5].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\block[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\brand-7[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\bris_2g[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\bris_3g_db[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\bris_3g_sb[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\bullet-icon[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\bullets_aggregated_s2[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\c36a64b5ae774486cf574568e15f6324[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\cap_69[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\careers[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\changedMind_img[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\choice[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\cookie[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\coverage_map[1].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\dev_008158[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\dev_008159[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\dev_008167[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\dev_008203[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\dev_008209[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\feat_terms_bg[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\footer-top[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\footer_logo[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\globalNavShadow[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\handsets-new[1].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\handset_details_Nokia-5233-black[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\handset_details_Nokia-N97-white[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\handset_plan_Nokia-5233[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\hdr_brands[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\hdr_caps[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\hdr_prepaid[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\hdr_pricingoptions[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\header_qld[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\HelpAndSupport_title[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\help[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\home[1].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\icon-price-c[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\images.Par.48231.Image.o[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\images.Par.52303.Image.o[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\image[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\index[1].php
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\index[2].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\index[2].php
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\ipv4[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\jquery-1.3.2.min[2].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\jquery.jcarousellite[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\jquery.timer[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\jquery.tooltip.min[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\jquery[3].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\jslide[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\leftPanelBaseTile[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\leftPanelHdrTile[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\link-facebook[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\list-a[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\m10081_icon_pda[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\m230023stg_Apple_iPhone_Cap_$49_Large[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\m420015stg_Nokia_6710_Small[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\m670012stg_RenoSaleResize[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\map2g_default[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\map2g_small[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\map3g_large[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\map3g_small[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\mapSelector[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\Map[1].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\mootools-1.2.4.4-more[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\more-info[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\myvf-login[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\my[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\new_arrows.Par.42865.Image.0[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\Nokia2730[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\nsw_3G[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\pages[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\plan-bar-indicator-green[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\plan-bar-indicator-red[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\plans[1].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\price-7[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\print[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\p_834014675=4CA6MNN0B.txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\p_834014675=4CAQ1T20H.txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\p_834014675=4[10].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\p_834014675=4[11].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\p_834014675=4[7].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\p_834014675=4:emotion-29:.txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\p_834014675=4[9].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\quicknav_bg_bot[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\repair_warranty_186x178[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\right_cnr_top_w[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\rv_boxbase1[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\rv_boxtop1b[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\search-fade[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\search[3]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\search[4]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\search[5]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\search:emotion-14:
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\search[7]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\setfscookies[1].php
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\shadowbox-flv[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\shadowbox[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\shadowbox_three[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\shadow[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\share_button[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\sifr-addons[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\sifr[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\slidepanel_botshadow[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\styles[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\swfobject[2].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\s_code[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\TABS_3G_Under[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\tab_l[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\tab_l_on[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\tab_r[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\td2_bg[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\td_camera[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\td_sub_col3[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\td_sub_col7[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\tipbackground[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\titlebg[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\tooltips[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\transparent[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\v51[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\vcadr-onclick[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\vodafone[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PLTTUY0R\yourcart[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\22px-Flag_of_Colombia.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\22px-Flag_of_Ecuador.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\22px-Flag_of_Egypt.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\22px-Flag_of_Ghana.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\22px-Flag_of_Saint_Kitts_and_Nevis.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\22px-Flag_of_Serbia.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\22px-Flag_of_Slovakia.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\22px-Flag_of_Tanzania.svg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\27352_1153771251_8250_q[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\3-adserver-v1[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\3best_background[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\3c2fca5480df1789fcdab940ffa849a0[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\3shop_logo[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\41517_1832000975_5807_q[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\about_vodafone[1].html
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\ad-doubleyourcredits[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\app_2_372268249833_3857[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\arrow-down-icon[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\arrow_mbb[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\atgsvcs[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\backgroundActionTile_a[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\backgroundActionTile_b[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\bg-sidebar-bottom-c[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\bg-sn-tl-sl-bt[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\BlobServer[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\BlobServer[5].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\books[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\brands_vert[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\bris_3G[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\BrowserSniff[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\btn-top[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\btn_collapse[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\btn_moreinfo[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\btn_search[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\c8916ac4d15de9f21def317070291c3b[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\cgi[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\close-btn[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\close[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\control_print_btn[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\css[2].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\dev_008222[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\DHTMLCommonFx[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\dodo_com_au[1].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\dodo_mainmenu02_up_04[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\dodo_publicIndex_jan10_02[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\dodo_publicIndex_june09_03[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\dodo_publicIndex_june10_01[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\dodo_publicIndex_nov09_04[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\dottedLine[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\Ericson-X10[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\external-link-ltr-icon[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\filter_bgtile[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\flashDetect[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\footer_bgtile[2].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\free-sim-ad[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\freenational_new[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\global[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\gps[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\greenRight[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\handsets[1].html
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\handset_details_Nokia-2690-white[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\handset_plan_Nokia-N97-mini-white[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\hdr_mobiles[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\hdr_styles[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\header_handsets[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\hero-gigaboost[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\hero-iphone-pricing-762x299[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\hero-x10-mini-pro-29cap[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\icon-cart-a[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\ie7[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\ig[1].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\img_master_repBkg[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\index[1].php
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\index[2].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\iPhone4_Black_Front_118x307_118x307[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\iPhone4_Black_Front_118x307_23x60[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\ipv6and4[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\jcarousellite_1.0.1.pack[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\jquery-1.1.2[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\jquery[2].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\jquery[3].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\key_broadbandZone[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\left_cnr[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\legal[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\logo_topsearchlists[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\m2_leftBorder[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\m350009stg_Sony_Ericsson_T715_Pink_Small[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\m500017stg_Nokia_2730_Small[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\m540024stg_Nokia_7230_Front_Black_Small[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\m600010stg_Nokia_X6_Black_Small[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\m610009stg_Sony_Ericsson_X10_Small[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\main-ltr[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\main[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\map2g_default[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\map3g_default[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\map3g_small[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\mblDtl_td_col4[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\mblDtl_td_col5[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\mblDtl_td_col6[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\mblDtl_td_col7[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\mobilemuster[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\MobilePlans.1.2.5[1].swf
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\mobile_handset_callnow[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\MSbhn1hcdFZ8CmJQ1hrQvQy1hNBTGD3HYG5vJfTXQBC9hDyvs3Rv!-813333465!12804984588941280498566909[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\navArrow[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\new-mobile-plans[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\NewTabPageScripts[1]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\ocscript[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\omniture-config[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\page_bottom[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\pause[1].png
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\pic_austmap[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\plan-bar[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\plan-label-data[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\PlansDetails[1].aspx
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\presentation_content[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\print[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\purpleRight[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\p_834014675=4[11].txt
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\rating-3_0[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\rating-4_0[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\res-mCap1[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\search[10]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\search[11]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\search[1].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\search[9]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\shadowbox-jquery[1].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\slider[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\soho-medium[1].swf
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\sort_none[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\style07[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\tablefooter[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\TABS_2G_Under[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\td3_bg_new[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\td_sub_col8[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\thickbox[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\thickbox[2].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\thickbox[3].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\thickbox[4].js
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\topPanelButton[1].jpg
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\top[1]
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\totalvalue_new[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\universal[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\vcacustom[1].css
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\Welcome[1].htm
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XSL6449U\whychooseus_title[1].gif
!-->[Hidden] C:\Users\Tess\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_IEXPLORE.EXE_6d37f053d770e9dace5fcf33ad9e5ae0b46d3_0e2adfd4\Report.wer
!-->[Hidden] C:\Users\Tess\AppData\Local\Temp\~DF072F9442D3A094BA.TMP
!-->[Hidden] C:\Users\Tess\AppData\Local\Temp\~DF18D3B78425A89F40.TMP::$DATA
!-->[Hidden] C:\Users\Tess\AppData\Local\Temp\~DF2838ACD11C774FA2.TMP::$DATA
!-->[Hidden] C:\Users\Tess\AppData\Local\Temp\~DF52ED0EFF9BAD8269.TMP
!-->[Hidden] C:\Users\Tess\AppData\Local\Temp\~DF5B790188CB8916DA.TMP::$DATA
!-->[Hidden] C:\Users\Tess\AppData\Local\Temp\~DF67780D5A7C4970B0.TMP
!-->[Hidden] C:\Users\Tess\AppData\Local\Temp\~DFA6996897D3B6A005.TMP::$DATA
!-->[Hidden] C:\Users\Tess\AppData\Local\Temp\~DFCB445716198BC2A7.TMP::$DATA
!-->[Hidden] C:\Users\Tess\AppData\Local\Temp\~DFD0E4FCE33DEA0DE8.TMP::$DATA
!-->[Hidden] C:\Users\Tess\AppData\Local\Temp\~DFE5FBDE866E4E13A6.TMP::$DATA
!-->[Hidden] C:\Users\Tess\AppData\Local\Temp\~DFEC13B3E39176F34A.TMP::$DATA
!-->[Hidden] C:\Users\Tess\AppData\Local\Temp\~DFFD592F0F5942C18C.TMP::$DATA
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Adobe\Flash Player\AssetCache\2XH9PBCZ\1846548181EAE8A4BB86AFC74FD021D9A0F6DFA6.heu
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Adobe\Flash Player\AssetCache\2XH9PBCZ\1846548181EAE8A4BB86AFC74FD021D9A0F6DFA6.swz
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@aapt.com[2].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@ad.yieldmanager[2].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@addthis[3].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@admarketplace[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@amgdgt[3].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@bidvertiser[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@boost.com[2].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@bridge1.admarketplace[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@cnet.com[2].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@dodo.com[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@e6rhm5pfs70kh6hcvm597uqs34aj8o2j.ig.ig.gmodules[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@estara[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@estara[3].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@gotalk.com[2].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@idd.com[2].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@maps02.pdslive.com[3].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@mobile-phones.cnet.com[2].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@mobile-phones.smh.com[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@optimize.indieclick[3].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@phonechoice.com[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@questionablecontent[2].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@scour[3].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@secure.bidvertiser[2].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@secure.bidvertiser[3].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@shop.three.com[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@smh.com[2].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@store.vodafone.com[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@topsearchlists[2].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@tpg.com[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@tribalfusion[2].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@virginmobile.122.2o7[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@virginmobile.com[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@vodafone.122.2o7[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@vodafone.com[2].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@vodafone.tt.omtrdc[2].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@www.aapt.com[1].txt
!-->[Hidden] C:\Users\Tess\AppData\Roaming\Microsoft\Windows\Cookies\Low\tess@www.gotalk.com[1].txt
!-->[Hidden] C:\Windows\Prefetch\EXCEL.EXE-29EAAC71.pf
==============================================
>Hooks
==============================================
[1100]svchost.exe-->mswsock.dll+0x00002BBC, Type: Inline - RelativeJump 0x74F32BBC-->00000000 [unknown_code_page]
[1100]svchost.exe-->mswsock.dll+0x000044B1, Type: Inline - RelativeJump 0x74F344B1-->00000000 [unknown_code_page]
[1100]svchost.exe-->mswsock.dll+0x000046B7, Type: Inline - RelativeJump 0x74F346B7-->00000000 [unknown_code_page]
[1100]svchost.exe-->ntdll.dll-->KiUserExceptionDispatcher, Type: Inline - RelativeJump 0x773B6448-->00000000 [unknown_code_page]
[1100]svchost.exe-->ntdll.dll-->NtProtectVirtualMemory, Type: Inline - RelativeJump 0x773B5360-->00000000 [unknown_code_page]
[1100]svchost.exe-->ntdll.dll-->NtWriteVirtualMemory, Type: Inline - RelativeJump 0x773B5EE0-->00000000 [unknown_code_page]
[1100]svchost.exe-->user32.dll-->GetCursorPos, Type: Inline - RelativeJump 0x772AC198-->00000000 [unknown_code_page]
[3044]explorer.exe-->mswsock.dll+0x00002BBC, Type: Inline - RelativeJump 0x74F32BBC-->00000000 [unknown_code_page]
[3044]explorer.exe-->mswsock.dll+0x000044B1, Type: Inline - RelativeJump 0x74F344B1-->00000000 [unknown_code_page]
[3044]explorer.exe-->mswsock.dll+0x000046B7, Type: Inline - RelativeJump 0x74F346B7-->00000000 [unknown_code_page]
[3044]explorer.exe-->ntdll.dll-->KiUserExceptionDispatcher, Type: Inline - RelativeJump 0x773B6448-->00000000 [unknown_code_page]
[3044]explorer.exe-->ntdll.dll-->NtProtectVirtualMemory, Type: Inline - RelativeJump 0x773B5360-->00000000 [unknown_code_page]
[3044]explorer.exe-->ntdll.dll-->NtWriteVirtualMemory, Type: Inline - RelativeJump 0x773B5EE0-->00000000 [unknown_code_page]
[3172]ProToolbarUpdate.exe-->advapi32.dll-->kernel32.dll-->CopyFileW, Type: IAT modification 0x77C6178C-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->advapi32.dll-->kernel32.dll-->CreateFileW, Type: IAT modification 0x77C617F0-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->advapi32.dll-->kernel32.dll-->DeleteFileW, Type: IAT modification 0x77C61848-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->advapi32.dll-->kernel32.dll-->GetProcAddress, Type: IAT modification 0x77C617B8-->00000000 [apphelp.dll]
[3172]ProToolbarUpdate.exe-->advapi32.dll-->kernel32.dll-->MoveFileW, Type: IAT modification 0x77C61844-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->advapi32.dll-->RegOpenKeyExW, Type: IAT modification 0x0040C018-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->gdi32.dll-->kernel32.dll-->CopyFileW, Type: IAT modification 0x77B61154-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->gdi32.dll-->kernel32.dll-->CreateFileW, Type: IAT modification 0x77B611E0-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->gdi32.dll-->kernel32.dll-->DeleteFileW, Type: IAT modification 0x77B6118C-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->gdi32.dll-->kernel32.dll-->GetProcAddress, Type: IAT modification 0x77B611B8-->00000000 [apphelp.dll]
[3172]ProToolbarUpdate.exe-->kernel32.dll-->CopyFileW, Type: IAT modification 0x0040C068-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->kernel32.dll-->GetFileAttributesA, Type: IAT modification 0x0040C0C4-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->kernel32.dll-->GetProcAddress, Type: IAT modification 0x0040C0AC-->00000000 [apphelp.dll]
[3172]ProToolbarUpdate.exe-->kernel32.dll-->MoveFileExW, Type: IAT modification 0x0040C070-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->shell32.dll-->kernel32.dll-->CopyFileW, Type: IAT modification 0x738022C4-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->shell32.dll-->kernel32.dll-->MoveFileExW, Type: IAT modification 0x73802240-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->shell32.dll-->kernel32.dll-->MoveFileW, Type: IAT modification 0x73802298-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->user32.dll-->kernel32.dll-->CreateFileW, Type: IAT modification 0x77D11524-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->user32.dll-->kernel32.dll-->GetProcAddress, Type: IAT modification 0x77D114E0-->00000000 [apphelp.dll]
[3172]ProToolbarUpdate.exe-->user32.dll-->kernel32.dll-->RegCreateKeyExW, Type: IAT modification 0x77D114B4-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->user32.dll-->kernel32.dll-->RegOpenKeyExW, Type: IAT modification 0x77D11444-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->user32.dll-->kernel32.dll-->RegSetValueExW, Type: IAT modification 0x77D114AC-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->wininet.dll-->advapi32.dll-->RegCreateKeyExA, Type: IAT modification 0x71201284-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->wininet.dll-->advapi32.dll-->RegCreateKeyExW, Type: IAT modification 0x712011D0-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->wininet.dll-->advapi32.dll-->RegDeleteValueA, Type: IAT modification 0x71201244-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->wininet.dll-->advapi32.dll-->RegDeleteValueW, Type: IAT modification 0x712011D8-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->wininet.dll-->advapi32.dll-->RegOpenKeyExA, Type: IAT modification 0x7120128C-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->wininet.dll-->advapi32.dll-->RegOpenKeyExW, Type: IAT modification 0x71201268-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->wininet.dll-->advapi32.dll-->RegSetValueExA, Type: IAT modification 0x71201288-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->wininet.dll-->advapi32.dll-->RegSetValueExW, Type: IAT modification 0x712011DC-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->wininet.dll-->kernel32.dll-->CopyFileA, Type: IAT modification 0x712012DC-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->wininet.dll-->kernel32.dll-->CreateFileA, Type: IAT modification 0x712014CC-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->wininet.dll-->kernel32.dll-->CreateFileW, Type: IAT modification 0x712014D0-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->wininet.dll-->kernel32.dll-->DeleteFileA, Type: IAT modification 0x712014F4-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->wininet.dll-->kernel32.dll-->DeleteFileW, Type: IAT modification 0x71201448-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->wininet.dll-->kernel32.dll-->GetProcAddress, Type: IAT modification 0x7120144C-->00000000 [apphelp.dll]
[3172]ProToolbarUpdate.exe-->wininet.dll-->kernel32.dll-->MoveFileA, Type: IAT modification 0x71201318-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->wininet.dll-->kernel32.dll-->MoveFileExA, Type: IAT modification 0x71201444-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->wininet.dll-->kernel32.dll-->MoveFileExW, Type: IAT modification 0x71201310-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->wininet.dll-->kernel32.dll-->MoveFileW, Type: IAT modification 0x71201314-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->wininet.dll-->kernel32.dll-->SetFileAttributesA, Type: IAT modification 0x7120132C-->00000000 [AcGenral.dll]
[3172]ProToolbarUpdate.exe-->wininet.dll-->kernel32.dll-->SetFileAttributesW, Type: IAT modification 0x71201400-->00000000 [AcGenral.dll]
[3696]msnmsgr.exe-->advapi32.dll-->kernel32.dll-->GetProcAddress, Type: IAT modification 0x77C617B8-->00000000 [apphelp.dll]
[3696]msnmsgr.exe-->gdi32.dll-->kernel32.dll-->GetProcAddress, Type: IAT modification 0x77B611B8-->00000000 [apphelp.dll]
[3696]msnmsgr.exe-->user32.dll-->kernel32.dll-->GetProcAddress, Type: IAT modification 0x77D114E0-->00000000 [apphelp.dll]
[3696]msnmsgr.exe-->wininet.dll-->kernel32.dll-->GetProcAddress, Type: IAT modification 0x7120144C-->00000000 [apphelp.dll]
[6980]wuauclt.exe-->mswsock.dll+0x00002BBC, Type: Inline - RelativeJump 0x74F32BBC-->00000000 [unknown_code_page]
[6980]wuauclt.exe-->mswsock.dll+0x000044B1, Type: Inline - RelativeJump 0x74F344B1-->00000000 [unknown_code_page]
[6980]wuauclt.exe-->mswsock.dll+0x000046B7, Type: Inline - RelativeJump 0x74F346B7-->00000000 [unknown_code_page]
[6980]wuauclt.exe-->ntdll.dll-->KiUserExceptionDispatcher, Type: Inline - RelativeJump 0x773B6448-->00000000 [unknown_code_page]
[6980]wuauclt.exe-->ntdll.dll-->NtProtectVirtualMemory, Type: Inline - RelativeJump 0x773B5360-->00000000 [unknown_code_page]
[6980]wuauclt.exe-->ntdll.dll-->NtWriteVirtualMemory, Type: Inline - RelativeJump 0x773B5EE0-->00000000 [unknown_code_page]

 

Thanks :)

kevin27_b3d29f

1.5K Posts

July 30th, 2010 14:00

Hi,

 

PLEASE BE SURE TO DISABLE ALL PROTECTIVE SOFTWARE THAT IS RUNNING ON YOUR MACHINE BEFORE RUNNING COMBO-FIX, SO THAT COMBO-FIX IS NOT HINDERED IN ITS REMOVAL PROCESS

Please Disable all Anti-virus/Anti-Spyware/FireWall on your machine(instructions via links below)

 

Please download ComboFix.exe. Please visit THIS webpage for download links, and instructions for running the tool:

Combo-fix MUST be save to your desktop before running the tool

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

When prompted to install the recovery console please make sure to do so as the is a VERY IMPORTANT backup of Combo-fix XP only

You will need to be conected to the net to install the recovery console, if you can not install it DO NOT run Combo-Fix,
Post back and we will install it manually.

DO NOT mouse click when Combo-Fix is running as this will cause Combo-Fix to Stall and it will not work as it should

Please include the C:\ComboFix.txt in your next reply for further review.

Thanks,
K27

lasareina

11 Posts

July 30th, 2010 20:00

Ok here is the combo fix log...

 

ComboFix 10-07-30.01 - Tess 31/07/2010  12:40:15.1.2 - x86
Microsoft Windows 7 Ultimate   6.1.7600.0.1252.61.1033.18.3067.2291 [GMT 10:00]
Running from: c:\users\Tess\Desktop\ComboFix.exe
.

(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\service
c:\windows\system32\service\11112009_TIS17_SfFniAU.log
c:\windows\system32\service\14112009_TIS17_SfFniAU.log
c:\windows\system32\service\22112009_TIS17_SfFniAU.log
c:\windows\system32\service\25042010_TIS17_SfFniAU.log
c:\windows\system32\service\27122009_TIS17_SfFniAU.log
c:\windows\system32\st326162.dll

Infected copy of c:\windows\system32\drivers\ndis.sys was found and disinfected
Restored copy from - Kitty had a snack :p
.
(((((((((((((((((((((((((   Files Created from 2010-06-28 to 2010-07-31  )))))))))))))))))))))))))))))))
.

2010-07-31 02:46 . 2010-07-31 02:47 -------- d-----w- c:\users\Tess\AppData\Local\temp
2010-07-31 02:46 . 2010-07-31 02:46 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-07-31 02:32 . 2010-07-31 02:33 -------- d-----w- C:\32788R22FWJFW
2010-07-27 12:08 . 2010-07-27 12:10 -------- d-----w- C:\ARK
2010-07-19 07:29 . 2010-07-19 07:29 -------- d-----w- c:\windows\Sun
2010-07-19 06:19 . 2010-07-19 06:19 388096 ----a-r- c:\users\Tess\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-07-19 06:00 . 2010-07-19 06:00 157066098 ----a-w- C:\regback.reg
2010-07-19 05:58 . 2010-07-19 06:00 -------- d-----w- c:\windows\system32\catroot2
2010-07-18 06:58 . 2010-07-18 06:58 71992 ----a-w- c:\programdata\Apple Computer\Installer Cache\Safari 5.33.16.0\SetupAdmin.exe

.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-07-28 14:02 . 2010-01-04 10:54 -------- d-----w- c:\users\Tess\AppData\Roaming\uTorrent
2010-07-28 14:02 . 2009-08-12 11:13 -------- d-----w- c:\users\Tess\AppData\Roaming\LimeWire
2010-07-19 06:19 . 2009-10-19 05:57 -------- d-----w- c:\program files\Trend Micro
2010-07-18 07:02 . 2009-10-21 06:01 -------- d-----w- c:\program files\Safari
2010-06-17 16:22 . 2010-06-15 06:20 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-06-17 16:20 . 2009-10-19 05:59 -------- d-----w- c:\programdata\Trend Micro
2010-06-17 16:20 . 2010-06-15 04:40 -------- d-----w- c:\program files\Common Files\Nero
2010-06-17 16:20 . 2009-07-24 02:31 -------- d-----w- c:\program files\Microsoft Silverlight
2010-06-16 02:52 . 2010-06-16 02:52 -------- d-----w- c:\users\Tess\AppData\Roaming\Purple Ghost Software, Inc
2010-06-16 02:26 . 2010-06-16 02:26 -------- d-----w- c:\programdata\WindSolutions
2010-06-15 07:31 . 2010-06-15 06:22 -------- d-----w- c:\users\Tess\AppData\Roaming\system
2010-06-15 06:20 . 2010-06-15 06:20 -------- d-----w- c:\users\Tess\AppData\Roaming\Malwarebytes
2010-06-15 06:20 . 2010-06-15 06:20 -------- d-----w- c:\programdata\Malwarebytes
2010-06-15 05:00 . 2010-06-15 05:00 -------- d-----w- c:\users\Tess\AppData\Roaming\Nero
2010-06-15 04:54 . 2010-06-15 04:41 -------- d-----w- c:\programdata\Nero
2010-06-15 04:54 . 2010-06-15 04:39 -------- d-----w- c:\program files\Nero
2010-06-15 02:36 . 2010-04-28 06:20 -------- d-----w- c:\programdata\Roxio
2010-06-09 08:06 . 2010-06-09 08:06 976832 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\30696\AdobeARM.exe
2010-06-09 08:06 . 2010-06-09 08:06 976832 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\19751\AdobeARM.exe
2010-06-09 08:06 . 2010-06-09 08:06 976832 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\11353\AdobeARM.exe
2010-06-09 08:06 . 2010-06-09 08:06 70584 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\30696\AdobeExtractFiles.dll
2010-06-09 08:06 . 2010-06-09 08:06 70584 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\19751\AdobeExtractFiles.dll
2010-06-09 08:06 . 2010-06-09 08:06 70584 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\11353\AdobeExtractFiles.dll
2010-06-09 08:06 . 2010-06-09 08:06 331176 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\30696\ReaderUpdater.exe
2010-06-09 08:06 . 2010-06-09 08:06 331176 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\30696\AcrobatUpdater.exe
2010-06-09 08:06 . 2010-06-09 08:06 331176 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\19751\ReaderUpdater.exe
2010-06-09 08:06 . 2010-06-09 08:06 331176 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\19751\AcrobatUpdater.exe
2010-06-09 08:06 . 2010-06-09 08:06 331176 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\11353\ReaderUpdater.exe
2010-06-09 08:06 . 2010-06-09 08:06 331176 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\11353\AcrobatUpdater.exe
2010-06-02 03:19 . 2009-07-24 02:28 -------- d-----w- c:\program files\Microsoft
2010-05-31 02:44 . 2009-12-27 12:08 112744 ----a-w- c:\users\Tess\AppData\Local\GDIPFONTCACHEV1.DAT
2010-05-17 09:19 . 2010-05-17 09:19 73000 ----a-w- c:\programdata\Apple Computer\Installer Cache\iTunes 9.1.1.12\SetupAdmin.exe
2010-05-17 09:08 . 2010-05-17 09:08 79144 ----a-w- c:\programdata\Apple Computer\Installer Cache\Safari 5.31.22.7\SetupAdmin.exe
2009-07-24 02:23 . 2009-07-24 02:23 75 --sha-r- c:\windows\CT4CET.bin
2009-06-10 21:26 . 2009-07-14 02:04 9633792 --sha-r- c:\windows\Fonts\StaticCache.dat
2009-07-14 01:14 . 2009-07-13 23:42 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
.

------- Sigcheck -------

[-] 2010-03-08 . 7BD7F45FF37FA0669CD32CA0EF46E22C . 811520 . . [6.1.7600.16385] . . c:\windows\System32\user32.dll
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
"CollaborationHost"="c:\windows\system32\p2phost.exe" [2009-07-14 152064]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2009-07-14 144384]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2009-03-20 1312256]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-11-30 1422632]
"SysTrayApp"="c:\program files\IDT\WDM\sttray.exe" [2009-03-19 483428]
"Dell DataSafe Online"="c:\program files\Dell DataSafe Online\DataSafeOnline.exe" [2009-11-13 1807600]
"dellsupportcenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2009-06-03 206064]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"Microsoft Default Manager"="c:\program files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2009-04-24 250192]
"UfSeAgnt.exe"="c:\program files\Trend Micro\Internet Security\UfSeAgnt.exe" [2010-01-26 1020248]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-04-04 36272]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-03-24 952768]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-03-17 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-04-28 142120]
"FATrayAlert"="c:\program files\Sensible Vision\Fast Access\FATrayMon.exe" [2010-04-04 95560]

c:\users\Tess\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dell Dock.lnk - c:\program files\Dell\DellDock\DellDock.exe [2009-5-29 1320288]
OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2008-11-18 780840]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\FastAccess]
2010-04-04 01:43 144712 ----a-w- c:\program files\Sensible Vision\Fast Access\FALogNot.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\GoToAssist]
2009-07-24 02:13 10536 ----a-w- c:\program files\Citrix\GoToAssist\514\g2awinlogon.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ    scecli FAPassSync
Security Packages REG_MULTI_SZ    kerberos msv1_0 schannel wdigest tspkg pku2u livessp

[HKLM\~\startupfolder\C:^Users^Tess^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^LimeWire On Startup.lnk]
backup=c:\windows\pss\LimeWire On Startup.lnk.Startup
backupExtension=.Startup
path=c:\users\Tess\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LimeWire On Startup.lnk

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
2009-07-26 06:44 3883856 ----a-w- c:\program files\Windows Live\Messenger\msnmsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\setup\disabledrunkeys]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-03-03 1343400]
S1 tmlwf;Trend Micro NDIS 6.0 Filter Driver;c:\windows\system32\DRIVERS\tmlwf.sys [2009-07-29 146448]
S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_4c73f4a9a59a84bb\aestsrv.exe [2009-03-19 81920]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-08-17 176128]
S2 DockLoginService;Dock Login Service;c:\program files\Dell\DellDock\DockLogin.exe [2008-12-18 155648]
S2 FAService;FAService;c:\program files\Sensible Vision\Fast Access\FAService.exe [2010-04-04 2409800]
S2 tmpreflt;tmpreflt;c:\windows\system32\DRIVERS\tmpreflt.sys [2009-12-04 36368]
S2 tmwfp;Trend Micro WFP Callout Driver;c:\windows\system32\DRIVERS\tmwfp.sys [2009-07-29 283152]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2008-12-23 29736]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys [2009-03-12 143840]
S3 FACAP;facap, FastAccess Video Capture;c:\windows\system32\DRIVERS\facap.sys [2008-09-24 232832]
S3 k57nd60x;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60x.sys [2009-07-13 229888]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
S3 OA008Ufd;Creative Camera OA008 Upper Filter Driver;c:\windows\system32\DRIVERS\OA008Ufd.sys [2009-02-09 133472]
S3 OA008Vid;Creative Camera OA008 Function Driver;c:\windows\system32\DRIVERS\OA008Vid.sys [2009-02-09 271616]
S3 tmevtmgr;tmevtmgr;c:\windows\system32\DRIVERS\tmevtmgr.sys [2009-07-29 50704]
S3 TmPfw;Trend Micro Personal Firewall;c:\program files\Trend Micro\Internet Security\TmPfw.exe [2009-07-29 497008]
S3 TmProxy;Trend Micro Proxy Service;c:\program files\Trend Micro\Internet Security\TmProxy.exe [2009-07-29 689416]

.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/ig?refresh=1
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
.
- - - - ORPHANS REMOVED - - - -

HKLM-Run-FAStartup - (no file)


.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'lsass.exe'(548)
c:\windows\system32\FAPassSync.DLL
.
Completion time: 2010-07-31  12:49:10
ComboFix-quarantined-files.txt  2010-07-31 02:49

Pre-Run: 353,397,968,896 bytes free
Post-Run: 353,396,785,152 bytes free

- - End Of File - - 4B2828F5D6C84D65E4562ECA26302411

 

Thanks :)

lasareina

11 Posts

July 30th, 2010 20:00

Hi K27

I'm about to run combo fic but tthought i should post this virus warning that popped up today...

 

 

 

will post back with combo fix log

Thanks

kevin27_b3d29f

1.5K Posts

August 1st, 2010 06:00

Hi lasareina,

I missed in your log's that you have P2P programs installed.

Before we continue can I ask you to please read all the information in the link below as it contain information for Peer2Peer programs,
Not only is it illegal to download from P2P and torrent sites it is also a breeding ground for malware and more than likely the reason you were infected.
It would be futile to try and remove any infection on your system all the time P2P programs are installed.

Perils of P2P File Sharing

Then i need you to go to:

  • Start (windows icon bottom left corner of screen)
  • Control panel
  • Add/Remove programs
  • look for

uTorrent
Limewire

  • Uninstall
  • Reboot PC

Then please uninstalll anything else running on the machine that may relate to P2P files sharing or cracked Software.

After that:

Go Start > Run and copy/paste the following single-line command into the Run box and click OK:

cmd /c PEV -l "%systemdrive%\user32.dll" >Log.txt&Log.txt&del Log.txt

A Notepad file will open. Post the contents of Log.txt in your next reply.


Thanks,
K27

lasareina

11 Posts

August 2nd, 2010 05:00

Hi K27,

Understood and uninstalled :)

I tried running that command but no txt file opens... I can see the command prompt window flash up momentarily but then it disappears straight away and doesn;t produce a log.

Tess

lasareina

11 Posts

August 2nd, 2010 06:00

Hi,

 

Not sure if it worked or not ... it came up could not find file.

 

it did produce a log file... 2 lines only.

 

 Volume in drive C is OS
 Volume Serial Number is 2C25-7DF5

 

Thanks :)

View More

View All

No Events found!

Top