[Resolved] Unable to connect to/access Microsoft Updates

[Bear]

Hi Roverstoffe

We have to get ALL the malware out of your PC to insure it doesn't get re-infected.  There seem to be a number of suspicious files in your Java installation, so I am going to completely uninstall your Java and reinstall it. 

1.  Click Start/Control Panel and click the Add/Remove Programs control panel icon.

2.  The Add/Remove control panel displays a list of software on your system, including any Java software products that are on your computer. Select all Java products by clicking on them one at a time and clicking the Remove button.  Repeat for all the Java products on your PC.

3.  Re-run OTL with the following script.

Code: [Select]

:OTL
[2010/06/11 15:39:12 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
File not found (No name found) --
[2009/04/01 20:16:12 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2010/04/12 17:29:19 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
O4 - HKLM..\Run: [SunJavaUpdateSched] File not found
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0

                               
:FILES
C:\Program Files\Java
C:\Documents and Settings\user\Application Data\Sun

:Commands
 [REBOOT]



4.  Now reinstall Java as follows:  Go to the Manual download page.  Click on Windows Online.   The File Download dialog box appears prompting you to run or save the download file.  Click Run.  The installation process starts.

5.  Click the Install button to accept the license terms and to continue with the installation. The installer may present you with option to install several programs when you install Java. Be sure none are selected. Always choose Custom Install if it is an option to remove these programs. 

6.   A few brief dialogs confirm the last steps of the installation process; click Close on the last dialog. This will complete Java installation process.


NOTE: You may need to restart (close and re-open) your browser to enable the Java installation in your browser.

7.  Test Installation
To test that Java is installed and working properly on your computer, run this test applet.

8.  Next open Notepad and click File/Save As, name the file Direct.bat and Save it to your desktop.  Copy the code in the code box below and paste it into that Notepad window.  Click File/Save and close the window.

Now double click on the Direct.bat icon.

Code: [Select]

 

attrib -r -a -s -h "C:\Windows\Fonts" /s /d
dir "C:\Windows\Fonts" /a /s > "C:\Documents and Settings\user\Desktop\DirectLog.txt"
"C:\Documents and Settings\user\Desktop\DirectLog.txt"



As always please be sure Word Wrap is disabled in Notepad.  Also be sure to check that the data you posted was not cut off by the sites posting size limits.

Please post the following as a reply to this post:
OTL Fix log
DirectLog.txt
How is your computer operating
Any other problems or questions you might have

[Bear]

Hi Roverstoffe

Had an idea about those two files we have been trying to remove.  Don't know if they are already gone or just well protected.  So I added them to the OTL script.  Use this in place of step 3 above:

3.  Re-run OTL with the following script.

Code: [Select]

:OTL
[2010/06/11 15:39:12 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
File not found (No name found) --
[2009/04/01 20:16:12 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2010/04/12 17:29:19 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
O4 - HKLM..\Run: [SunJavaUpdateSched] File not found
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0

                               
:FILES
C:\Program Files\Java
C:\Documents and Settings\user\Application Data\Sun
c:\windows\system32\spes.sys
c:\windows\system\82483109

:Commands
 [REBOOT]



[roverstoffe]

everything seems to be running fine.  I turned off automatic updates for the time being until we get the issues fixed.

========== OTL ==========
Folder C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\ not found.
Folder C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF\ not found.
C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched not found.
Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {D27CDB6E-AE6D-11CF-96B8-444553540000}
C:\WINDOWS\Downloaded Program Files\swflash.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{D27CDB6E-AE6D-11CF-96B8-444553540000}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{D27CDB6E-AE6D-11CF-96B8-444553540000}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\ deleted successfully.
File oft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab not found.
Starting removal of ActiveX control Microsoft XML Parser for Java
Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\DownloadInformation\\INF .
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\Microsoft XML Parser for Java\ not found.
Prefs.js: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 removed from extensions.enabledItems
Prefs.js: jqs@sun.com:1.0 removed from extensions.enabledItems
========== FILES ==========
C:\Program Files\Java\jre6\lib\ext folder moved successfully.
C:\Program Files\Java\jre6\lib folder moved successfully.
C:\Program Files\Java\jre6 folder moved successfully.
C:\Program Files\Java folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\jre1.6.0_26 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\jre1.6.0_20 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\jre1.6.0_19 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\jre1.6.0_17 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\jre1.6.0_15 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\jre1.6.0_14 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\jre1.6.0_12 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\jre1.6.0_11 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\tmp\si folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\tmp folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\9 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\8 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\7 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\63 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\62 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\61 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\60 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\6 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\59 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\58 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\57 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\56 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\55 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-507d8761-n folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\54 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\53 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\52 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\51 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-3f022961-n folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\50 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\5 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\49 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\48 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\47 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-1c3f1c33-n folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\46 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\45 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\44 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\43 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-2002bfea-n folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\42 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\41 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\40 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-432e2c92-n folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\4 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\39 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\38 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\37 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\36 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\35 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\34 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\33 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\32 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\31 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\30 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\3 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\29 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\28 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\27 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\26 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\25 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\24 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\23 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\22 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\21 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\20 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\2 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\19 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\18 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-2179d922-n folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\17 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\16 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\15 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\14 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\13 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\12 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\11 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\10 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\1 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0\0 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache\6.0 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\SystemCache folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\security folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\log folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\ext folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\tmp folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\tmp folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\ext folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\javapi\v1.0 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\javapi folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\tmp folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\muffin folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\host folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\9 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\8 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\7 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\63 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-2d83b25e-n folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\62 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\61 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\60 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\6 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\59\252441bb-7d6e7cda-n folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\59 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\58 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\57 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\56 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\55\35fdae37-5412079d-n folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\55 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\54\1a209876-66dd0e1e-n folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\54 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\53\5e8cbb75-273ea233-n folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\53 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\52 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\51 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\50\5b902232-1173d0b2-n folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\50 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\5 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\49 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\48 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\47 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\46\759e98ee-4ece9162-n folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\46 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\45\4f710eed-282e29f7-n folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\45 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\44 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\43 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\42 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\41 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\40 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\4 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\39 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\38 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\37 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\36 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\35 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\34 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\33\258cea61-3c357827-n folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\33 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\32 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\31 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\30 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\3 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\29 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\28 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\27 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\26 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\25 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\24 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\23 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\22 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\21 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\20 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\2 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\19 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\18 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\17\6d0ad391-27b2a563-n folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\17 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\16 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\15\58fb3e0f-1d8174bc-n folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\15\4e09eacf-375d5483-n folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\15 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\14 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\13 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\12 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\11\4b13650b-44e098f4-n folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\11 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\10\6bc65f4a-2794f5dc-n folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\10 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\1 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0\0 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\6.0 folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java\AU folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun\Java folder moved successfully.
C:\Documents and Settings\user\Application Data\Sun folder moved successfully.
File\Folder c:\windows\system32\spes.sys not found.
File\Folder c:\windows\system\82483109 not found.
========== COMMANDS ==========
 
OTL by OldTimer - Version 3.2.26.1 log created on 08102011_175126

[roverstoffe]

 Volume in drive C has no label.
 Volume Serial Number is B07F-62F5

 Directory of C:\Windows\Fonts

08/07/2011  12:41 PM    <DIR>          .
08/07/2011  12:41 PM    <DIR>          ..
08/04/2004  07:00 AM            10,976 8514fix.fon
08/04/2004  07:00 AM            10,976 8514fixe.fon
08/04/2004  07:00 AM            11,520 8514fixg.fon
08/04/2004  07:00 AM            10,976 8514fixr.fon
08/04/2004  07:00 AM            11,488 8514fixt.fon
08/04/2004  07:00 AM            12,288 8514oem.fon
08/04/2004  07:00 AM            13,248 8514oeme.fon
08/04/2004  07:00 AM            12,800 8514oemg.fon
08/04/2004  07:00 AM            13,200 8514oemr.fon
08/04/2004  07:00 AM            12,720 8514oemt.fon
08/04/2004  07:00 AM             9,280 8514sys.fon
08/04/2004  07:00 AM             9,504 8514syse.fon
08/04/2004  07:00 AM             9,856 8514sysg.fon
08/04/2004  07:00 AM            10,064 8514sysr.fon
08/04/2004  07:00 AM             9,792 8514syst.fon
08/04/2004  07:00 AM            12,304 85775.fon
08/04/2004  07:00 AM            12,256 85855.fon
08/04/2004  07:00 AM            10,976 85f1257.fon
08/04/2004  07:00 AM             9,472 85s1257.fon
02/20/2007  04:48 PM           142,972 ACaslonPro-Bold.otf
02/20/2007  04:48 PM           169,448 ACaslonPro-BoldItalic.otf
02/20/2007  04:48 PM           167,264 ACaslonPro-Italic.otf
02/20/2007  04:48 PM           161,820 ACaslonPro-Regular.otf
02/20/2007  04:48 PM           165,956 ACaslonPro-Semibold.otf
02/20/2007  04:48 PM           170,172 ACaslonPro-SemiboldItalic.otf
02/20/2007  04:48 PM            73,380 AGaramondPro-Bold.otf
02/20/2007  04:48 PM            74,960 AGaramondPro-BoldItalic.otf
02/20/2007  04:48 PM            89,580 AGaramondPro-Italic.otf
02/20/2007  04:48 PM           118,940 AGaramondPro-Regular.otf
11/19/2002  11:43 AM            60,656 AGENCYB.TTF
11/19/2002  11:43 AM            58,920 AGENCYR.TTF
10/29/1999  01:42 PM            75,272 ALGER.TTF
11/12/1998  09:18 AM           151,000 ANTQUAB.TTF
11/12/1998  09:18 AM           150,416 ANTQUABI.TTF
11/12/1998  09:18 AM           149,092 ANTQUAI.TTF
08/04/2004  07:00 AM            35,808 app775.fon
08/04/2004  07:00 AM            36,672 app850.fon
08/04/2004  07:00 AM            36,656 app852.fon
08/04/2004  07:00 AM            37,296 app855.fon
08/04/2004  07:00 AM            36,672 app857.fon
08/04/2004  07:00 AM            37,472 app866.fon
08/04/2004  07:00 AM           367,112 arial.ttf
08/04/2004  07:00 AM           352,224 arialbd.ttf
08/04/2004  07:00 AM           226,748 arialbi.ttf
08/04/2004  07:00 AM           207,808 ariali.ttf
07/14/2006  11:01 AM           173,936 ARIALN.TTF
07/14/2006  11:01 AM           178,864 ARIALNB.TTF
07/14/2006  11:01 AM           178,316 ARIALNBI.TTF
07/14/2006  11:01 AM           179,368 ARIALNI.TTF
11/18/2002  06:44 PM        23,275,812 ARIALUNI.TTF
01/01/2007  01:58 PM           118,832 ariblk.ttf
08/18/1999  01:13 PM            45,260 ARLRDBD.TTF
02/20/2007  04:48 PM           403,036 ArnoPro-Bold.otf
02/20/2007  04:48 PM           399,536 ArnoPro-BoldCaption.otf
02/20/2007  04:48 PM           389,148 ArnoPro-BoldDisplay.otf
02/20/2007  04:48 PM           475,740 ArnoPro-BoldItalic.otf
02/20/2007  04:48 PM           460,244 ArnoPro-BoldItalicCaption.otf
02/20/2007  04:48 PM           462,676 ArnoPro-BoldItalicDisplay.otf
02/20/2007  04:48 PM           469,260 ArnoPro-BoldItalicSmText.otf
02/20/2007  04:48 PM           466,628 ArnoPro-BoldItalicSubhead.otf
02/20/2007  04:48 PM           404,968 ArnoPro-BoldSmText.otf
02/20/2007  04:48 PM           398,248 ArnoPro-BoldSubhead.otf
02/20/2007  04:48 PM           399,932 ArnoPro-Caption.otf
02/20/2007  04:48 PM           392,292 ArnoPro-Display.otf
02/20/2007  04:48 PM           475,412 ArnoPro-Italic.otf
02/20/2007  04:48 PM           470,496 ArnoPro-ItalicCaption.otf
02/20/2007  04:48 PM           465,336 ArnoPro-ItalicDisplay.otf
02/20/2007  04:48 PM           470,660 ArnoPro-ItalicSmText.otf
02/20/2007  04:48 PM           476,040 ArnoPro-ItalicSubhead.otf
02/20/2007  04:48 PM           386,912 ArnoPro-LightDisplay.otf
02/20/2007  04:48 PM           464,700 ArnoPro-LightItalicDisplay.otf
02/20/2007  04:48 PM           404,236 ArnoPro-Regular.otf
02/20/2007  04:48 PM           404,624 ArnoPro-Smbd.otf
02/20/2007  04:48 PM           403,528 ArnoPro-SmbdCaption.otf
02/20/2007  04:48 PM           394,300 ArnoPro-SmbdDisplay.otf
02/20/2007  04:48 PM           473,496 ArnoPro-SmbdItalic.otf
02/20/2007  04:48 PM           469,920 ArnoPro-SmbdItalicCaption.otf
02/20/2007  04:48 PM           471,696 ArnoPro-SmbdItalicDisplay.otf
02/20/2007  04:48 PM           467,560 ArnoPro-SmbdItalicSmText.otf
02/20/2007  04:48 PM           470,028 ArnoPro-SmbdItalicSubhead.otf
02/20/2007  04:48 PM           409,276 ArnoPro-SmbdSmText.otf
02/20/2007  04:48 PM           402,896 ArnoPro-SmbdSubhead.otf
02/20/2007  04:48 PM           405,068 ArnoPro-SmText.otf
02/20/2007  04:48 PM           401,276 ArnoPro-Subhead.otf
08/18/1999  01:13 PM            54,976 BASKVILL.TTF
08/18/1999  01:13 PM            46,176 BAUHS93.TTF
08/18/1999  01:13 PM            84,840 BELL.TTF
08/18/1999  01:13 PM            82,580 BELLB.TTF
02/20/2007  04:48 PM            29,996 BellGothicStd-Black.otf
02/20/2007  04:48 PM            30,128 BellGothicStd-Bold.otf
08/18/1999  01:13 PM            82,192 BELLI.TTF
08/18/1999  01:13 PM            70,656 BERNHC.TTF
02/20/2007  04:48 PM           612,936 BickhamScriptPro-Bold.otf
02/20/2007  04:48 PM           603,684 BickhamScriptPro-Regular.otf
02/20/2007  04:48 PM           627,240 BickhamScriptPro-Semibold.otf
02/20/2007  04:48 PM            35,748 BirchStd.otf
11/12/1998  09:18 AM           155,528 BKANT.TTF
02/20/2007  04:48 PM            43,648 BlackoakStd.otf
11/27/2002  03:42 PM            74,440 BOD_B.TTF
11/27/2002  03:42 PM            85,308 BOD_BI.TTF
11/27/2002  03:42 PM            83,816 BOD_BLAI.TTF
11/27/2002  03:42 PM            73,616 BOD_BLAR.TTF
11/27/2002  03:42 PM            74,092 BOD_CB.TTF
11/27/2002  03:42 PM            81,072 BOD_CBI.TTF
11/27/2002  03:42 PM            80,536 BOD_CI.TTF
11/27/2002  03:42 PM            80,580 BOD_CR.TTF
11/27/2002  03:42 PM            89,940 BOD_I.TTF
11/27/2002  03:42 PM            91,592 BOD_PSTC.TTF
11/27/2002  03:42 PM            77,884 BOD_R.TTF
11/04/1998  06:30 PM           160,940 BOOKOS.TTF
11/04/1998  06:30 PM           154,576 BOOKOSB.TTF
11/04/1998  06:30 PM           162,460 BOOKOSBI.TTF
08/18/1999  02:53 PM           161,020 BOOKOSI.TTF
10/15/1999  10:55 AM           105,296 BRADHITC.TTF
08/18/1999  01:13 PM            40,728 BRITANIC.TTF
07/14/1998  02:41 PM            96,880 BRLNSB.TTF
07/14/1998  02:41 PM            96,852 BRLNSDB.TTF
07/14/1998  02:41 PM            97,284 BRLNSR.TTF
05/03/2002  05:04 PM            60,372 BROADW.TTF
08/18/1999  01:13 PM            53,456 BRUSHSCI.TTF
02/20/2007  04:48 PM            35,148 BrushScriptStd.otf
12/12/2003  01:42 PM            54,412 BSSYM7.TTF
09/11/2006  12:12 PM           352,736 CALIBRI.TTF
09/11/2006  12:12 PM           351,544 CALIBRIB.TTF
09/11/2006  12:12 PM           362,524 CALIBRII.TTF
09/11/2006  12:12 PM           367,620 CALIBRIZ.TTF
07/14/1998  02:42 PM            80,620 CALIFB.TTF
07/14/1998  02:42 PM            98,748 CALIFI.TTF
07/14/1998  02:42 PM           105,300 CALIFR.TTF
04/02/1999  04:31 PM            80,148 CALIST.TTF
04/02/1999  04:32 PM            85,080 CALISTB.TTF
04/02/1999  04:32 PM            84,960 CALISTBI.TTF
04/02/1999  04:32 PM            59,372 CALISTI.TTF
09/26/2006  09:12 PM         1,090,456 CAMBRIA.TTC
09/26/2006  09:12 PM           331,916 CAMBRIAB.TTF
08/09/2006  02:14 PM           336,812 CAMBRIAI.TTF
08/09/2006  02:13 PM           326,024 CAMBRIAZ.TTF
08/09/2006  02:13 PM           161,644 CANDARA.TTF
08/09/2006  02:13 PM           164,904 CANDARAB.TTF
08/09/2006  02:13 PM           167,764 CANDARAI.TTF
08/09/2006  02:13 PM           165,928 CANDARAZ.TTF
10/15/1999  10:55 AM            48,252 CASTELAR.TTF
03/17/1999  04:07 PM           162,380 CENSCBK.TTF
10/15/1999  10:55 AM            82,760 CENTAUR.TTF
11/12/2002  11:26 AM           165,248 CENTURY.TTF
08/04/2004  07:00 AM             7,216 cga40737.fon
08/04/2004  07:00 AM             6,352 cga40850.fon
08/04/2004  07:00 AM             6,672 cga40852.fon
08/04/2004  07:00 AM             6,672 cga40857.fon
08/04/2004  07:00 AM             7,232 cga40866.fon
08/04/2004  07:00 AM             7,216 cga40869.fon
08/04/2004  07:00 AM             6,336 cga40woa.fon
08/04/2004  07:00 AM             5,168 cga80737.fon
08/04/2004  07:00 AM             4,320 cga80850.fon
08/04/2004  07:00 AM             5,200 cga80852.fon
08/04/2004  07:00 AM             4,640 cga80857.fon
08/04/2004  07:00 AM             5,168 cga80866.fon
08/04/2004  07:00 AM             5,168 cga80869.fon
08/04/2004  07:00 AM             4,304 cga80woa.fon
02/20/2007  04:48 PM           115,940 ChaparralPro-Bold.otf
02/20/2007  04:48 PM           115,384 ChaparralPro-BoldIt.otf
02/20/2007  04:48 PM           115,488 ChaparralPro-Italic.otf
02/20/2007  04:48 PM           115,724 ChaparralPro-Regular.otf
02/20/2007  04:48 PM            36,776 CharlemagneStd-Bold.otf
10/15/1999  10:55 AM            96,452 CHILLER.TTF
08/18/1999  01:13 PM            54,952 COLONNA.TTF
08/04/2004  07:00 AM           127,596 comic.ttf
08/04/2004  07:00 AM           111,476 comicbd.ttf
01/18/2006  12:32 PM            98,520 CONSOLA.TTF
01/18/2006  12:32 PM           100,436 CONSOLAB.TTF
01/18/2006  12:32 PM           104,144 CONSOLAI.TTF
01/18/2006  12:32 PM           110,268 CONSOLAZ.TTF
08/09/2006  02:13 PM           313,880 CONSTAN.TTF
08/09/2006  02:13 PM           317,724 CONSTANB.TTF
08/09/2006  02:13 PM           306,000 CONSTANI.TTF
08/09/2006  02:13 PM           313,044 CONSTANZ.TTF
08/18/1999  01:13 PM            80,388 COOPBL.TTF
02/20/2007  04:48 PM            35,896 CooperBlackStd-Italic.otf
02/20/2007  04:48 PM            34,340 CooperBlackStd.otf
08/18/1999  01:13 PM            61,552 COPRGTB.TTF
08/18/1999  01:13 PM            62,716 COPRGTL.TTF
08/09/2006  02:13 PM           205,016 CORBEL.TTF
08/09/2006  02:13 PM           210,788 CORBELB.TTF
08/09/2006  02:13 PM           209,852 CORBELI.TTF
08/09/2006  02:13 PM           217,308 CORBELZ.TTF
08/04/2004  07:00 AM            23,440 coue1257.fon
08/04/2004  07:00 AM            31,760 couf1257.fon
08/04/2004  07:00 AM           303,296 cour.ttf
08/04/2004  07:00 AM           312,920 courbd.ttf
08/04/2004  07:00 AM           236,148 courbi.ttf
08/04/2004  07:00 AM            23,408 coure.fon
08/04/2004  07:00 AM            23,440 couree.fon
08/04/2004  07:00 AM            25,024 coureg.fon
08/04/2004  07:00 AM            23,440 courer.fon
08/04/2004  07:00 AM            25,024 couret.fon
08/04/2004  07:00 AM            31,712 courf.fon
08/04/2004  07:00 AM            31,776 courfe.fon
08/04/2004  07:00 AM            33,344 courfg.fon
08/04/2004  07:00 AM            31,808 courfr.fon
08/04/2004  07:00 AM            33,360 courft.fon
08/04/2004  07:00 AM           245,032 couri.ttf
02/02/2000  06:28 PM            69,480 CURLZ___.TTF
11/10/2004  02:29 PM                67 desktop.ini
08/04/2004  07:00 AM            36,336 dos737.fon
08/04/2004  07:00 AM            36,656 dosapp.fon
02/20/2007  04:48 PM            29,932 EccentricStd.otf
08/04/2004  07:00 AM             9,248 ega40737.fon
08/04/2004  07:00 AM             8,384 ega40850.fon
08/04/2004  07:00 AM             8,368 ega40852.fon
08/04/2004  07:00 AM             8,704 ega40857.fon
08/04/2004  07:00 AM             9,232 ega40866.fon
08/04/2004  07:00 AM             9,248 ega40869.fon
08/04/2004  07:00 AM             8,368 ega40woa.fon
08/04/2004  07:00 AM             6,192 ega80737.fon
08/04/2004  07:00 AM             5,328 ega80850.fon
08/04/2004  07:00 AM             5,344 ega80852.fon
08/04/2004  07:00 AM             5,648 ega80857.fon
08/04/2004  07:00 AM             5,280 ega80866.fon
08/04/2004  07:00 AM             6,192 ega80869.fon
08/04/2004  07:00 AM             5,312 ega80woa.fon
06/24/1999  12:40 PM            51,652 ELEPHNT.TTF
06/24/1999  12:40 PM            54,324 ELEPHNTI.TTF
06/25/1999  01:23 PM            49,768 ENGR.TTF
03/17/1999  04:07 PM            57,508 ERASBD.TTF
03/17/1999  04:07 PM            59,996 ERASDEMI.TTF
03/17/1999  04:07 PM            68,656 ERASLGHT.TTF
03/17/1999  04:07 PM            60,772 ERASMD.TTF
08/04/2004  07:00 AM            79,744 estre.ttf
04/23/1999  05:22 PM            45,952 FELIXTI.TTF
11/21/2002  06:17 PM            61,776 FORTE.TTF
01/10/2001  03:32 PM           152,700 FRABK.TTF
01/10/2001  03:32 PM           169,620 FRABKIT.TTF
04/23/1999  05:22 PM           142,932 FRADM.TTF
04/23/1999  05:22 PM           116,940 FRADMCN.TTF
04/23/1999  05:22 PM           135,904 FRADMIT.TTF
04/23/1999  05:22 PM           139,400 FRAHV.TTF
04/23/1999  05:22 PM           152,700 FRAHVIT.TTF
08/04/2004  07:00 AM           135,984 framd.ttf
05/05/1999  09:02 PM           132,516 FRAMDCN.TTF
08/04/2004  07:00 AM           152,844 framdit.ttf
10/15/1999  10:55 AM            69,876 FREESCPT.TTF
04/23/1999  05:22 PM            58,580 FRSCRIPT.TTF
08/18/1999  01:13 PM            83,580 FTLTLT.TTF
11/10/1998  03:52 PM           196,616 GARA.TTF
11/10/1998  03:52 PM           198,604 GARABD.TTF
11/10/1998  03:52 PM           188,988 GARAIT.TTF
02/20/2007  04:48 PM           392,240 GaramondPremrPro-It.otf
02/20/2007  04:48 PM           358,928 GaramondPremrPro-Smbd.otf
02/20/2007  04:48 PM           394,980 GaramondPremrPro-SmbdIt.otf
02/20/2007  04:48 PM           359,040 GaramondPremrPro.otf
08/04/2004  07:00 AM           214,936 gautami.ttf
08/04/2004  07:00 AM           155,068 georgia.ttf
08/04/2004  07:00 AM           141,032 georgiab.ttf
08/04/2004  07:00 AM           157,388 georgiai.ttf
08/04/2004  07:00 AM           159,736 georgiaz.ttf
02/20/2007  04:48 PM            47,248 GiddyupStd.otf
10/15/1999  10:55 AM           142,072 GIGI.TTF
03/17/1999  04:07 PM            71,496 GILBI___.TTF
03/17/1999  04:07 PM            68,304 GILB____.TTF
04/02/1999  04:32 PM            60,320 GILC____.TTF
03/17/1999  04:07 PM            69,436 GILI____.TTF
04/02/1999  04:32 PM            72,408 GILLUBCD.TTF
04/02/1999  04:32 PM            73,136 GILSANUB.TTF
03/17/1999  04:07 PM            67,416 GIL_____.TTF
08/18/1999  01:13 PM            72,676 GLECB.TTF
04/18/2006  03:39 PM            26,040 GlobalMonospace.CompositeFont
06/29/2006  02:53 PM            26,489 GlobalSansSerif.CompositeFont
04/18/2006  03:39 PM            29,779 GlobalSerif.CompositeFont
06/29/2006  02:58 PM            30,808 GlobalUserInterface.CompositeFont
04/02/1999  04:32 PM            84,668 GLSNECB.TTF
11/12/1998  05:39 PM           137,568 GOTHIC.TTF
11/12/1998  05:39 PM           129,676 GOTHICB.TTF
11/12/1998  05:39 PM           139,084 GOTHICBI.TTF
11/12/1998  05:39 PM           148,520 GOTHICI.TTF
08/18/1999  01:13 PM            81,376 GOUDOS.TTF
08/18/1999  01:13 PM            82,796 GOUDOSB.TTF
08/18/1999  01:13 PM            80,280 GOUDOSI.TTF
05/03/2002  05:05 PM            55,956 GOUDYSTO.TTF
10/15/1999  10:55 AM            55,060 HARLOWSI.TTF
08/18/1999  01:14 PM            70,440 HARNGTON.TTF
11/14/1998  04:12 PM           108,664 HATTEN.TTF
02/20/2007  04:48 PM            30,416 HoboStd.otf
07/14/1998  02:42 PM            92,736 HTOWERT.TTF
07/14/1998  02:42 PM            74,712 HTOWERTI.TTF
01/01/2007  02:14 PM           137,448 impact.ttf
08/18/1999  01:14 PM            60,488 IMPRISHA.TTF
10/15/1999  10:55 AM            74,968 INFROMAN.TTF
10/15/1999  10:55 AM           132,372 ITCBLKAD.TTF
10/15/1999  10:55 AM            64,056 ITCEDSCR.TTF
10/15/1999  10:55 AM            59,712 ITCKRIST.TTF
10/15/1999  10:56 AM            69,752 JOKERMAN.TTF
10/15/1999  10:56 AM            62,884 JUICE___.TTF
08/04/2004  07:00 AM           121,452 kartika.ttf
02/20/2007  04:48 PM         3,559,960 KozGoPro-Bold.otf
02/20/2007  04:48 PM         3,213,948 KozGoPro-ExtraLight.otf
02/20/2007  04:48 PM         3,645,360 KozGoPro-Heavy.otf
02/20/2007  04:48 PM         3,429,316 KozGoPro-Light.otf
02/20/2007  04:48 PM         3,469,604 KozGoPro-Medium.otf
02/20/2007  04:48 PM         3,433,348 KozGoPro-Regular.otf
02/20/2007  04:48 PM         4,359,780 KozMinPro-Bold.otf
02/20/2007  04:48 PM         3,808,260 KozMinPro-ExtraLight.otf
02/20/2007  04:48 PM         4,246,516 KozMinPro-Heavy.otf
02/20/2007  04:48 PM         4,211,844 KozMinPro-Light.otf
02/20/2007  04:48 PM         4,287,272 KozMinPro-Medium.otf
02/20/2007  04:48 PM         4,224,580 KozMinPro-Regular.otf
10/15/1999  10:56 AM            63,392 KUNSTLER.TTF
08/04/2004  07:00 AM            73,292 latha.ttf
08/18/1999  01:14 PM            44,824 LATINWD.TTF
10/27/1999  11:26 AM            70,748 LBRITE.TTF
10/27/1999  11:26 AM            66,724 LBRITED.TTF
10/27/1999  11:26 AM            71,456 LBRITEDI.TTF
10/27/1999  11:26 AM            71,000 LBRITEI.TTF
10/27/1999  04:34 PM            55,464 LCALLIG.TTF
02/20/2007  04:48 PM            32,668 LetterGothicStd-Bold.otf
02/20/2007  04:48 PM            34,280 LetterGothicStd-BoldSlanted.otf
02/20/2007  04:48 PM            34,380 LetterGothicStd-Slanted.otf
02/20/2007  04:48 PM            32,944 LetterGothicStd.otf
10/27/1999  11:26 AM            61,912 LFAX.TTF
10/27/1999  11:26 AM            62,100 LFAXD.TTF
10/27/1999  11:26 AM            71,472 LFAXDI.TTF
10/27/1999  11:26 AM            67,420 LFAXI.TTF
10/27/1999  04:34 PM            62,484 LHANDW.TTF
02/20/2007  04:48 PM            76,984 LithosPro-Black.otf
02/20/2007  04:48 PM            76,600 LithosPro-Regular.otf
11/15/1999  12:09 PM            64,608 LSANS.TTF
11/15/1999  12:09 PM            59,976 LSANSD.TTF
11/15/1999  12:09 PM            66,320 LSANSDI.TTF
11/15/1999  12:09 PM            65,412 LSANSI.TTF
11/18/1999  11:29 AM            55,984 LTYPE.TTF
11/18/1999  11:29 AM            52,868 LTYPEB.TTF
11/18/1999  11:29 AM            54,620 LTYPEBO.TTF
11/18/1999  11:29 AM            65,412 LTYPEO.TTF
08/04/2004  07:00 AM           115,068 lucon.ttf
08/04/2004  07:00 AM           323,980 l_10646.ttf
07/14/1998  02:42 PM            65,284 MAGNETOB.TTF
06/24/1999  08:53 AM            61,384 MAIAN.TTF
08/04/2004  07:00 AM           143,864 mangal.ttf
08/04/2004  07:00 AM            24,124 marlett.ttf
08/18/1999  01:14 PM            51,296 MATURASC.TTF
02/20/2007  04:48 PM            50,324 MesquiteStd.otf
01/01/2007  02:25 PM           461,672 micross.ttf
02/20/2007  04:48 PM           210,112 MinionPro-Bold.otf
02/20/2007  04:48 PM           209,424 MinionPro-BoldCn.otf
02/20/2007  04:48 PM           250,536 MinionPro-BoldCnIt.otf
02/20/2007  04:48 PM           250,828 MinionPro-BoldIt.otf
02/20/2007  04:48 PM           250,708 MinionPro-It.otf
02/20/2007  04:48 PM           207,184 MinionPro-Medium.otf
02/20/2007  04:48 PM           249,264 MinionPro-MediumIt.otf
02/20/2007  04:48 PM           205,608 MinionPro-Regular.otf
02/20/2007  04:48 PM           209,348 MinionPro-Semibold.otf
02/20/2007  04:48 PM           250,660 MinionPro-SemiboldIt.otf
08/18/1999  01:14 PM           191,716 MISTRAL.TTF
08/18/1999  01:14 PM            62,612 MOD20.TTF
08/04/2004  07:00 AM             8,704 modern.fon
11/10/1998  03:52 PM           157,360 MTCORSVA.TTF
08/04/2004  07:00 AM            40,500 mvboli.ttf
02/20/2007  04:48 PM            96,484 MyriadPro-Bold.otf
02/20/2007  04:48 PM            95,628 MyriadPro-BoldCond.otf
02/20/2007  04:48 PM           100,168 MyriadPro-BoldCondIt.otf
02/20/2007  04:48 PM           101,512 MyriadPro-BoldIt.otf
02/20/2007  04:48 PM            93,424 MyriadPro-Cond.otf
02/20/2007  04:48 PM            98,336 MyriadPro-CondIt.otf
02/20/2007  04:48 PM           100,252 MyriadPro-It.otf
02/20/2007  04:48 PM            94,884 MyriadPro-Regular.otf
02/20/2007  04:48 PM            95,944 MyriadPro-Semibold.otf
02/20/2007  04:48 PM           101,416 MyriadPro-SemiboldIt.otf
07/14/1998  02:42 PM            95,904 NIAGENG.TTF
07/14/1998  02:42 PM            74,012 NIAGSOL.TTF
02/20/2007  04:48 PM            54,824 NuevaStd-BoldCond.otf
02/20/2007  04:48 PM            54,708 NuevaStd-BoldCondItalic.otf
02/20/2007  04:48 PM            55,424 NuevaStd-Cond.otf
02/20/2007  04:48 PM            55,248 NuevaStd-CondItalic.otf
06/24/1999  10:33 AM            55,400 OCRAEXT.TTF
02/20/2007  04:48 PM            29,460 OCRAStd.otf
10/15/1999  10:56 AM            93,068 OLDENGL.TTF
08/18/1999  01:14 PM            81,044 ONYX.TTF
02/04/2008  11:45 AM            37,052 OPUSCSC_.ttf
02/04/2008  11:45 AM            32,192 OPUSCS__.ttf
02/04/2008  11:45 AM            45,456 OPUSC___.TTF
02/04/2008  11:45 AM             9,976 OPUSFBE_.ttf
02/04/2008  11:45 AM            44,728 OPUSFB__.ttf
02/04/2008  11:45 AM            21,800 OPUSFS__.ttf
02/04/2008  11:45 AM            41,628 OPUSJAPC.TTF
02/04/2008  11:45 AM            12,724 OPUSM___.ttf
02/04/2008  11:45 AM            20,948 OPUSNN__.ttf
02/04/2008  11:45 AM            13,052 OPUSO___.ttf
02/04/2008  11:45 AM            45,796 OPUSPC__.TTF
02/04/2008  11:45 AM            45,636 OPUSP___.TTF
02/04/2008  11:45 AM            22,016 OPUSROMC.ttf
02/04/2008  11:45 AM            41,292 OPUSSE__.ttf
02/04/2008  11:45 AM            70,120 OPUSS___.TTF
02/04/2008  11:45 AM            25,860 OPUSTEXT.TTF
02/04/2008  11:45 AM            27,848 OPUS____.TTF
02/20/2007  04:48 PM            34,012 OratorStd-Slanted.otf
02/20/2007  04:48 PM            32,648 OratorStd.otf
04/08/2003  02:41 PM            17,672 OUTLOOK.TTF
08/04/2004  07:00 AM           489,884 pala.ttf
08/04/2004  07:00 AM           434,004 palab.ttf
08/04/2004  07:00 AM           344,288 palabi.ttf
08/04/2004  07:00 AM           430,800 palai.ttf
06/29/1999  02:57 PM            51,404 PALSCRI.TTF
05/10/2002  04:19 PM           163,476 PAPYRUS.TTF
10/15/1999  10:56 AM           151,256 PARCHM.TTF
06/29/1999  08:54 AM            75,620 PERBI___.TTF
06/29/1999  08:54 AM            58,512 PERB____.TTF
06/29/1999  08:54 AM            76,080 PERI____.TTF
06/28/1999  12:17 PM            48,320 PERTIBD.TTF
06/28/1999  12:17 PM            43,800 PERTILI.TTF
06/29/1999  12:15 PM            60,216 PER_____.TTF
08/18/1999  01:14 PM            46,164 PLAYBILL.TTF
10/15/1999  10:56 AM            76,588 POORICH.TTF
02/20/2007  04:48 PM            35,304 PoplarStd.otf
02/20/2007  04:48 PM            34,440 PrestigeEliteStd-Bd.otf
10/15/1999  10:56 AM            82,680 PRISTINA.TTF
08/04/2004  07:00 AM            57,348 raavi.ttf
06/24/1999  10:33 AM           132,600 RAGE.TTF
07/14/1998  02:42 PM            74,416 RAVIE.TTF
05/06/1999  12:59 PM           220,172 REFSAN.TTF
09/03/1998  04:14 PM            53,288 REFSPCL.TTF
06/29/1999  11:55 AM            59,444 ROCCB___.TTF
06/29/1999  11:55 AM            55,824 ROCC____.TTF
06/29/1999  11:56 AM            72,272 ROCK.TTF
06/29/1999  11:56 AM            68,780 ROCKB.TTF
06/29/1999  11:56 AM            73,700 ROCKBI.TTF
06/29/1999  02:57 PM            49,168 ROCKEB.TTF
06/29/1999  11:56 AM            76,756 ROCKI.TTF
08/04/2004  07:00 AM            13,312 roman.fon
02/20/2007  04:48 PM            66,024 RosewoodStd-Regular.otf
03/17/1999  04:07 PM           168,756 SCHLBKB.TTF
03/17/1999  04:07 PM           160,964 SCHLBKBI.TTF
03/17/1999  04:07 PM           163,164 SCHLBKI.TTF
08/04/2004  07:00 AM            12,288 script.fon
06/24/1999  10:33 AM            55,500 SCRIPTBL.TTF
08/04/2004  07:00 AM            59,024 sere1257.fon
08/04/2004  07:00 AM            84,080 serf1257.fon
08/04/2004  07:00 AM            57,936 serife.fon
08/04/2004  07:00 AM            59,952 serifee.fon
08/04/2004  07:00 AM            60,752 serifeg.fon
08/04/2004  07:00 AM            63,296 serifer.fon
08/04/2004  07:00 AM            61,024 serifet.fon
08/04/2004  07:00 AM            81,728 seriff.fon
08/04/2004  07:00 AM            85,360 seriffe.fon
08/04/2004  07:00 AM            86,256 seriffg.fon
08/04/2004  07:00 AM            90,736 seriffr.fon
08/04/2004  07:00 AM            84,848 serifft.fon
07/14/1998  02:42 PM            52,316 SHOWG.TTF
08/04/2004  07:00 AM           234,280 shruti.ttf
08/04/2004  07:00 AM            24,672 smae1257.fon
08/04/2004  07:00 AM            19,904 smaf1257.fon
08/04/2004  07:00 AM            26,112 smalle.fon
08/04/2004  07:00 AM            24,784 smallee.fon
08/04/2004  07:00 AM            28,912 smalleg.fon
08/04/2004  07:00 AM            24,832 smaller.fon
08/04/2004  07:00 AM            29,200 smallet.fon
08/04/2004  07:00 AM            21,504 smallf.fon
08/04/2004  07:00 AM            19,600 smallfe.fon
08/04/2004  07:00 AM            23,120 smallfg.fon
08/04/2004  07:00 AM            19,760 smallfr.fon
08/04/2004  07:00 AM            23,008 smallft.fon
10/15/1999  10:56 AM            63,196 SNAP____.TTF
08/04/2004  07:00 AM            65,456 ssee1257.fon
08/04/2004  07:00 AM            90,336 ssef1257.fon
08/04/2004  07:00 AM            64,656 sserife.fon
08/04/2004  07:00 AM            66,464 sserifee.fon
08/04/2004  07:00 AM            65,328 sserifeg.fon
08/04/2004  07:00 AM            68,848 sserifer.fon
08/04/2004  07:00 AM            64,400 sserifet.fon
08/04/2004  07:00 AM            89,856 sseriff.fon
08/04/2004  07:00 AM            92,032 sseriffe.fon
08/04/2004  07:00 AM            90,288 sseriffg.fon
08/04/2004  07:00 AM            98,256 sseriffr.fon
08/04/2004  07:00 AM            89,456 sserifft.fon
08/18/1999  01:14 PM            55,596 STENCIL.TTF
02/20/2007  04:48 PM            29,536 StencilStd.otf
08/04/2004  07:00 AM           221,676 sylfaen.ttf
08/04/2004  07:00 AM            69,464 symbol.ttf
08/04/2004  07:00 AM            56,336 symbole.fon
01/01/2007  02:26 PM           383,804 tahoma.ttf
01/01/2007  02:26 PM           355,680 tahomabd.ttf
06/29/1999  08:54 AM            73,856 TCBI____.TTF
06/29/1999  08:54 AM            74,656 TCB_____.TTF
06/25/1999  04:11 PM            66,020 TCCB____.TTF
11/19/2002  11:42 AM            74,708 TCCEB.TTF
06/25/1999  04:11 PM            66,804 TCCM____.TTF
06/29/1999  08:54 AM            78,236 TCMI____.TTF
06/29/1999  08:54 AM            76,252 TCM_____.TTF
02/20/2007  04:48 PM            80,020 TektonPro-Bold.otf
02/20/2007  04:48 PM            79,432 TektonPro-BoldCond.otf
02/20/2007  04:48 PM            81,668 TektonPro-BoldExt.otf
02/20/2007  04:48 PM            80,164 TektonPro-BoldObl.otf
10/15/1999  10:56 AM            76,100 TEMPSITC.TTF
08/04/2004  07:00 AM           409,280 times.ttf
08/04/2004  07:00 AM           398,372 timesbd.ttf
08/04/2004  07:00 AM           239,692 timesbi.ttf
08/04/2004  07:00 AM           248,368 timesi.ttf
02/20/2007  04:48 PM            65,848 TrajanPro-Bold.otf
02/20/2007  04:48 PM            66,484 TrajanPro-Regular.otf
08/04/2004  07:00 AM           134,108 trebuc.ttf
08/04/2004  07:00 AM           123,096 trebucbd.ttf
08/04/2004  07:00 AM           131,188 trebucbi.ttf
08/04/2004  07:00 AM           139,288 trebucit.ttf
01/01/2007  02:24 PM           148,624 tunga.ttf
08/04/2004  07:00 AM           171,792 verdana.ttf
08/04/2004  07:00 AM           137,616 verdanab.ttf
08/04/2004  07:00 AM           155,076 verdanai.ttf
08/04/2004  07:00 AM           154,800 verdanaz.ttf
08/04/2004  07:00 AM             5,168 vga737.fon
08/04/2004  07:00 AM             5,168 vga775.fon
08/04/2004  07:00 AM             5,232 vga850.fon
08/04/2004  07:00 AM             6,160 vga852.fon
08/04/2004  07:00 AM             5,120 vga855.fon
08/04/2004  07:00 AM             5,552 vga857.fon
08/04/2004  07:00 AM             5,184 vga860.fon
08/04/2004  07:00 AM             5,200 vga863.fon
08/04/2004  07:00 AM             5,184 vga865.fon
08/04/2004  07:00 AM             6,128 vga866.fon
08/04/2004  07:00 AM             5,184 vga869.fon
08/04/2004  07:00 AM             5,376 vgaf1257.fon
08/04/2004  07:00 AM             5,360 vgafix.fon
08/04/2004  07:00 AM             5,376 vgafixe.fon
08/04/2004  07:00 AM             6,112 vgafixg.fon
08/04/2004  07:00 AM             5,600 vgafixr.fon
08/04/2004  07:00 AM             6,112 vgafixt.fon
08/04/2004  07:00 AM             5,168 vgaoem.fon
08/04/2004  07:00 AM             6,656 vgas1257.fon
08/04/2004  07:00 AM             7,280 vgasys.fon
08/04/2004  07:00 AM             6,608 vgasyse.fon
08/04/2004  07:00 AM             7,008 vgasysg.fon
08/04/2004  07:00 AM             6,912 vgasysr.fon
08/04/2004  07:00 AM             6,912 vgasyst.fon
10/15/1999  10:56 AM           104,372 VINERITC.TTF
10/15/1999  10:56 AM            64,748 VIVALDII.TTF
10/15/1999  10:56 AM            54,308 VLADIMIR.TTF
08/04/2004  07:00 AM           252,820 vrinda.ttf
08/04/2004  07:00 AM           118,752 webdings.ttf
08/04/2004  07:00 AM            81,000 wingding.ttf
01/22/2002  05:22 PM            65,788 WINGDNG2.TTF
01/22/2002  05:22 PM            35,328 WINGDNG3.TTF
08/04/2004  07:00 AM            18,880 wst_czec.fon
08/04/2004  07:00 AM            18,880 wst_engl.fon
08/04/2004  07:00 AM            18,880 wst_fren.fon
08/04/2004  07:00 AM            18,880 wst_germ.fon
08/04/2004  07:00 AM            18,880 wst_ital.fon
08/04/2004  07:00 AM            18,880 wst_span.fon
08/04/2004  07:00 AM            18,880 wst_swed.fon
             545 File(s)    131,689,647 bytes

     Total Files Listed:
             545 File(s)    131,689,647 bytes
               2 Dir(s)  11,480,215,552 bytes free

[Bear]

Hi Roverstoffe

Believe it or not I think we're almost done.  Just to make sure let's run MBAM and ESET again and make sure they come up clean but before we do let's empty our your temp files and your system restore files.

1.  Download CCleaner (remove the checkmark from the Yahoo toolbar unless you want it).  Before first use, select Options / Advanced and uncheck "Only delete files in Windows Temp folder older than 48 hours" Then select the following:

In the Windows Tab:
Clean all entries in the "System" section.
Clean all entries in the "Advanced" section.
Clean any others that you choose.

In the Applications Tab:
Clean Sun Java in the Internet Section.
Clean any others that you choose.

Click the "Run Cleaner" button.  A pop up box will appear advising this process will permanently delete files from your system. Click OK.  Click exit when done.

2.  Next disable and Enable System Restore.  Use the following instructions: System Restore XP.  Now reboot. 
 
Re-enable system restore with instructions from above and create a System Restore Point.
Go to All Programs, then to Accessories, System Tools  and System Restore. Check the box for Create Restore Point (do not select a restore point), then click Next and follow the instructions.

3.  Now run MBAM again.  Be sure to update it before running and select full system scan.

4.  Run ESET again.

As always please be sure Word Wrap is disabled in Notepad.  Also be sure to check that the data you posted was not cut off by the sites posting size limits.

Please post the following as a reply to this post:
mbam-log-(date)
EsetLog.txt
How is your computer operating
Any other problems or questions you might have

[roverstoffe]

almost done!?  that's great news.  thanks again for your help and dedication so far.  my computer is running so well lately, even my regular anitvirus program is also behaving a little better than before.  here are the logs!

Malwarebytes' Anti-Malware 1.51.1.1800
www.malwarebytes.org

Database version: 7438

Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512

8/11/2011 7:58:02 PM
mbam-log-2011-08-11 (19-58-02).txt

Scan type: Full scan (C:\|)
Objects scanned: 121339
Time elapsed: 1 hour(s), 33 minute(s), 32 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6528
# api_version=3.0.2
# EOSSerial=1ac449ae30fe1244a38431db13a8fcf7
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-08-12 02:10:45
# local_time=2011-08-11 09:10:45 (-0600, Central Daylight Time)
# country="United States"
# lang=1033
# osver=5.1.2600 NT Service Pack 3
# compatibility_mode=512 16777215 100 0 103554 103554 0 0
# compatibility_mode=8192 67108863 100 0 0 0 0 0
# scanned=79624
# found=0
# cleaned=0
# scan_time=4230

[Bear]

Hi Roverstoffe

Well we did it!   Seems like your just about good to go and you are virus free.   

1.  Download OTC to your desktop and run it.

Click Yes to beginning the Cleanup process and yes to remove these components, including this application.  You will be asked to reboot the machine to finish the Cleanup process. Choose Yes.
This will remove all the malware tools we have used except combofix.

2.  Uninstall ComboFix as follows:  Copy the code in the code box below.

Code: [Select]


combofix /uninstall


Now click on start/run and paste the copied code into the input box.
Click OK.  Reboot your PC.

Now for some tips on preventing problems in the future.

3.   MOST IMPORTANT : Windows, IE and any other software you have that connects to the net, needs to be kept updated.  I recommend running Secunia PSI.  It will monitor the software you have installed and let you know when something needs to be updated.

Start by going to Start/Windows Update and install all recommended updates.  You may have to do this more than once to get your operating system and Internet Explorer up to date.


4. Now update Java by clicking Here, click on Windows Online then click on Run/Install/Next and finally click Close when the installation is complete.

Click on Start/Programs and launch the Adobe Reader program.  Click on Help and Check for Updates and install all updates available.

5.  Now some more tips for prevention of further infections:

Always use an updated anti-virus program. Make sure you update this weekly, if not more often. This is critical.

Keep MBAM up to date as well.  Unless you have the paid version (which you can schedule), be sure to run scans several times per week.

Always use your firewall.  Learn how to use your firewall.   Only programs that need it should have access to the net.  But these are specific to the firewall you use, so you will need to learn how.  Check your firewall provider's web site for more information on making your firewall secure. 

6.  Go to WOT download and install this program.  It will help keep you safe on the internet.

Never run two Antivirus programs or two Firewalls at the same time.

NEVER use P2P or file sharing software.  Many P2P file sharing programs contain bundled spyware.  But all these programs expose you to risks because of the very nature of the P2P file sharing process.  Many very malicious worms and trojans target and spread across P2P file sharing networks.

Before downloading, installing or using any malware detection/removal software check Rogue/Suspeckt Spyware List andRogue Applications List.  That way you will know if the program you are considering is safe.  If you want to know how it rates against other programs check out SpywareWarrior.

We have a good guide on how to prevent malware infections here at SpywareHammer.  You might want to peruse this and follow the recommendations Prevent Infection.

Let us know if you have any more problems, either new or old.  The internet is a wonderful tool for work and fun, but always be safe.

I would appreciate if after a couple of days of using your computer you let me know if everything is running fine so that I can close this post. 

[roverstoffe]

holy cow!  thanks again soooooo much for your time and all of your help.  You saved me a lot of stress and probably a lot of money too!

I'll post an update on Monday to let you know how things are going.

[roverstoffe]

well, it's been a few days and life is good!  thank you again so very, very much.