|
| | | Junior Member
 
Group: Forum Members
Last Login: 7/1/2008 2:51 AM
Posts: 165, Visits: 474 |
| In my office in 1 of the system, Normal folders displays as system protected folders , in attribute Im not able to uncheck the hidden option ..its grayed out..here is attachment of Hijack, combo fix and snapshot of folder properties
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:20, on 2008-03-27
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\lotus\notes\ntmulti.exe
C:\Program Files\Symantec AntiVirus\SavRoam.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Common Files\AOL\1190295521\ee\AOLHostManager.exe
C:\Tornado\host\x86-win32\bin\wtxregd.exe
C:\Program Files\Common Files\AOL\1190295521\ee\AOLServiceHost.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\IPMsg\ipmsg.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\mspaint.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 192.168.248.16:8002
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = epoch;192.*;172.*;10.*;
O1 - Hosts: 172.28.0.10 banagaloregear
O1 - Hosts: 198.36.98.95 teamtrack.ag.na.jci.com
O1 - Hosts: 198.36.98.112 a300es46.ag.na.jci.com
O1 - Hosts: 198.36.89.161 a300sm24.ag.na.jci.com
O1 - Hosts: 198.36.89.196 ag.johnsoncontrols.com
O1 - Hosts: 198.36.98.12 dmsweb.ag.na.jci.com
O1 - Hosts: 198.36.89.248 hollic1.ag.na.jci.com a300su40.ag.na.jci.com
O1 - Hosts: 198.36.89.249 hollic2.ag.na.jci.com a300su41.ag.na.jci.com
O1 - Hosts: 198.36.89.250 hollic3.ag.na.jci.com a300su94.ag.na.jci.com
O1 - Hosts: 198.36.89.251 a300su75.ag.na.jci.com
O1 - Hosts: 198.36.89.252 a300su66.ag.na.jci.com
O1 - Hosts: 198.36.89.253 a300su69.ag.na.jci.com
O1 - Hosts: 198.36.89.137 dms.ag.na.jci.com
O1 - Hosts: 198.36.89.140 a0300dmsp1.ag.na.jci.com
O1 - Hosts: 198.36.89.140 a0300dmsp1
O1 - Hosts: 198.36.89.242 a0300dmsp2.ag.na.jci.com
O1 - Hosts: 198.36.89.242 a0300dmsp2
O1 - Hosts: 192.169.172.3 Intranet
O1 - Hosts: 198.36.89.46 epic.jci.com
O1 - Hosts: 198.36.89.242 a0300dmsp2.ag.na.jci.com
O1 - Hosts: 198.36.89.242 a0300dmsp2
O1 - Hosts: 192.169.172.3 Intranet
O1 - Hosts: 198.36.89.46 epic.jci.com
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.1121.2472\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1190295521\ee\AOLHostManager.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {BA685A19-A28D-4241-B68A-FDE428C7B44E} - http://emsysproxy:8002/IssueLogin?redirect=http%3A%2F%2Factivex.microsoft.com%2Fobjects%2Focget.dll
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = emsys.net
O17 - HKLM\Software\..\Telephony: DomainName = emsys.net
O17 - HKLM\System\CCS\Services\Tcpip\..\{E737C540-BFBF-4674-8B25-EC411DECCAC6}: NameServer = 192.168.6.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = emsys.net
O17 - HKLM\System\CS1\Services\Tcpip\..\{1BE97073-F040-455D-AA2E-EA0E40D4C885}: NameServer = 192.168.6.1
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = emsys.net
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: Domain = emsys.net
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Cadence License Manager - Macrovision Corporation - C:\Cadence\license_manager\lmgrd.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Google Desktop Manager 5.5.709.30344 (GoogleDesktopManager-093007-112848) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Multi-user Cleanup Service - IBM Corp - C:\Program Files\lotus\notes\ntmulti.exe
O23 - Service: OpcEnum - Unknown owner - C:\WINDOWS\system32\OpcEnum.exe (file missing)
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
--
End of file - 8342 bytes
ComboFix 08-03-18.1 - aholeys 2008-03-27 11:12:56.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.605 [GMT 5.5:30]
Running from: C:\Documents and Settings\aholeys\Desktop\ComboFix.exe
[color=red]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/color]
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat
C:\kmd.exe
----- BITS: Possible infected sites -----
hxxp://192.168.178.18
.
((((((((((((((((((((((((( Files Created from 2008-02-27 to 2008-03-27 )))))))))))))))))))))))))))))))
.
2008-03-10 11:04 . 2008-03-10 11:04d--hs----C:\WINDOWS\ftpcache
2008-02-28 10:50 . 2004-08-03 23:0759,264--a------C:\WINDOWS\system32\drivers\USBAUDIO.sys
2008-02-28 10:50 . 2004-08-03 23:0759,264--a--c---C:\WINDOWS\system32\dllcache\usbaudio.sys
2008-02-28 10:50 . 2004-08-03 23:0831,616--a------C:\WINDOWS\system32\drivers\usbccgp.sys
2008-02-28 10:50 . 2004-08-03 23:0831,616--a--c---C:\WINDOWS\system32\dllcache\usbccgp.sys
2008-02-28 10:49 . 2008-02-28 10:49d--------C:\Program Files\Lexicon
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-27 02:38---------d-sha-rC:\Program Files\Symantec AntiVirus
2008-03-20 07:29---------d-----wC:\Documents and Settings\aholeys\Application Data\FileZilla
2008-03-11 04:59---------d-----wC:\Program Files\Common Files\AOL
2008-03-11 04:58---------d-----wC:\Program Files\XoftSpySE
2008-02-28 11:34---------d---a-wC:\Documents and Settings\All Users\Application Data\TEMP
2008-02-25 03:31---------d-----wC:\Program Files\TTERMPRO
2008-02-19 08:24---------d-----wC:\Program Files\Audacity
2008-02-19 04:28---------d--h--wC:\Program Files\InstallShield Installation Information
2008-02-19 04:22---------d-----wC:\Program Files\navisim2007
2008-02-19 04:19---------d-----wC:\Program Files\National Instruments
2008-02-19 04:19---------d-----wC:\Program Files\Default Company Name
2008-02-11 07:10---------d-----wC:\Program Files\Hotkey Search Tool
2008-02-08 11:37---------d-----wC:\Program Files\Common Files\Adobe
2008-01-29 06:45---------d-----wC:\Documents and Settings\aholeys\Application Data\Autodesk
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-11-21 09:13 68856]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 21:54 1694208]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [2004-10-14 14:42 1404928]
"vptray"="C:\PROGRA~1\SYMANT~1\VPTray.exe" [2005-04-24 17:21 120640]
"Synchronization Manager"="C:\WINDOWS\system32\mobsync.exe" [2004-08-04 17:30 143360]
"HostManager"="C:\Program Files\Common Files\AOL\1190295521\ee\AOLHostManager.exe" [2005-08-03 01:03 159832]
"Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [2007-11-23 11:03 29744]
"WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2008-01-16 04:24 37376]
C:\Documents and Settings\pcadmin\Start Menu\Programs\Startup\
IPMSG for Win32.lnk - C:\IPMsg\ipmsg.exe [2007-07-02 16:24:33 159744]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"AllAlertsDisabled"=dword:00000001
"TermService"=dword:00000001
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Tornado\\host\\x86-win32\\bin\\wtxregd.exe"=
"C:\\Program Files\\NetMeeting\\conf.exe"=
"C:\\IPMsg\\ipmsg.exe"=
"C:\\MentorGraphics\\2005\\SDD_HOME\\dms\\jre\\bin\\java.exe"=
"C:\\MentorGraphics\\2005\\SDD_HOME\\dms\\jre\\bin\\javaw.exe"=
"C:\\Program Files\\Common Files\\AOL\\1190295521\\ee\\AOLServiceHost.exe"=
"C:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\3dviewer\\3didrc.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\3dviewer\\3dvu.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\ccpDfIICatUpdtr.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\ccpVerilogUpdtr.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\ccpVhdlUpdtr.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\cdnshelp.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\cdsCopyShell.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\cdsinfo.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\cdsmps.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\cdsMsgServer.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\cdsNameServer.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\cdsOaPathUtil.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\cdsqmgr.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\cdsRemote.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\cdsRemshClient.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\cdsrshd.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\cdsRunHidden.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\cdsserv.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\cdsServIpc.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\cdsUnzip.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\cdswhich.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\cdsZip.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\cds_root.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\clsAdminTool.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\clsbd.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\clu.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\cmfeedback.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\cnskill.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\consmgr.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\copyproject.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\copyprojectui.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\dregprint.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\dsarchive.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\dsarchiver.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\dsreportgen.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\dsschgendocprog.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\edbconfig.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\emsMkError.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\gdmcancel.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\gdmci.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\gdmco.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\gdmdelete.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\gdmexecute.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\gdmexport.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\gdmhistory.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\gdmimport.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\gdmsetdefver.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\gdmsetname.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\gdmstatus.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\gdmsubmit.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\gdmupdate.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\lbsrun.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\mpsinfo.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\msgHelp.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\nmp.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\nmppath.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\scm.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\sipsimnetlister.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\switchversion.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\van.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\bin\\versionviewer.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\capture\\capture.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\capture\\comp16.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\capture\\pcadi.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\capture\\pspiceexplorersrvr.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\capture\\pstswp.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\capture\\regsvr32.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\capture\\sch2cap.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\capture\\tutorial\\CAPTUTOR.EXE"=
"D:\\Cadence\\SPB_16.0\\tools\\cdnshelp\\bin\\cdnshelp.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\cdnshelp\\bin\\topicgen.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\cdnshelp\\bin\\_cdnshelp.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\dfII\\bin\\allegro2dfII.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\dfII\\bin\\skill.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\dfII\\bin\\skill_g.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\act2cds.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\allegro2con.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\alt2cds.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\apd2con.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\appmgr.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\archcore.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\archiver.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\archopen.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\bodygen.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\bom.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\bomhdl.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\buildphysical.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\c2econn.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\c2esch.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\cap2con.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\cap2xml.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\cfg2vhdl.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\checkplus.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\checkplusui.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\compare2con.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\con2cap.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\con2con.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\con2csv.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\con2mentor.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\con2viewlogic.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\con2xml.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\concept2cm.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\concept2picvendor.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\concepthdl.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\cpmaccess.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\creferhdl.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\creferui.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\csv2con.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\da.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\designmanager.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\diffengine.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\dml2con.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\ds.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\e2cconn.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\e2csch.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\edbconfig.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\edif300ui.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\Ercdx.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\fpga2con.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\genpinlist.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\genvhdltb.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\genviewHDL.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\gscald.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\hdldirect.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\hfsymmap.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\ibis2con.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\iff2hdl.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\iff2hdlui.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\lib2cellptf.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\libaccess.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\libexp.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\LibFlow.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\lrm.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\lwbhdl.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\lwbxprobe.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\mentor2con.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\metadatagenx.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\mkdefcfg.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\nconcepthdl.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\ncrun.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\netassembler.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\newgenasym.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\olecs.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\opfclean.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\opfgen.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\partmgr.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\pcbCache.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\pdv.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\pic5xlibs.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\pichdlimport.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\picnetlister.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\PICRedrawhdl.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\picvendor2concept.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\pinpak2con.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\placeroute.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\projmgr.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\psetup.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\ptf.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\ptm2con.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\publishpdf.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\purge.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\pxl.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\QPSetup.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\rfpcbiff2hdl.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\rollback.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\sip_update_views.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\sir2edf.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\testbench.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\testpf.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\text2con.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\TransOLB.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\tsttrans.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\UniversalBrowser.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\update.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\updateloc.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\vdd.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\vedit.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\verifypnr.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\verifysynthesis.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\verilog2con.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\versiontool.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\vhdl2con.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\vhdlsplit.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\viewlogic2con.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\writesdf.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\xil2cdshdl.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\xml2cap.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\xml2con.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\bin\\xml2scr.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\fet\\section\\bin\\vlogports.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\jre\\bin\\java.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\jre\\bin\\javacpl.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\jre\\bin\\javaw.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\jre\\bin\\javaws.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\jre\\bin\\jucheck.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\jre\\bin\\jusched.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\jre\\bin\\keytool.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\jre\\bin\\kinit.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\jre\\bin\\klist.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\jre\\bin\\ktab.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\jre\\bin\\orbd.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\jre\\bin\\pack200.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\jre\\bin\\policytool.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\jre\\bin\\rmid.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\jre\\bin\\rmiregistry.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\jre\\bin\\servertool.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\jre\\bin\\tnameserv.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\jre\\bin\\unpack200.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\fvupdateutil.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\gcad.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\gcam.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\gcdin.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\idfin.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\ipc356.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\layout.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\libcat.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\lsession.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\max2hyp.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\maxascb.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\maxascx.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\maxdxf.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\maxeco.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\maxfnetx.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\maxminb.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\maxminw.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\maxminx.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\maxorcad.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\maxp99x.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\maxpadb.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\maxpadx.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\maxpcadb.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\maxpcadx.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\maxprotb.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\maxprotx.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\maxstrb.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\maxstrx.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\maxtangb.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\maxtangx.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\mfceco.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\orcadodb.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\padb.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\padx.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\pcadb.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\pcadx.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\pcb2max.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\prcat.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\protb.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\protx.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\searchTool.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\setbrows.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\specin.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\strb.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\strx.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\tangb.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\tangx.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\to386.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\toidf.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\tomax.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\tospec.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\update90.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\gtool\\Fonts\\F2G.EXE"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\gtool\\Fonts\\G2F.EXE"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\gtool\\Program\\custaped.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\gtool\\Program\\GERBLINE.EXE"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\gtool\\Program\\GerbTool.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\gtool\\Program\\GT2VIEW.EXE"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\gtool\\Program\\gzip124.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\gtool\\System\\FixTbar.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\samples\\demo\\reset.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\sroute\\batch32.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\sroute\\sroute.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\tutorial\\laytutor.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\layout_plus\\vcadd\\vcadd32.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\libutil\\hlibchk.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\libutil\\hlibftb.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\libutil\\hlibgenxmpl.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\libutil\\hlibsim.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\paksi\\paksi.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\a2dxf.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\a2sdf.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\aconvmap.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\allegro.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\allegro_free_viewer.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\allegro_librarian.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\allegro_viewer_plus.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\apd.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\aprepmap.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\artwork.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\ashowmap.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\axlform.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\batch_drc.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\bbvia.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\bem2d.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\brd2dml.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\cdnsip.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\chipio.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\chsim.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\cktlab.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\cktsim.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\create_devices.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\create_sym.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\dbdoctor.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\dbdoctor14.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\dbdoctor15.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\dbdoctor_ui.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\dbfix11.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\dbfix12.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\dbfix13.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\dbstat.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\db_change_type.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\dfa_dlg.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\dfa_update.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\dml2brd.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\dmlcheck.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\dmlcrypt.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\downrev14.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\downrev_library.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\draw_check.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\dump_libraries.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\dxf2a.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\ecl_schedule.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\enved.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\explot.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\extracta.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\fasthenry.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\flash_convert.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\fpbrowse.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\fpImportBrd.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\FSvia.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\FSviaSolver.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\ftsmerge.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\gbplot.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\genfeedformat.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\genrad.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\gloss.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\ibis2signoise.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\ibischk3.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\ibischk4.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\icmchk.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\idf_in.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\idf_out.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\iges_in.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\iges_out.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\il_allegro.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\ipc356_out.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\j2script.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\l2a.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\lis2buf.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\mbs2brd.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\mbs2lib.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\mergedml.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\mkdeviceindex.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\modelintegrity.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\modelsim.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\ncroute.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\nctape.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\netin.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\netrev.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\pads_in.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\pad_designer.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\parallel.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\pcad_in.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\pe_wordpad.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\placement.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\plctxt.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\pre_check.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\productServer.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\quad2signoise.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\qvupdate.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\rd_stream.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\refresh_padstack.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\refresh_symbol.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\refresh_vs.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\reftxt.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\report.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\signoise.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\sigwave.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\sigwave_sc.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\sigxp.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\sigxsect.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\sp2sp.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\spc2dml.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\spc2spc.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\spif.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\spif_batch.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\sproute.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\stream_out.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\swap.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\systemdump.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\sys_root.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\techfile.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\techfile13.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\techfile14.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\techfile15.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\tlp2.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\tlsim.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\ts2dml.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\uprev.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pcb\\bin\\zrouter.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\perl5\\bin\\perl.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\perl5\\bin\\perlglob.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\perl5\\ntt\\cmd32.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pspice\\IndiceFileGeneration.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pspice\\Magneticdesigner.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pspice\\modeled.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pspice\\MrkSrvr.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pspice\\pspice.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pspice\\pspiceaa.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pspice\\PSpiceEnc.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pspice\\pspiceexplorersrvr.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pspice\\psp_cmd.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pspice\\regsvr32.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pspice\\simmgr.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pspice\\simsrvr.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\pspice\\stmed.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\section\\section.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\specctra\\bin\\mbs2sp.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\specctra\\bin\\sp2mbs.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\specctra\\bin\\specctra.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\spectre\\bin\\spectre.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\tcltk\\tcl\\bin\\tclsh80.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\tcltk\\tcl\\bin\\wish80.exe"=
"D:\\Cadence\\SPB_16.0\\tools\\specctra\\bin\\specctra.com"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
R2 cvintdrv;cvintdrv;C:\WINDOWS\system32\drivers\cvintdrv.sys [2005-06-10 10:01]
R2 vcanv;Virtual CAN Bus Driver;C:\WINDOWS\system32\Drivers\vcanv.sys [2003-03-11 21:03]
S2 Cadence License Manager;Cadence License Manager;C:\Cadence\license_manager\lmgrd.exe [2007-03-18 13:36]
S3 DfuUsb;DfuUsb;C:\WINDOWS\system32\DRIVERS\DFUUsb.sys [2001-11-28 04:16]
S3 GoogleDesktopManager-093007-112848;Google Desktop Manager 5.5.709.30344;"C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [2007-11-23 11:03]
.
**************************************************************************
catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-27 11:15:21
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2008-03-27 11:16:35
ComboFix-quarantined-files.txt 2008-03-27 05:46:19
 |  |  |  |  1.JPG (2 views, 28.53 KB) |
|
|
| |  | |  |
|
| |
| | | 
Senior Forum Moderator
Group: Moderators
Last Login: Today @ 7:46 AM
Posts: 27,525, Visits: 54,327 |
| You cannot view or change the Read-only or the System attributes of folders in Windows Server 2003, in Windows XP, or in Windows Vista:
http://support.microsoft.com/default.aspx/kb/326549
Have Hijack This fix the following by placing a check in the appropriate boxes and selecting 'Fix checked'.
Make sure all browser and all Windows Explorer windows are closed before fixing:
O1 - Hosts: 172.28.0.10 banagaloregear
O1 - Hosts: 198.36.98.95 teamtrack.ag.na.jci.com
O1 - Hosts: 198.36.98.112 a300es46.ag.na.jci.com
O1 - Hosts: 198.36.89.161 a300sm24.ag.na.jci.com
O1 - Hosts: 198.36.89.196 ag.johnsoncontrols.com
O1 - Hosts: 198.36.98.12 dmsweb.ag.na.jci.com
O1 - Hosts: 198.36.89.248 hollic1.ag.na.jci.com a300su40.ag.na.jci.com
O1 - Hosts: 198.36.89.249 hollic2.ag.na.jci.com a300su41.ag.na.jci.com
O1 - Hosts: 198.36.89.250 hollic3.ag.na.jci.com a300su94.ag.na.jci.com
O1 - Hosts: 198.36.89.251 a300su75.ag.na.jci.com
O1 - Hosts: 198.36.89.252 a300su66.ag.na.jci.com
O1 - Hosts: 198.36.89.253 a300su69.ag.na.jci.com
O1 - Hosts: 198.36.89.137 dms.ag.na.jci.com
O1 - Hosts: 198.36.89.140 a0300dmsp1.ag.na.jci.com
O1 - Hosts: 198.36.89.140 a0300dmsp1
O1 - Hosts: 198.36.89.242 a0300dmsp2.ag.na.jci.com
O1 - Hosts: 198.36.89.242 a0300dmsp2
O1 - Hosts: 192.169.172.3 Intranet
O1 - Hosts: 198.36.89.46 epic.jci.com
O1 - Hosts: 198.36.89.242 a0300dmsp2.ag.na.jci.com
O1 - Hosts: 198.36.89.242 a0300dmsp2
O1 - Hosts: 192.169.172.3 Intranet
O1 - Hosts: 198.36.89.46 epic.jci.com
Download and scan with CCleaner:
http://www.ccleaner.com/downloadbuilds.asp
1. Starting with v1.27.260, CCleaner installs the Yahoo Toolbar as an option which IS checkmarked by default during the installation. IF you do NOT want it, REMOVE the checkmark when provided with the option OR download the toolbar-free Basic or Slim versions instead of the Standard Build.
2. Before first use, select Options > Advanced and UNCHECK "Only delete files in Windows Temp folder older than 48 hours"
3. Then select the items you wish to clean up.
In the Windows Tab:
* Clean all entries in the "Internet Explorer" section except Cookies.
* Clean all the entries in the "Windows Explorer" section.
* Clean all entries in the "System" section.
* Clean all entries in the "Advanced" section.
* Clean any others that you choose.
In the Applications Tab:
* Clean all except cookies in the Firefox/Mozilla section if you use it.
* Clean all in the Opera section if you use it.
* Clean Sun Java in the Internet Section.
* Clean any others that you choose.
4. Click the "Run Cleaner" button.
5. A pop up box will appear advising this process will permanently delete files from your system.
6. Click "OK" and it will scan and clean your system.
7. Click "Exit" when done.
Please download Malwarebytes Anti-Malware:
http://www.majorgeeks.com/Malwarebytes_Anti-Malware_d5756.html
http://www.besttechie.net/tools/mbam-setup.exe
Double Click mbam-setup.exe to install the application.
(If using Windows Vista,be sure to "Run As Administrator").
* Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select "Perform Quick Scan", then click Scan.
* The scan may take some time to finish,so please be patient.
* When the scan is complete, click OK, then Show Results to view the results.
* Make sure that everything is checked, and click Remove Selected.
* When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
* The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
* Copy and paste the entire report into your next reply along with a new HijackThis log.
Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.
Run F-Secure Online Scanner.
Note:
This scanner is for Internet Explorer only.
* Click on Online Services and then Online Scanner.
* Accept the License Agreement.
* Once the ActiveX installs,click Full System Scan.
* Once the download completes,the scan will begin automatically.
* The scan will take some time to finish,so please be patient.
* When the scan completes, click the Automatic cleaning (recommended) button.
* Click the Show Report button then copy and paste the entire report into your next reply.
Also post a new Hijackthis log.
__________________________________________________
Proud Member of ASAP (Alliance of Security Analysis Professionals).
Proud Member of U-N-I-T-E (Unified Network of Instructors and Trusted Eliminators).
Malware Complaints
 
|
| |
|
|
