| View previous topic :: View next topic |
| Author |
Message |
popara
Joined: 09 Nov 2008
Posts: 9
Location: ontario
|
 Posted: Sun Nov 09, 2008 6:19 pm Post subject: Access to web is blocked to anti virus sites... |
 |
|
...as well, download from antivirus sites is blocked, and upgrade from Microsoft is not accessible and Opera browser is not operational. I have removed Iexplorer and it is back somehow. I have removed virus/trojan files Brastk.exe , Karna.dat, beep.sys as well as some other programs - however block on access to web is still on. I could not download Hijackthis - had to use next door computer. Every minute or two program ntoskrnl.exe, explorer.exe and svchost.exe are try to get on line.
Help is very much appreciated
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:48:37 PM, on 11/9/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
D:\WINNT\System32\smss.exe
D:\WINNT\system32\winlogon.exe
D:\WINNT\system32\services.exe
D:\WINNT\system32\lsass.exe
D:\WINNT\system32\svchost.exe
D:\WINNT\System32\svchost.exe
D:\Program Files\Sygate\SPF\smc.exe
D:\WINNT\Explorer.EXE
D:\WINNT\system32\spoolsv.exe
D:\Program Files\Bonjour\mDNSResponder.exe
D:\WINNT\System32\tcpsvcs.exe
D:\WINNT\System32\snmp.exe
D:\WINNT\System32\svchost.exe
C:\Program Files\Safari\Safari.exe
D:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - D:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [SmcService] D:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [MSConfig] D:\WINNT\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKUS\S-1-5-19\..\RunOnce: [^SetupICWDesktop] D:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [^SetupICWDesktop] D:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [^SetupICWDesktop] D:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] D:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user')
O9 - Extra button: Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - D:\Program Files\VisualRoute\vrie.dll
O9 - Extra 'Tools' menuitem: VisualRoute Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - D:\Program Files\VisualRoute\vrie.dll
O9 - Extra button: ATI TV - {44226DFF-747E-4edc-B30C-78752E50CD0C} - D:\WINNT\system32\shdocvw.dll
O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - D:\Program Files\Bonjour\ExplorerPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: d:\winnt\system32\nwprovau.dll
O11 - Options group: [PAC] Automatic Proxy Configuration
O23 - Service: Bonjour Service - Apple Inc. - D:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - D:\Program Files\Sygate\SPF\smc.exe
--
End of file - 3193 bytes
_________________
My access to internet no longer is blocked - thanks to Patrik |
|
| Back to top |
|
 |
|
|
popara
Joined: 09 Nov 2008
Posts: 9
Location: ontario
|
| Posted: Sun Nov 09, 2008 9:39 pm Post subject: I am cured |
|
|
I followed some instructions posted here - and I have to say Combofix is .... I am speech less - it does what no other software can even come close. It sure is nice to deal with someone who nows its job.
Thank all of you guys
Symantec, avira, avg and rest of you from that club.......
Thanks again
_________________
My access to internet no longer is blocked - thanks to Patrik |
|
| Back to top |
|
|
patrik
Site Admin
Joined: 08 Jan 2006
Posts: 1865
|
|
| Back to top |
|
|
|
|
popara
Joined: 09 Nov 2008
Posts: 9
Location: ontario
|
| Posted: Mon Nov 10, 2008 6:07 pm Post subject: |
|
|
Hi Patrik,
Pc is working well now with exception of ntoskrnl.exe trying to get out every minut - as well interesting situation is with Opera browser only. I am posting this for readers benefit. On Opera I lost address bar and after cleaning regs dir and wherever I could find ref to Opera, with new installation/setup downloaded from their site - it is imposible to get opera working - no address bar. Question is; does opera have some hidden files or ... upon completely new installation beside not having address bar - pops my last page I was browsing on. Interesting?
I would appreciate if someone would look my Hijackthis file and tell me if something needs to be deleted.
here is my ComboFix.log and once again thank you;
ComboFix 08-11-07.01 - a 2008-11-09 16:03:03.1 - FAT32x86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.486 [GMT -5:00]
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
d:\winnt\system32\Drivers\TDSSmhxt.sys
d:\winnt\system32\mdm.exe
d:\winnt\system32\prsgrc.dll
d:\winnt\system32\qn6bj68.dll
d:\winnt\system32\ssprs.dll
d:\winnt\system32\TDSSbubx.log
d:\winnt\system32\TDSScfum.dll
d:\winnt\system32\TDSSnrsr.dll
d:\winnt\system32\TDSSosvd.dat
d:\winnt\system32\TDSSrhym.dll
d:\winnt\system32\TDSSriqp.dll
d:\winnt\Web\default.htt
d:\winnt\winhelp.ini
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Service_TDSSSERV.SYS)
-------\Legacy_TDSSSERV.SYS)
-------\Legacy_IPRIP
-------\Legacy_XPROTECTOR
-------\Service_IAS
-------\Service_Iprip
-------\Service_XPROTECTOR
((((((((((((((((((((((((( Files Created from 2008-10-09 to 2008-11-09 )))))))))))))))))))))))))))))))
.
2008-11-09 11:53 . 2008-11-09 11:53 <DIR> d-------- d:\program files\Trend Micro
2008-11-08 17:08 . 2008-11-08 17:08 <DIR> d-------- d:\program files\XPCMonitor_3262
2008-11-08 16:56 . 2008-11-08 16:56 108,256 --ah----- d:\winnt\system32\mlfcache.dat
2008-11-08 15:36 . 2008-11-09 11:18 63 --a------ d:\winnt\system\SysSD.dll
2008-11-08 10:12 . 2008-11-08 10:12 <DIR> d-------- d:\program files\Bonjour
2008-11-08 10:11 . 2008-11-08 10:11 <DIR> d-------- d:\program files\Apple Software Update
2008-11-08 10:11 . 2008-11-08 10:11 <DIR> d-------- d:\docume~1\ALLUSE~1\APPLIC~1\Apple
2008-11-06 15:41 . 2008-11-06 15:41 <DIR> d-------- d:\program files\G-Lock Software
2008-11-04 15:50 . 2008-11-04 15:50 <DIR> d-------- d:\program files\Opera
2008-11-01 23:12 . 2008-11-01 23:13 <DIR> d-------- d:\docume~1\ALLUSE~1\APPLIC~1\AntiVir PersonalEdition Classic
2008-10-31 21:00 . 2008-10-31 21:00 <DIR> d-------- d:\program files\RegCure
2008-10-29 21:46 . 2008-10-29 21:46 28,672 --a------ d:\winnt\system32\Partizan.exe
2008-10-29 21:41 . 2008-10-29 21:41 2 -rahs---- d:\winnt\winstart.bat
2008-10-29 15:54 . 2008-10-29 15:55 <DIR> d-------- d:\program files\Avira
2008-10-29 15:54 . 2008-10-29 15:55 <DIR> d-------- d:\docume~1\ALLUSE~1\APPLIC~1\Avira
2008-10-29 13:26 . 2008-10-29 13:26 228 --a------ d:\winnt\system32\spupdsvc.inf
2008-10-28 15:44 . 2008-10-28 15:44 <DIR> d--h----- D:\$AVG8.VAULT$
2008-10-28 04:18 . 2008-10-28 04:18 61,440 --a------ d:\winnt\system32\XPC_NetMon.old
2008-10-27 23:10 . 2008-10-27 23:10 35,328 --a------ d:\winnt\system32\TDSSofxh.dll
2008-10-27 19:08 . 2008-10-27 19:08 54,156 --ah----- d:\winnt\QTFont.qfn
2008-10-27 19:08 . 2008-10-27 19:08 1,409 --a------ d:\winnt\QTFont.for
2008-10-27 18:40 . 2001-08-17 13:47 4,224 --a------ d:\winnt\system32\drivers\beep.sys
2008-10-27 18:40 . 2001-08-17 13:47 4,224 --a------ d:\winnt\system32\dllcache\beep.sys
2008-10-27 18:39 . 2001-08-17 13:47 4,224 --a------ d:\winnt\beep.sys
2008-10-26 23:32 . 2008-10-26 23:32 <DIR> d-------- d:\docume~1\ALLUSE~1\APPLIC~1\avg8
2008-10-26 20:09 . 2008-10-26 20:09 <DIR> d-------- d:\docume~1\ALLUSE~1\APPLIC~1\TEMP
2008-10-26 20:05 . 2008-10-26 20:05 <DIR> d-------- d:\program files\Trojan Remover
2008-10-26 20:05 . 2008-10-26 20:05 <DIR> d-------- d:\documents and settings\a\Application Data\Simply Super Software
2008-10-26 20:05 . 2008-10-26 20:05 <DIR> d-------- d:\docume~1\ALLUSE~1\APPLIC~1\Simply Super Software
2008-10-26 20:05 . 2006-05-25 15:52 162,304 --a------ d:\winnt\system32\ztvunrar36.dll
2008-10-26 20:05 . 2003-02-02 20:06 153,088 --a------ d:\winnt\system32\UNRAR3.dll
2008-10-26 20:05 . 2005-08-26 01:50 77,312 --a------ d:\winnt\system32\ztvunace26.dll
2008-10-26 20:05 . 2002-03-06 01:00 75,264 --a------ d:\winnt\system32\unacev2.dll
2008-10-26 20:05 . 2006-06-19 13:01 69,632 --a------ d:\winnt\system32\ztvcabinet.dll
2008-10-26 11:31 . 2008-10-26 11:31 <DIR> d-------- d:\winnt\system32\LogFiles
2008-10-25 11:59 . 2008-10-26 11:33 60,578 --a------ d:\winnt\system32\vir.wini10801.exe.vir
2008-10-25 11:51 . 2008-10-30 10:41 2,852 --a------ d:\winnt\system32\TDSSfxwp.dll
2008-10-25 03:53 . 2008-10-25 03:53 221,184 --a------ d:\winnt\system32\HookText.old
2008-10-25 03:53 . 2008-10-25 03:53 53,248 --a------ d:\winnt\system32\HookPassword.old
2008-10-19 20:46 . 2008-10-19 20:46 <DIR> d-------- d:\docume~1\ALLUSE~1\APPLIC~1\Kaspersky Lab Setup Files
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-10-30 19:40 353,042 ----a-w d:\winnt\vir.iis6.log.vir
2008-09-26 02:38 14,602 --sha-w d:\winnt\system32\KGyGaAvL.sys
2008-09-24 17:25 41,888 ----a-w d:\winnt\system32\drivers\vir.Oreans.sys.vir
2008-09-24 17:22 191,488 ----a-w d:\winnt\system32\hlvdd.dll
2008-08-16 05:08 6,656 ----a-w d:\winnt\system32\haspvdd.dll
2007-03-19 21:33 87,608 ----a-w d:\documents and settings\a\Application Data\ezpinst.exe
2007-03-19 21:33 47,360 ----a-w d:\documents and settings\a\Application Data\pcouffin.sys
2006-04-10 20:26 271 --sh--w d:\program files\desktop.ini
2004-08-04 05:56 50,688 --sh--w d:\winnt\twain_32.dll
2001-08-23 17:00 94,784 --sh--w d:\winnt\twain.dll
2004-08-04 05:56 11,776 --sh--w d:\winnt\system32\regsvr32.exe
2007-03-03 13:01 56 --sh--r d:\winnt\system32\AEF8AD10EE.sys
2005-06-26 23:32 616,448 --sha-r d:\winnt\system32\cygwin1.dll
2005-07-14 20:31 27,648 --sha-w d:\winnt\system32\AVSredirect.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmcService"="d:\progra~1\Sygate\SPF\smc.exe" [2004-08-13 2532576]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"tscuninstall"="d:\winnt\system32\tscupgrd.exe" [2004-08-03 44544]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"= mmdrv.dll
"msacm.l3acm"= l3codecp.acm
"VIDC.JPEG"= JPEGCODE.DLL
"VIDC.MJPG"= Pvmjpg30.dll
"msacm.dvacm"= d:\progra~1\COMMON~1\ULEADS~1\Vio\Dvacm.acm
"msacm.MPEGacm"= mpegacm.acm
"msacm.ulmp3acm"= ulmp3acm.acm
[HKLM\~\startupfolder\D:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Acrobat Speed Launcher.lnk]
path=d:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Acrobat Speed Launcher.lnk
backup=d:\winnt\pss\Adobe Acrobat Speed Launcher.lnkCommon Startup
[HKLM\~\startupfolder\D:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Acrobat Synchronizer.lnk]
path=d:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Acrobat Synchronizer.lnk
backup=d:\winnt\pss\Adobe Acrobat Synchronizer.lnkCommon Startup
[HKLM\~\startupfolder\D:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=d:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=d:\winnt\pss\Adobe Reader Speed Launch.lnkCommon Startup
[HKLM\~\startupfolder\D:^Documents and Settings^All Users^Start Menu^Programs^Startup^EdgeCLS12.00.lnk]
path=d:\documents and settings\All Users\Start Menu\Programs\Startup\EdgeCLS12.00.lnk
backup=d:\winnt\pss\EdgeCLS12.00.lnkCommon Startup
[HKLM\~\startupfolder\D:^Documents and Settings^a^Start Menu^Programs^Startup^Adobe Gamma.lnk]
path=d:\documents and settings\a\Start Menu\Programs\Startup\Adobe Gamma.lnk
backup=d:\winnt\pss\Adobe Gamma.lnkStartup
[HKLM\~\startupfolder\D:^Documents and Settings^a^Start Menu^Programs^Startup^SolidWorks Task Scheduler Engine.lnk]
path=d:\documents and settings\a\Start Menu\Programs\Startup\SolidWorks Task Scheduler Engine.lnk
backup=d:\winnt\pss\SolidWorks Task Scheduler Engine.lnkStartup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
d:\winnt\system32\dumprep 0 -k [X]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0]
--a------ 2006-10-22 23:24 620152 d:\program files\Adobe\Acrobat 8.0\Acrobat\acrotray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
--a------ 2004-08-04 00:56 15360 d:\winnt\system32\ctfmon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PinnacleDriverCheck]
--a------ 2004-03-11 01:26 406016 d:\winnt\system32\PSDrvCheck.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
--a------ 2006-03-17 21:24 184320 d:\program files\PowerISO\PWRISOVM.EXE
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2007-03-11 20:41 155648 d:\program files\QuickTime\qttask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Share-to-Web Namespace Daemon]
--a------ 2001-07-03 09:11 57344 d:\program files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sonic RecordNow! Deluxe]
--a------ 2004-08-04 00:56 15360 d:\winnt\system32\ctfmon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSC Service Utility]
--a------ 2006-05-03 10:50 484352 f:\programs\Epson Service Utility (Pre-installed)\ssc_serv.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrojanScanner]
--a------ 2008-10-25 16:47 968072 c:\program files\Trojan Remover\Trjscan.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UVS10 Preload]
--------- 2006-03-07 00:52 36864 d:\program files\Ulead Systems\Ulead VideoStudio 10\uvPL.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
-ra------ 2005-07-22 03:00 81920 d:\winnt\SOUNDMAN.EXE
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Synchronization Manager]
--a------ 2004-08-04 00:56 143360 d:\winnt\system32\mobsync.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VTTimer]
-ra------ 2005-03-07 15:33 53248 d:\winnt\system32\VTTimer.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VTTrayp]
-ra------ 2005-03-11 05:33 147456 d:\winnt\system32\VTTrayp.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"usnjsvc"=3 (0x3)
"UPnPService"=3 (0x3)
"SQLBrowser"=2 (0x2)
"SolidWorks Licensing Service"=3 (0x3)
"SiSWLSvc"=2 (0x2)
"NMIndexingService"=3 (0x3)
"MSSQLServerADHelper"=3 (0x3)
"MSSQL$SQLEXPRESS"=2 (0x2)
"MSSQL$AUTODESKVAULT"=2 (0x2)
"lmgrd"=2 (0x2)
"JMP License Service"=3 (0x3)
"idsvc"=3 (0x3)
"IDriverT"=3 (0x3)
"FLEXnet Licensing Service"=3 (0x3)
"FLEXlm server for PTC"=2 (0x2)
"FirebirdServerMAGIXInstance"=3 (0x3)
"CLTNetCnService"=3 (0x3)
"Autodesk Licensing Service"=3 (0x3)
"Adobe LM Service"=3 (0x3)
"IntelinetSecure"=3 (0x3)
"UleadBurningHelper"=2 (0x2)
"wuauserv"=2 (0x2)
"wscsvc"=2 (0x2)
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
"DisableNotifications"= 1 (0x1)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\OrCAD\\OrCAD_10.5\\updates.exe"=
"c:\\OrCAD\\OrCAD_10.5\\setconfig.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\regsvr32.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\pspiceexplorersrvr.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\modeled.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\IndiceFileGeneration.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\MrkSrvr.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\pspice.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\psp_cmd.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\simmgr.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\simsrvr.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\stmed.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\lxcwin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\msgview.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\PDesign.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\psched.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\Magneticdesigner.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\pspiceaa.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\Backup\\psched.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\SETBROWS.EXE"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\pcadi.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\regsvr32.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\pstswp.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\pspiceexplorersrvr.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\sch2cap.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\setbrows.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gcad.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gcam.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gcdin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\idfin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\ipc356.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\libcat.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\lsession.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\max2hyp.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxascb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxascx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxdxf.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxfnetx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxminb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxminw.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxminx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxorcad.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxp99x.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxpadb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxpadx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxpcadb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxpcadx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxprotb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxprotx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxstrb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxstrx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxtangb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxtangx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\orcadodb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\padb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\padx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\pcadb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\pcadx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\pcb2max.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\prcat.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\protb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\protx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\specin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\strb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\strx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\tangb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\tangx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\to386.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\toidf.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\tomax.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\tospec.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\update90.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\fvupdateutil.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\layout.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxeco.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\mfceco.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\searchTool.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\sroute\\sroute.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\vcadd\\vcadd32.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\tutorial\\laytutor.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gtool\\fonts\\g2r.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gtool\\program\\gerbline.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gtool\\program\\gerbtool.exe"= c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gtool\\program\\Gerbtool.exe
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gtool\\system\\fixtbar.exe"= c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gtool\\system\\FixTbar.exe
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\samples\\demo\\reset.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\nmp.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\nmppath.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\obServer.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\van.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\mpsinfo.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\versionviewer.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\cdsdoc\\bin\\obServer.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\bin\\merge.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\bin\\mkvdk.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\bin\\search.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\bin\\setup.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\htmlini.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\htmserv.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\index.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\jstree.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\jvtree.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\kvoop.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\regsvr32.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\summary.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\javaws-1_2_0_02-windows-i586-i.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\java.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\javaw.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\jpicpl32.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\keytool.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\kinit.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\klist.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\ktab.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\orbd.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\policytool.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\rmid.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\rmiregistry.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\servertool.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\tnameserv.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\fet\\bin\\mkdefcfg.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\fet\\bin\\versiontool.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\fet\\bin\\newgenasym.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\fet\\bin\\libaccess.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\fet\\bin\\projmgr.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\fet\\bin\\psetup.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\flash_convert.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\fpbrowse.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\qvupdate.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\systemdump.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\uprev.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\plctxt.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\genfeedformat.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\netrev.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\idf_in.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\idf_out.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\iges_in.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\iges_out.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ipc356_out.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\gbplot.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\genrad.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\gloss.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ncroute.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\nctape.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\netin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\pad_designer.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\pads_in.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\pcad_in.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\placement.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\swap.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\techfile13.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\techfile14.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\sys_root.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\spif.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\spif_batch.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\mbs2lib.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\FSvia.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\FSviaSolver.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\il_allegro.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\j2script.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\parallel.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\pe_wordpad.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\pre_check.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\refresh_padstack.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\refresh_symbol.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\refresh_vs.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\reftxt.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\report.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\tlp2.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\productServer.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\signoise.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\lis2buf.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\modelintegrity.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\modelsim.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\spc2dml.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\sigxp.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ftsmerge.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ibis2signoise.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ibischk3.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ibischk4.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\mergedml.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\mkdeviceindex.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\quad2signoise.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\sigwave.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\sigwave_sc.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\sigxsect.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\spc2spc.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\tlsim.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ts2dml.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\fvupdateutil.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gcad.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gcam.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gcdin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\idfin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\ipc356.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\layout.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\libcat.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\lsession.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\max2hyp.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxascb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxascx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxdxf.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxeco.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxfnetx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxminb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxminw.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxminx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxorcad.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxp99x.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxpadb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxpadx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxpcadb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxpcadx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxprotb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxprotx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxstrb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxstrx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxtangb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxtangx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\mfceco.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\orcadodb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\padb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\padx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\pcadb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\pcadx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\pcb2max.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\prcat.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\protb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\protx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\searchTool.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\setbrows.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\specin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\strb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\strx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\tangb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\tangx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\to386.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\toidf.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\tomax.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\tospec.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\update90.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gtool\\fonts\\g2r.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gtool\\program\\gerbline.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gtool\\program\\gerbtool.exe"= c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gtool\\program\\Gerbtool.exe
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gtool\\system\\fixtbar.exe"= c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gtool\\system\\FixTbar.exe
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\vcadd\\vcadd32.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\samples\\demo\\reset.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\sroute\\sroute.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\tutorial\\laytutor.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\fvupdateutil.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gcad.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gcam.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gcdin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\idfin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\ipc356.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\layout.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\libcat.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\lsession.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\max2hyp.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxascb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxascx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxdxf.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxeco.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxfnetx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxminb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxminw.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxminx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxorcad.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxp99x.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxpadb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxpadx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxpcadb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxpcadx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxprotb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxprotx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxstrb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxstrx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxtangb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxtangx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\mfceco.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\orcadodb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\padb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\padx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\pcadb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\pcadx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\pcb2max.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\prcat.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\protb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\protx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\searchTool.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\setbrows.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\specin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\strb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\strx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\tangb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\tangx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\to386.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\toidf.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\tomax.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\tospec.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\update90.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gtool\\fonts\\g2r.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gtool\\program\\gerbline.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gtool\\program\\gerbtool.exe"= c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gtool\\program\\Gerbtool.exe
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gtool\\system\\fixtbar.exe"= c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gtool\\system\\FixTbar.exe
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\samples\\demo\\reset.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\sroute\\sroute.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\tutorial\\laytutor.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\dfII\\bin\\skill.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\dfII\\bin\\skill_g.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\specctra\\bin\\specctra.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\perl5\\bin\\perl.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\perl5\\bin\\perlglob.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\specctra\\bin\\specctra.com"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\switchversion.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\specctra.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pcb\\bin\\ibis2signoise.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pcb\\bin\\sigwave.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pcb\\bin\\tlsim.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pcb\\bin\\sigxp.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pcb\\bin\\modelsim.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pcb\\bin\\spc2dml.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pcb\\bin\\signoise.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pcb\\bin\\productserver.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pcb\\bin\\fsvia.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pcb\\bin\\refresh_symbol.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pcb\\bin\\reftxt.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pcb\\bin\\report.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pcb\\bin\\techfile.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pcb\\bin\\mbs2lib.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pcb\\bin\\spif.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pcb\\bin\\spif_batch.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pcb\\bin\\pads_in.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pcb\\bin\\netin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pcb\\bin\\idf_out.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pcb\\bin\\genfeedformat.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pcb\\bin\\netrev.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pcb\\bin\\plctxt.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pcb\\bin\\qvupdate.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\bin\\versionviewer.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\specctra\\bin\\specctra.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\fvupdateutil.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\gcad.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\gcam.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\gcdin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\idfin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\ipc356.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\layout.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\libcat.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\lsession.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\maxascb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\maxascx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\maxdxf.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\maxeco.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\maxfnetx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\maxminb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\maxminw.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\maxminx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\maxorcad.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\maxp99x.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\maxpadb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\maxpadx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\maxpcadb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\maxpcadx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\maxprotb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\maxprotx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\maxstrb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\maxstrx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\maxtangb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\maxtangx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\mfceco.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\orcadodb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\padb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\padx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\pcadb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\pcadx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\pcb2max.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\prcat.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\protb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\protx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\searchtool.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\specin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\strb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\strx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\tangb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\to386.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\toidf.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\tomax.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\tospec.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\update90.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\sroute\\sroute.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\gtool\\program\\gerbtool.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\gtool\\system\\fixtbar.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\fvupdateutil.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\gcad.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\gcam.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\gcdin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\idfin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\ipc356.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\layout.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\libcat.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\lsession.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\maxascb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\maxascx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\maxdxf.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\maxeco.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\maxfnetx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\maxminb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\maxminw.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\maxminx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\maxorcad.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\maxp99x.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\maxpadb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\maxpadx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\maxpcadb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\maxpcadx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\maxprotb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\maxprotx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\maxstrb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\maxstrx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\maxtangb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\maxtangx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\mfceco.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\orcadodb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\padb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\padx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\pcadb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\pcadx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\pcb2max.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\prcat.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\protb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\protx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\searchtool.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\specin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\strb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\strx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\tangb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\to386.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\toidf.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\tomax.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\tospec.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\update90.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\sroute\\sroute.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\gtool\\program\\gerbtool.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\gtool\\system\\fixtbar.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\fvupdateutil.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\gcad.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\gcam.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\gcdin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\idfin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\ipc356.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\layout.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\libcat.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\lsession.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\maxascb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\maxascx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\maxdxf.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\maxeco.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\maxfnetx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\maxminb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\maxminw.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\maxminx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\maxorcad.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\maxp99x.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\maxpadb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\maxpadx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\maxpcadb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\maxpcadx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\maxprotb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\maxprotx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\maxstrb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\maxstrx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\maxtangb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\maxtangx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\mfceco.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\orcadodb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\padb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\padx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\pcadb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\pcadx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\pcb2max.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\prcat.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\protb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\protx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\searchtool.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\specin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\strb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\strx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\tangb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\to386.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\toidf.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\tomax.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\tospec.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\update90.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\sroute\\sroute.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\gtool\\program\\gerbtool.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\gtool\\system\\fixtbar.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pspice\\pspiceaa.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pspice\\magneticdesigner.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pspice\\lxcwin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pspice\\msgview.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pspice\\pdesign.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pspice\\psched.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pspice\\stmed.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pspice\\indicefilegeneration.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pspice\\mrksrvr.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pspice\\pspice.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pspice\\psp_cmd.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pspice\\simmgr.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pspice\\simsrvr.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pspice\\modeled.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\pspice\\pspiceexplorersrvr.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\capture\\sch2cap.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\capture\\pspiceexplorersrvr.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_plus\\tangx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout_eng_ed\\tangx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\Backup\\tools\\layout\\tangx.exe"=
R0 xmasbus;xmasbus;d:\winnt\system32\DRIVERS\xmasbus.sys [2003-12-21 140800]
R0 xmasscsi;xmasscsi;d:\winnt\system32\Drivers\xmasscsi.sys [2003-12-20 5504]
R2 altio;altio;d:\winnt\system32\altio.sys [2004-05-26 3200]
R2 CX88XBAR;V-Stream 2388x Crossbar;d:\winnt\system32\drivers\CX88XBAR.sys [2004-02-13 8960]
R2 ROCKEYNT;ROCKEYNT;d:\winnt\System32\drivers\Rockeynt.sys [2006-10-25 17135]
R2 TTDec;ATI WDM Teletext Decoder;d:\winnt\system32\DRIVERS\ATINTTXX.sys [2004-08-03 13824]
R3 Mach3;Mach3 Pulseing Service;d:\winnt\system32\Drivers\Mach3.sys [2006-03-15 103552]
S1 Asapi;Asapi;d:\winnt\system32\drivers\Asapi.sys [2002-04-17 11264]
S2 BT848;ATI TV Wonder BtCap, WDM Video Capture;d:\winnt\system32\drivers\BT848.sys [ ]
S3 SIS163u;SiS 163 usb Wireless LAN Adapter Driver;d:\winnt\system32\DRIVERS\sis163u.sys [2004-12-31 167424]
S3 usbprint;Microsoft USB PRINTER Class;d:\winnt\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S4 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;d:\program files\MAGIX\Common\Database\bin\fbserver.exe [2005-11-17 1527900]
S4 IntelinetSecure;IntelinetSecure;d:\program files\Intelinet\intelin2.exe [ ]
S4 lmgrd;Flexlm;c:\orcad\OrCAD_10.5\IntelliCAD 4\LicenseManager\lmgrd.exe [ ]
S4 MSSQL$AUTODESKVAULT;SQL Server (AUTODESKVAULT);c:\program files\Microsoft SQL Server\MSSQL.2\MSSQL\Binn\sqlservr.exe [2007-02-13 28933976]
S4 UPnPService;UPnPService;d:\program files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe [2006-12-14 544768]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\G]
\Shell\AutoRun\command - G:\Setup.exe
.
- - - - ORPHANS REMOVED - - - -
HKU-Default-RunOnce-^SetupICWDesktop - d:\program files\Internet Explorer\Connection Wizard\icwconn1.exe
SafeBoot-sglfb.sys
SafeBoot-tga.sys
MSConfigStartUp-AVG8_TRAY - d:\progra~1\AVG\AVG8\avgtray.exe
MSConfigStartUp-Cmaudio - cmicnfg.cpl
.
------- Supplementary Scan -------
.
FireFox -: Profile - d:\docume~1\a\APPLIC~1\Mozilla\Firefox\Profiles\x01w6dk3.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.telitex.ca/
FF -: plugin - c:\program files\Mozilla Firefox\plugins\npnul32.dll
FF -: plugin - d:\program files\Adobe\Acrobat 7.0\Reader\browser\nppdf32.dll
FF -: plugin - d:\program files\DNA\plugins\npbtdna.dll
FF -: plugin - d:\program files\Java\j2re1.4.2_05\bin\NPJava11.dll
FF -: plugin - d:\program files\Java\j2re1.4.2_05\bin\NPJava12.dll
FF -: plugin - d:\program files\Java\j2re1.4.2_05\bin\NPJava13.dll
FF -: plugin - d:\program files\Java\j2re1.4.2_05\bin\NPJava14.dll
FF -: plugin - d:\program files\Java\j2re1.4.2_05\bin\NPJava32.dll
FF -: plugin - d:\program files\Java\j2re1.4.2_05\bin\NPJPI142_05.dll
FF -: plugin - d:\program files\Java\j2re1.4.2_05\bin\NPOJI610.dll
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-09 16:09:26
Windows 5.1.2600 Service Pack 2 FAT NTAPI
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\vsdatant]
"ImagePath"=""
.
------------------------ Other Running Processes ------------------------
.
d:\program files\SYGATE\SPF\SMC.EXE
d:\program files\BONJOUR\MDNSRESPONDER.EXE
d:\winnt\SYSTEM32\TCPSVCS.EXE
d:\winnt\SYSTEM32\SNMP.EXE
d:\winnt\SYSTEM32\WDFMGR.EXE
d:\winnt\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2008-11-09 16:12:21 - machine was rebooted
ComboFix-quarantined-files.txt 2008-11-09 21:12:16
Pre-Run: 3,964,600,320 bytes free
Post-Run: 3,869,671,424 bytes free
776
_________________
My access to internet no longer is blocked - thanks to Patrik |
|
| Back to top |
|
|
patrik
Site Admin
Joined: 08 Jan 2006
Posts: 1865
|
| Posted: Tue Nov 11, 2008 2:23 am Post subject: |
|
|
Combofix log looks ok, only you should remove a few trojan files.
Open notepad, copy/paste the text in the code box below into notepad:
| Code: | File::
d:\winnt\system32\Partizan.exe
d:\winnt\winstart.bat
d:\winnt\system32\TDSSofxh.dll
d:\winnt\system32\TDSSfxwp.dll |
Name the Notepad file CFScript and Save it to your desktop. Then drag the CFScript into ComboFix.exe as you see in the screenshot below.
Hmm strange problem with Opera.
Please go to Start -> Control panel -> Add/remove programs panel.
Uninstall Opera.
Navigate to D:\Program files and remove Opera folder.
Download a fresh copy of Opera. Install it.
Run and checkup address bar.
Download and scan your PC using Malwarebytes Antimalware (MBAM). When the scan is complete, click OK, then Show Results to view the results. Make sure that everything is checked, and click Remove Selected.
Post back with combofix log, also include a output MBAM log.
_________________
Free Antispyware: HijackThis, SmitfraudFix, ComboFix, Super Antispyware, Malwarebytes Anti-malware
Instructions: Show hidden files, Reboot in Safe Mode |
|
| Back to top |
|
|
popara
Joined: 09 Nov 2008
Posts: 9
Location: ontario
|
| Posted: Wed Nov 12, 2008 2:33 am Post subject: |
|
|
Hi Patrik
Thank, I deleted all you suggested and as you can see MBAM found few more and it appears that ComboFix is clean - however I will do some more file cleaning - unused and unnecessary.
As far as Opera, I did exactly what you sugested few times and same problem come up, but I think I found reason; when one removes Opera, cleans reg and erase dir - opera has files under user, where it keeps entire setup with bookmarks and and... therefore, when re installed, opera finds and use them as "default" - which happens in my case to be deformed opera - I did not try to reenstall after this finding but I will next day or so. In other words, one must scan entire computer to find these files - dif user, dif setup, meaning, if infected - here we go again.
One more favor if you can would be appreciated - can you suggest program or way to find, what initiates ntoskrnl.exe - as I mentioned before; every minute or so is trying to get out. I was tracking some IP's and they ended in NDC in amsterdam ...hmmmm.
Once again, Patrik, thanks a lot
Malwarebytes' Anti-Malware 1.30
Database version: 1381
Windows 5.1.2600 Service Pack 2
11/11/2008 6:05:42 AM
mbam-log-2008-11-11 (06-05-42).txt
Scan type: Full Scan (C:\|D:\|F:\|)
Objects scanned: 436911
Time elapsed: 1 hour(s), 43 minute(s), 25 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 3
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 4
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IntelinetSecure (Rogue.Intelinet) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Intelinet (Rogue.Intelinet) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\SpyClean (Rogue.SpyClean) -> Quarantined and deleted successfully.
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
D:\Qoobox\Quarantine\D\WINNT\system32\TDSSnrsr.dll.vir (Trojan.TDSS) -> Quarantined and deleted successfully.
D:\Qoobox\Quarantine\D\WINNT\system32\TDSSriqp.dll.vir (Trojan.TDSS) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{06302DCD-BC8B-46B6-B02F-F57287E863C2}\RP0\A0005020.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{06302DCD-BC8B-46B6-B02F-F57287E863C2}\RP0\A0005022.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
ComboFix 08-11-07.01 - a 2008-11-11 8:28:47.2 - FAT32x86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.443 [GMT -5:00]
Running from: H:\ComboFix.exe
.
((((((((((((((((((((((((( Files Created from 2008-10-11 to 2008-11-11 )))))))))))))))))))))))))))))))
.
2008-11-10 22:37 . 2008-11-10 22:37 <DIR> d-------- d:\program files\Malwarebytes' Anti-Malware
2008-11-10 22:37 . 2008-11-10 22:37 <DIR> d-------- d:\documents and settings\a\Application Data\Malwarebytes
2008-11-10 22:37 . 2008-11-10 22:37 <DIR> d-------- d:\docume~1\ALLUSE~1\APPLIC~1\Malwarebytes
2008-11-10 22:37 . 2008-10-22 16:10 38,496 --a------ d:\winnt\system32\drivers\mbamswissarmy.sys
2008-11-10 22:37 . 2008-10-22 16:10 15,504 --a------ d:\winnt\system32\drivers\mbam.sys
2008-11-10 15:26 . 2008-11-10 15:26 <DIR> d-------- d:\program files\uTorrent
2008-11-09 11:53 . 2008-11-09 11:53 <DIR> d-------- d:\program files\Trend Micro
2008-11-08 17:08 . 2008-11-08 17:08 <DIR> d-------- d:\program files\XPCMonitor_3262
2008-11-08 16:56 . 2008-11-08 16:56 108,256 --ah----- d:\winnt\system32\mlfcache.dat
2008-11-08 15:36 . 2008-11-09 11:18 63 --a------ d:\winnt\system\SysSD.dll
2008-11-08 10:11 . 2008-11-08 10:11 <DIR> d-------- d:\program files\Apple Software Update
2008-11-08 10:11 . 2008-11-08 10:11 <DIR> d-------- d:\docume~1\ALLUSE~1\APPLIC~1\Apple
2008-11-06 15:41 . 2008-11-06 15:41 <DIR> d-------- d:\program files\G-Lock Software
2008-11-01 23:12 . 2008-11-01 23:13 <DIR> d-------- d:\docume~1\ALLUSE~1\APPLIC~1\AntiVir PersonalEdition Classic
2008-10-31 21:00 . 2008-10-31 21:00 <DIR> d-------- d:\program files\RegCure
2008-10-29 15:54 . 2008-10-29 15:55 <DIR> d-------- d:\docume~1\ALLUSE~1\APPLIC~1\Avira
2008-10-29 13:26 . 2008-10-29 13:26 228 --a------ d:\winnt\system32\spupdsvc.inf
2008-10-28 15:44 . 2008-10-28 15:44 <DIR> d--h----- D:\$AVG8.VAULT$
2008-10-28 04:18 . 2008-10-28 04:18 61,440 --a------ d:\winnt\system32\XPC_NetMon.old
2008-10-27 19:08 . 2008-10-27 19:08 54,156 --ah----- d:\winnt\QTFont.qfn
2008-10-27 19:08 . 2008-10-27 19:08 1,409 --a------ d:\winnt\QTFont.for
2008-10-27 18:40 . 2001-08-17 13:47 4,224 --a------ d:\winnt\system32\drivers\beep.sys
2008-10-27 18:40 . 2001-08-17 13:47 4,224 --a------ d:\winnt\system32\dllcache\beep.sys
2008-10-27 18:39 . 2001-08-17 13:47 4,224 --a------ d:\winnt\beep.sys
2008-10-26 23:32 . 2008-10-26 23:32 <DIR> d-------- d:\docume~1\ALLUSE~1\APPLIC~1\avg8
2008-10-26 20:09 . 2008-10-26 20:09 <DIR> d-------- d:\docume~1\ALLUSE~1\APPLIC~1\TEMP
2008-10-26 20:05 . 2008-10-26 20:05 <DIR> d-------- d:\program files\Trojan Remover
2008-10-26 20:05 . 2008-10-26 20:05 <DIR> d-------- d:\documents and settings\a\Application Data\Simply Super Software
2008-10-26 20:05 . 2006-05-25 15:52 162,304 --a------ d:\winnt\system32\ztvunrar36.dll
2008-10-26 20:05 . 2003-02-02 20:06 153,088 --a------ d:\winnt\system32\UNRAR3.dll
2008-10-26 20:05 . 2005-08-26 01:50 77,312 --a------ d:\winnt\system32\ztvunace26.dll
2008-10-26 20:05 . 2002-03-06 01:00 75,264 --a------ d:\winnt\system32\unacev2.dll
2008-10-26 20:05 . 2006-06-19 13:01 69,632 --a------ d:\winnt\system32\ztvcabinet.dll
2008-10-26 11:31 . 2008-10-26 11:31 <DIR> d-------- d:\winnt\system32\LogFiles
2008-10-25 03:53 . 2008-10-25 03:53 221,184 --a------ d:\winnt\system32\HookText.old
2008-10-25 03:53 . 2008-10-25 03:53 53,248 --a------ d:\winnt\system32\HookPassword.old
2008-10-19 20:46 . 2008-10-19 20:46 <DIR> d-------- d:\docume~1\ALLUSE~1\APPLIC~1\Kaspersky Lab Setup Files
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-11-07 19:10 13,216 ----a-w d:\winnt\Prefetch\vir.PROXYCFG.EXE-06C7BCFC.pf.vir
2008-11-01 20:47 14,680 ----a-w d:\winnt\Prefetch\vir.CDSMSGSERVER.EXE-0BEADF82.pf.vir
2008-11-01 20:46 11,666 ----a-w d:\winnt\Prefetch\vir.CDSNAMESERVER.EXE-38825179.pf.vir
2008-10-30 19:40 353,042 ----a-w d:\winnt\vir.iis6.log.vir
2008-09-26 02:38 14,602 --sha-w d:\winnt\system32\KGyGaAvL.sys
2008-09-24 17:25 41,888 ----a-w d:\winnt\system32\drivers\vir.Oreans.sys.vir
2008-09-24 17:22 191,488 ----a-w d:\winnt\system32\hlvdd.dll
2008-08-16 05:08 6,656 ----a-w d:\winnt\system32\haspvdd.dll
2007-03-19 21:33 87,608 ----a-w d:\documents and settings\a\Application Data\ezpinst.exe
2007-03-19 21:33 47,360 ----a-w d:\documents and settings\a\Application Data\pcouffin.sys
2006-04-10 20:26 271 --sh--w d:\program files\desktop.ini
2004-08-04 05:56 50,688 --sh--w d:\winnt\twain_32.dll
2001-08-23 17:00 94,784 --sh--w d:\winnt\twain.dll
2004-08-04 05:56 11,776 --sh--w d:\winnt\system32\regsvr32.exe
2007-03-03 13:01 56 --sh--r d:\winnt\system32\AEF8AD10EE.sys
2005-06-26 23:32 616,448 --sha-r d:\winnt\system32\cygwin1.dll
2005-07-14 20:31 27,648 --sha-w d:\winnt\system32\AVSredirect.dll
((((((((((((((((((((((((((((( snapshot@2008-11-09_16.11.48.50 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-11-11 11:08:48 16,384 ----a-w d:\winnt\Temp\Perflib_Perfdata_7fc.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmcService"="d:\progra~1\Sygate\SPF\smc.exe" [2004-08-13 2532576]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"tscuninstall"="d:\winnt\system32\tscupgrd.exe" [2004-08-03 44544]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"= mmdrv.dll
"msacm.l3acm"= l3codecp.acm
"VIDC.JPEG"= JPEGCODE.DLL
"VIDC.MJPG"= Pvmjpg30.dll
"msacm.dvacm"= d:\progra~1\COMMON~1\ULEADS~1\Vio\Dvacm.acm
"msacm.MPEGacm"= mpegacm.acm
"msacm.ulmp3acm"= ulmp3acm.acm
[HKLM\~\startupfolder\D:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Acrobat Speed Launcher.lnk]
path=d:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Acrobat Speed Launcher.lnk
backup=d:\winnt\pss\Adobe Acrobat Speed Launcher.lnkCommon Startup
[HKLM\~\startupfolder\D:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Acrobat Synchronizer.lnk]
path=d:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Acrobat Synchronizer.lnk
backup=d:\winnt\pss\Adobe Acrobat Synchronizer.lnkCommon Startup
[HKLM\~\startupfolder\D:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=d:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=d:\winnt\pss\Adobe Reader Speed Launch.lnkCommon Startup
[HKLM\~\startupfolder\D:^Documents and Settings^All Users^Start Menu^Programs^Startup^EdgeCLS12.00.lnk]
path=d:\documents and settings\All Users\Start Menu\Programs\Startup\EdgeCLS12.00.lnk
backup=d:\winnt\pss\EdgeCLS12.00.lnkCommon Startup
[HKLM\~\startupfolder\D:^Documents and Settings^a^Start Menu^Programs^Startup^Adobe Gamma.lnk]
path=d:\documents and settings\a\Start Menu\Programs\Startup\Adobe Gamma.lnk
backup=d:\winnt\pss\Adobe Gamma.lnkStartup
[HKLM\~\startupfolder\D:^Documents and Settings^a^Start Menu^Programs^Startup^SolidWorks Task Scheduler Engine.lnk]
path=d:\documents and settings\a\Start Menu\Programs\Startup\SolidWorks Task Scheduler Engine.lnk
backup=d:\winnt\pss\SolidWorks Task Scheduler Engine.lnkStartup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
d:\winnt\system32\dumprep 0 -k [X]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0]
--a------ 2006-10-22 23:24 620152 d:\program files\Adobe\Acrobat 8.0\Acrobat\acrotray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
--a------ 2004-08-04 00:56 15360 d:\winnt\system32\ctfmon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PinnacleDriverCheck]
--a------ 2004-03-11 01:26 406016 d:\winnt\system32\PSDrvCheck.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
--a------ 2006-03-17 21:24 184320 d:\program files\PowerISO\PWRISOVM.EXE
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2007-03-11 20:41 155648 d:\program files\QuickTime\qttask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Share-to-Web Namespace Daemon]
--a------ 2001-07-03 09:11 57344 d:\program files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sonic RecordNow! Deluxe]
--a------ 2004-08-04 00:56 15360 d:\winnt\system32\ctfmon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSC Service Utility]
--a------ 2006-05-03 10:50 484352 f:\programs\Epson Service Utility (Pre-installed)\ssc_serv.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UVS10 Preload]
--------- 2006-03-07 00:52 36864 d:\program files\Ulead Systems\Ulead VideoStudio 10\uvPL.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
-ra------ 2005-07-22 03:00 81920 d:\winnt\SOUNDMAN.EXE
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Synchronization Manager]
--a------ 2004-08-04 00:56 143360 d:\winnt\system32\mobsync.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VTTimer]
-ra------ 2005-03-07 15:33 53248 d:\winnt\system32\VTTimer.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VTTrayp]
-ra------ 2005-03-11 05:33 147456 d:\winnt\system32\VTTrayp.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"usnjsvc"=3 (0x3)
"UPnPService"=3 (0x3)
"SQLBrowser"=2 (0x2)
"SolidWorks Licensing Service"=3 (0x3)
"SiSWLSvc"=2 (0x2)
"NMIndexingService"=3 (0x3)
"MSSQLServerADHelper"=3 (0x3)
"MSSQL$SQLEXPRESS"=2 (0x2)
"MSSQL$AUTODESKVAULT"=2 (0x2)
"lmgrd"=2 (0x2)
"JMP License Service"=3 (0x3)
"idsvc"=3 (0x3)
"IDriverT"=3 (0x3)
"FLEXnet Licensing Service"=3 (0x3)
"FLEXlm server for PTC"=2 (0x2)
"FirebirdServerMAGIXInstance"=3 (0x3)
"CLTNetCnService"=3 (0x3)
"Autodesk Licensing Service"=3 (0x3)
"Adobe LM Service"=3 (0x3)
"IntelinetSecure"=3 (0x3)
"UleadBurningHelper"=2 (0x2)
"wuauserv"=2 (0x2)
"wscsvc"=2 (0x2)
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
"DisableNotifications"= 1 (0x1)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\OrCAD\\OrCAD_10.5\\updates.exe"=
"c:\\OrCAD\\OrCAD_10.5\\setconfig.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\regsvr32.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\pspiceexplorersrvr.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\modeled.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\IndiceFileGeneration.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\MrkSrvr.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\pspice.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\psp_cmd.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\simmgr.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\simsrvr.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\stmed.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\lxcwin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\msgview.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\PDesign.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\psched.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\Magneticdesigner.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\pspiceaa.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\Backup\\psched.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\SETBROWS.EXE"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\pcadi.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\regsvr32.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\pstswp.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\pspiceexplorersrvr.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\sch2cap.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\setbrows.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gcad.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gcam.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gcdin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\idfin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\ipc356.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\libcat.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\lsession.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\max2hyp.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxascb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxascx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxdxf.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxfnetx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxminb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxminw.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxminx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxorcad.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxp99x.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxpadb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxpadx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxpcadb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxpcadx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxprotb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxprotx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxstrb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxstrx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxtangb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxtangx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\orcadodb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\padb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\padx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\pcadb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\pcadx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\pcb2max.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\prcat.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\protb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\protx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\specin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\strb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\strx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\tangb.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\tangx.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\to386.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\toidf.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\tomax.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\tospec.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\update90.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\fvupdateutil.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\layout.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxeco.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\mfceco.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\searchTool.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\sroute\\sroute.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\vcadd\\vcadd32.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\tutorial\\laytutor.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gtool\\fonts\\g2r.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gtool\\program\\gerbline.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gtool\\program\\gerbtool.exe"= c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gtool\\program\\Gerbtool.exe
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gtool\\system\\fixtbar.exe"= c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gtool\\system\\FixTbar.exe
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\samples\\demo\\reset.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\nmp.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\nmppath.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\obServer.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\van.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\mpsinfo.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\versionviewer.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\cdsdoc\\bin\\obServer.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\bin\\merge.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\bin\\mkvdk.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\bin\\search.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\bin\\setup.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\htmlini.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\htmserv.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\index.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\jstree.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\jvtree.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\kvoop.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\regsvr32.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\summary.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\javaws-1_2_0_02-windows-i586-i.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\java.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\javaw.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\jpicpl32.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\keytool.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\kinit.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\klist.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\ktab.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\orbd.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\policytool.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\rmid.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\rmiregistry.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\servertool.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\tnameserv.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\fet\\bin\\mkdefcfg.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\fet\\bin\\versiontool.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\fet\\bin\\newgenasym.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\fet\\bin\\libaccess.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\fet\\bin\\projmgr.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\fet\\bin\\psetup.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\flash_convert.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\fpbrowse.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\qvupdate.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\systemdump.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\uprev.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\plctxt.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\genfeedformat.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\netrev.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\idf_in.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\idf_out.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\iges_in.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\iges_out.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ipc356_out.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\gbplot.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\genrad.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\gloss.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ncroute.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\nctape.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\netin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\pad_designer.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\pads_in.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\pcad_in.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\placement.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\swap.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\techfile13.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\techfile14.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\sys_root.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\spif.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\spif_batch.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\mbs2lib.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\FSvia.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\FSviaSolver.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\il_allegro.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\j2script.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\parallel.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\pe_wordpad.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\pre_check.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\refresh_padstack.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\refresh_symbol.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\refresh_vs.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\reftxt.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\report.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\tlp2.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\productServer.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\signoise.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\lis2buf.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\modelintegrity.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\modelsim.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\spc2dml.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\sigxp.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ftsmerge.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ibis2signoise.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ibischk3.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ibischk4.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\mergedml.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\mkdeviceindex.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\quad2signoise.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\sigwave.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\sigwave_sc.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\sigxsect.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\spc2spc.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\tlsim.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ts2dml.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\fvupdateutil.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gcad.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gcam.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gcdin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\idfin.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\ipc356.exe"=
"c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\layout.exe"=
"c: | | |
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
