ComboFix 08-05-21.3 - ERMAL 2008-05-22 20:10:36.8 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1638 [GMT -3:00]
Running from: C:\Documents and Settings\ERMAL\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\ERMAL\Desktop\CFScript.txt
* Created a new restore point
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\All Users\Application Data\comodo
C:\Documents and Settings\All Users\Application Data\comodo\common\db\sigsdb.db
C:\Documents and Settings\All Users\Application Data\comodo\common\Pending\PendingList.txt
C:\Documents and Settings\All Users\Application Data\comodo\Firewall Pro\cfplogdb.sdb
C:\Documents and Settings\ERMAL\Application Data\Comodo
C:\Documents and Settings\TONY\Application Data\Comodo
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\AboutLogo.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\AboutLogoCaption.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Activeconnections.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Activeprocesslist.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\activity.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\alert.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\arrow.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\AutoFileSubmitCaption.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\AutoFileSubmitTrayIcon.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\backarrow.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\btnDisabled.PNG
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\btnNormal.PNG
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\btnOnfocus.PNG
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\btnPressed.PNG
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\btnRollover.PNG
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\button.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\buttonclose.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\buttoncloses.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\buttonhelp.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\buttonhelps.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\buttonmax.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\buttonmaxs.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\buttonmin.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\buttonmins.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\buttonres.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\buttonress.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\CaptionBar.PNG
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\cfg_dlg_btn_delete.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\cfg_dlg_btn_export.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\cfg_dlg_btn_import.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\cfg_dlg_btn_select.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\CFP-configure.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\CFP-installer.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\CFP-license.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\cfp-updater1.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\cfp-updater2.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\cfp-updater3.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\CFP-welcome.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\CFPLogo.PNG
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\checkbox_icon0.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\checkbox_icon1.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\checkbox_icon2.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\checkbox13.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\checkbox16.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\checkbox25.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\closebutton.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\COM_interfaces_access.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\comboboxbevel.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\combobutton.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\combobuttonglyph.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Config.ini
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\configure_defense_settings.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\configure_Learning_Apps.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\configure_profile_settings.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\configure_stealth_settings.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\configure_Welcome.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\create_process.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\create_thread.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\defense+.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Defense+events.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\DefenseTaks_ViewPendingFiles.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\DefenseTasks_MySafeFiles.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\diagnose.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\dn0_up0.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\dn0_up1.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\dn0_up2.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\dn0_up3.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\dn0_up4.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\dn1_up0.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\dn1_up1.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\dn1_up2.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\dn1_up3.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\dn1_up4.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\dn2_up0.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\dn2_up1.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\dn2_up2.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\dn2_up3.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\dn2_up4.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\dn3_up0.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\dn3_up1.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\dn3_up2.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\dn3_up3.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\dn3_up4.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\dn4_up0.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\dn4_up1.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\dn4_up2.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\dn4_up3.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\dn4_up4.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\DNS_port_access.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\explorerbarheaderclose.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\explorerbarheaderpin.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\fieldoutlinebmp.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Files_Submission_L.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Files_Submission_M.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Files_Submission_R.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\firewall.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Firewallevents.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\firewallsummary.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\firstapptraffic.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\fourthapptraffic.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\framebottom.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\framecaption.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\framecaptionmin.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\framecaptionsizing.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\frameleft.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\framemaximized.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\frameright.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\fw-adv-advancd.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\fw-adv-comtasks.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\fw-tasks-bannapp.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\fw-tasks-blkd-nzone.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\fw-tasks-myport.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\fw-tasks-netzone.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\fw-tasks-trustap.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\fw-tasks-trustdn.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\fw_alert_orange_L.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\fw_alert_orange_M.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\fw_alert_orange_R.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\fw_alert_red_L.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\fw_alert_red_M.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\fw_alert_red_R.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\fw_alert_yellow_L.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\fw_alert_yellow_M.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\fw_alert_yellow_R.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\gripper.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\grippervert.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\groupbox.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\headerbar_left.PNG
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\headerbar_middle.PNG
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\headerbar_right.PNG
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\highlites.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\hips-adv-imgcnt.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\hips-adv-prfine-plcy.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\hips-adv-proac-set.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\hips-adv-secu-plcy.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\hips-tsks-com-grps.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\hips-tsks-com.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\hips-tsks_grpfiles.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\hips-tsks_reggrps.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\hips_alert_orange_L.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\hips_alert_orange_M.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\hips_alert_orange_R.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\hips_alert_red_L.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\hips_alert_red_M.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\hips_alert_red_R.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\hips_alert_yellow_L.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\hips_alert_yellow_M.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\hips_alert_yellow_R.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\hips_tasks_protdocs_32.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\hips_tasks_quarfiles_32.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\hips_tasks_regiskeys_32.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\hipsarrow_down.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\hipsarrow_up.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\ie_personalbarmenu.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\InnerCaptionBar.PNG
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\keyboard_access.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\leftarrow_disabled.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\leftarrow_hover.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\leftarrow_normal.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\leftarrow_pressed.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\listviewheader.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\listviewheaderbackground.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\load_driver.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\LogDefenceAllTime.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\LogDefenceLog.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\LogDefenceThisMonth.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\LogDefenceThisWeek.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\LogDefenceToday.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\LogFirewallAllTime.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\LogFirewallLog.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\LogFirewallThisMonth.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\LogFirewallThisWeek.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\LogFirewallToday.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\loopback_access.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\main-firewall-advanced_advattack.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\main-firewall-advanced_fbehaviour.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\main-firewall-advanced_network.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\main-firewall-advanced_securitylevel.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\mainsummary.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\ManageSafeExport.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\ManageSafeImport.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Manual_updater_Check_B.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Manual_updater_Check_M.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Manual_updater_Check_T.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Manual_updater_finish_B.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Manual_updater_finish_M.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Manual_updater_finish_T.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Manual_updater_install_B.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Manual_updater_install_M.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Manual_updater_install_T.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Manual_updater_start_B.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Manual_updater_start_M.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Manual_updater_start_T.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\mdicaptionbutton.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\mdiglyphclose.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\mdiglyphminimize.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\mdiglyphrestore.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\misc_adbout.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\misc_browseforums.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\misc_btn.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\misc_chkupdates.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\misc_helpbig.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\misc_imp_exp_config.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\misc_marksafelist.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\misc_setings.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\MyTrustedSoftwareVendors.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\newzone_gradient.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\NewZoneDetected.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\nextarrow.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\non_target_arrow.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\normalgroupbackground.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\normalgroupcollapse.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\normalgroupexpand.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\normalgrouphead.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\oldbutton.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\open_process.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\physical_mem_access.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\placebarbackground.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\placebarbuttons.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\pleasewait_32.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\prd_logo_16_16.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\prd_logo_24_24.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\prdinfo.ini
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\proactive.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\progresschunk.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\progresschunkvert.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\progresstrack.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\progresstrackvert.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\question.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\radiobutton13.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\radiobutton16.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\radiobutton25.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\raw_disk_access.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\read_memory.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\registry_keys_access.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\reminder_dlg_pleasewait.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\resizegrip2.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\rightarrow_disabled.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\rightarrow_hover.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\rightarrow_normal.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\rightarrow_pressed.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\screen_access.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\scrollarrowglyphs.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\scrollarrowglyphssmall.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\scrollarrows.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\scrollshafthorizontal.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\scrollshaftvertical.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\scrollthumbgripperhorizontal.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\scrollthumbgrippervertical.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\scrollthumbhorizontal.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\scrollthumbvertical.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\secondapptraffic.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\send_message.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\separator.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\separatorvert.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\set_globalhook.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\shield.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\slidertrack.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\smallclosebutton.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\smallcloseglyph.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\smallframecaption.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\smallframecaptionsizing.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\specialgroupbackground.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\specialgroupcollapse.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\specialgroupexpand.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\specialgrouphead.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\spinbuttonbackgrounddown.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\spinbuttonbackgroundleft.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\spinbuttonbackgroundright.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\spinbuttonbackgroundup.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\spindownglyph.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\spinleftglyph.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\spinrightglyph.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\spinupglyph.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\splash.jpg
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\statusbackground.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\statuspane.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\summary_highlites.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Summary_NW_Defense.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Summary_NW_Down.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Summary_NW_UP.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Summary_proactive.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Summary_Proactive_Active.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Summary_Proactive_Init_Mode.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Summary_Proactive_Prev_Mode.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Summary_Proactive_Suspicious.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Summary_RestoreAll.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\Summary_StopAll.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\summaryFirewall.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\summarysummary.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\SummarySystemStatus_Active.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\SummarySystemStatus_InActive.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\SummarySystemStatus_Init.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\tabbackground.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\tabbackground133.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\tabitem.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\tabitemleft.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\tabitemright.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\tabitemtopright.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\tabpaneedge.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\terminate_process.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\thirdapptraffic.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\tipoftheday.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\toolbarbackground.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\toolbarbuttons.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\toolbarbuttonssplit.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\toolbarbuttonssplitdropdown.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\toolbarbuttonssplitdropdownglyph .png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\toolbargripper.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\toolbargrippervert.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\trackbardown13.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\trackbardown16.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\trackbardown25.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\trackbarhorizontal.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\trackbarleft13.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\trackbarleft16.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\trackbarleft25.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\trackbarright13.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\trackbarright16.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\trackbarright25.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\trackbarup13.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\trackbarup16.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\trackbarup25.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\trackbarvertical.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\traffic.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\TrayPopuoCloseButton.ico
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\treeexpandcollapse.png
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\write_file_access.bmp
C:\Documents and Settings\TONY\Application Data\Comodo\Firewall Pro\Data\ResFiles\write_memory.bmp
C:\Program Files\COMODO
C:\Program Files\COMODO\Firewall\cfp.exe
C:\Program Files\COMODO\Firewall\cmdagent.exe
.
((((((((((((((((((((((((( Files Created from 2008-04-22 to 2008-05-22 )))))))))))))))))))))))))))))))
.
2008-05-22 16:54 . 2008-05-22 16:54 <DIR> d-------- C:\Program Files\Windows Defender
2008-05-22 12:23 . 2008-05-22 12:23 <DIR> d-------- C:\Program Files\Spybot - Search & Destroy
2008-05-22 12:23 . 2008-05-22 12:51 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-05-22 12:19 . 2008-05-22 12:21 <DIR> d-------- C:\Program Files\Windows Live Safety Center
2008-05-22 11:46 . 2008-05-22 11:46 110,592 --a------ C:\WINDOWS\system32\avgfwafu.dll
2008-05-22 03:17 . 2008-05-22 03:17 <DIR> d-------- C:\Program Files\AVG
2008-05-22 03:17 . 2008-05-22 03:19 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\avg8
2008-05-22 01:50 . 2008-05-22 01:50 139,008 --a------ C:\WINDOWS\system32\guard32.dll
2008-05-22 01:24 . 2008-05-22 01:24 <DIR> d-------- C:\Program Files\Alwil Software
2008-05-20 23:18 . 2008-05-20 23:18 <DIR> d-------- C:\Program Files\CCleaner
2008-05-06 12:43 . 2008-05-06 12:43 <DIR> d-------- C:\Documents and Settings\ERMAL\Application Data\Thinstall
2008-05-05 17:10 . 2008-05-05 17:10 <DIR> d-------- C:\DVDVideoSoft
2008-05-05 17:09 . 2008-05-05 17:09 <DIR> d-------- C:\Program Files\DVDVideoSoft
2008-05-05 17:09 . 2008-05-05 17:09 <DIR> d-------- C:\Program Files\Common Files\DVDVideoSoft
2008-05-05 17:02 . 2008-05-05 17:11 <DIR> d-------- C:\Program Files\Light Alloy
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) ))
.
2008-05-22 22:06 --------- d-----w C:\Documents and Settings\ERMAL\Application Data\AVG7
2008-05-22 15:22 --------- d-----w C:\Documents and Settings\All Users\Application Data\lsfyxivc
2008-05-22 14:53 --------- d-----w C:\Documents and Settings\All Users\Application Data\avg7
2008-05-22 14:46 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
2008-05-22 06:23 --------- d-----w C:\Documents and Settings\ERMAL\Application Data\Azureus
2008-05-22 04:02 --------- d-----w C:\Program Files\Azureus
2008-05-21 02:59 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-04-09 11:00 --------- d-----w C:\Documents and Settings\TONY\Application Data\AVG7
2008-04-04 12:09 --------- d-----w C:\Documents and Settings\TONY\Application Data\Grisoft
2008-04-03 15:41 --------- d-----w C:\Program Files\Yahoo!
2008-04-03 13:19 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-04-03 10:56 --------- d-----w C:\Documents and Settings\TONY\Application Data\TmpRecentIcons
2008-04-03 10:56 --------- d-----w C:\Documents and Settings\ERMAL\Application Data\TmpRecentIcons
2008-04-03 00:30 --------- d-----w C:\Documents and Settings\TONY\Application Data\Netscape
2007-12-13 16:21 2,728 ----a-w C:\Documents and Settings\ERMAL\Application Data\wklnhst.dat
2007-11-29 14:47 374 ----a-w C:\Documents and Settings\ERMAL\Application Data\internaldb6334.dat
2007-11-25 23:33 22,328 ----a-w C:\Documents and Settings\ERMAL\Application Data\PnkBstrK.sys
2007-07-11 15:36 24,192 ----a-w C:\Documents and Settings\ERMAL\usbsermptxp.sys
2007-07-11 15:36 22,768 ----a-w C:\Documents and Settings\ERMAL\usbsermpt.sys
2007-04-04 20:01 538 ----a-w C:\Documents and Settings\ERMAL\Application Data\internaldb8467.dat
2007-04-04 20:01 18,432 ----a-w C:\Documents and Settings\ERMAL\Application Data\internaldb41.dat
2007-06-26 08:42 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
.
((((((((((((((((((((((((((((( snapshot@2008-05-22_19.20.43.54 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-05-22 22:15:15 2,048 --s-a-w C:\WINDOWS\bootstat.dat
+ 2008-05-22 23:14:33 2,048 --s-a-w C:\WINDOWS\bootstat.dat
+ 2008-05-22 23:14:44 16,384 ----atw C:\WINDOWS\TEMP\Perflib_Perfdata_258.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 09:00 15360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-09-17 02:07 8491008]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray. dll" [2007-09-17 02:07 81920]
"LgWDskTp"="C:\Program Files\Wireless Desktop\LgWDskTp.exe" [2004-10-27 11:37 65536]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2004-08-10 09:04 59392]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Run]
"AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2008-05-22 11:46 219136]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\policies\system]
"InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.I420"= i420vfw.dll
"VIDC.dvsd"= C:\PROGRA~1\COMMON~1\SONYSH~1\VideoLib\sonydv.dll
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Audio Filter.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Audio Filter.lnk
backup=C:\WINDOWS\pss\Audio Filter.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^E-Color.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\E-Color.lnk
backup=C:\WINDOWS\pss\E-Color.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Winter Fun Wallpaper Changer.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Winter Fun Wallpaper Changer.lnk
backup=C:\WINDOWS\pss\Winter Fun Wallpaper Changer.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^ERMAL^Start Menu^Programs^Startup^Registration Driver Parallel Lines.LNK]
path=C:\Documents and Settings\ERMAL\Start Menu\Programs\Startup\Registration Driver Parallel Lines.LNK
backup=C:\WINDOWS\pss\Registration Driver Parallel Lines.LNKStartup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\!AVG Anti-Spyware]
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader]
--a------ 2007-03-09 12:09 63712 C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
--a------ 2007-05-11 04:06 40048 C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeUpdater]
-ra------ 2007-03-01 11:37 2321600 C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AGEIA PhysX SysTray]
-ra------ 2006-09-08 10:01 339968 C:\Program Files\AGEIA Technologies\TrayIcon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIPTA]
--a------ 2004-09-29 12:15 344064 C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG7_CC]
--a------ 2008-05-22 11:56 579584 C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
--a------ 2006-11-16 21:04 139264 C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccApp]
--a------ 2004-12-13 17:30 58992 C:\Program Files\Common Files\Symantec Shared\ccApp.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\COMODO Firewall Pro]
C:\Program Files\COMODO\Firewall\cfp.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Comrade.exe]
C:\Program Files\GameSpy\Comrade\Comrade.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
--a------ 2004-08-10 09:00 15360 C:\WINDOWS\system32\ctfmon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
--a------ 2006-11-12 07:48 157592 C:\Program Files\DAEMON Tools\daemon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\High Definition Audio Property Page Shortcut]
--a------ 2004-03-17 20:10 61952 C:\WINDOWS\system32\Hdaudpropshortcut.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAAnotif]
--a------ 2004-06-29 16:23 135168 C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\igndlm.exe]
--a------ 2007-03-05 18:57 1103480 C:\Program Files\Download Manager\DLM.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LiveMonitor]
C:\Program Files\MSI\Live Update 3\LMonitor.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Utility]
--a------ 2004-10-18 16:05 19968 C:\WINDOWS\Logi_MwX.Exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mcinfo_1211432086]
C:\DOCUME~1\ERMAL\LOCALS~1\Temp\mcinfo_1211432086. exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msci]
C:\DOCUME~1\ERMAL\LOCALS~1\Temp\mcinfo_1211432086. exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSI Live]
C:\Program Files\MSI\MSI Live\SetWallpaper.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
--------- 2004-10-13 13:24 1694208 C:\Program Files\Messenger\msmsgs.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MySpaceIM]
C:\Program Files\MySpace\IM\MySpaceIM.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 2006-01-12 17:40 155648 C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Norton Ghost 10.0]
--a------ 2005-09-09 21:09 1537648 C:\Program Files\Norton Ghost\Agent\GhostTray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NSLauncher]
--a------ 2007-09-07 15:44 3100672 C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
--a------ 2007-09-17 02:07 1626112 C:\WINDOWS\system32\nwiz.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pinnacle Game Profiler]
--a------ 2006-07-29 23:53 1867776 C:\games\KALiNKOsoft\Pinnacle Game Profiler\pinnacle.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2008-01-10 15:27 385024 C:\Program Files\QuickTime\qttask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SNM]
C:\Program Files\SpyNoMore\SNM.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
--a------ 2004-10-21 19:20 77824 C:\WINDOWS\SOUNDMAN.EXE
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpyHunter]
C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpySweeper]
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSMSAudioFilter]
--a------ 2004-10-29 12:32 3547136 C:\Program Files\Sony\SonicStage Mastering Studio\Audio Filter\SSMSFilter.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 2006-12-15 05:23 75520 C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SW20]
-ra------ 2006-06-01 06:22 208896 C:\WINDOWS\system32\sw20.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SW24]
-ra------ 2006-06-01 06:22 69632 C:\WINDOWS\system32\sw24.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\G oogleToolbarNotifier.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VAIO Recovery]
--a------ 2003-04-20 02:08 28672 C:\WINDOWS\Sonysys\VAIO Recovery\PartSeal.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VAIO Update 2]
--a------ 2004-09-21 23:54 151552 C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VMConsole.exe]
--a------ 2004-06-23 21:37 557056 C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VMConsole.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Yahoo! Pager]
--a------ 2007-06-11 19:16 4670968 C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\AuthorizedApplications\List]
"C:\\Program Files\\Azureus\\Azureus.exe"=
"C:\\Program Files\\LimeWire\\LimeWire.exe"=
"C:\\WINDOWS\\system32\\dpvsetup.exe"=
"C:\\Program Files\\Grisoft\\AVG7\\avginet.exe"=
"C:\\Program Files\\Grisoft\\AVG7\\avgamsvr.exe"=
"C:\\Program Files\\Grisoft\\AVG7\\avgcc.exe"=
"C:\\Program Files\\Grisoft\\AVG7\\avgemc.exe"=
R3 LCcfltr;Logitech USB Filter Driver;C:\WINDOWS\system32\Drivers\LCcFltr.Sys [2004-10-18 16:05]
S3 FLASHSYS;FLASHSYS;C:\WINDOWS\system32\DRIVERS\FLAS HSYS.sys []
S3 VAIO TV Tuner Library Service;VAIO TV Tuner Library Service;"C:\Program Files\Common Files\Sony Shared\TVTunerLib\TunerLibSvc.exe" [2006-10-23 16:06]
S3 WEBNTACCESS;WEBNTACCESS;C:\WINDOWS\system32\NTACCE SS.SYS []
.
Contents of the 'Scheduled Tasks' folder
"2008-05-14 02:01:03 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2008-05-22 23:17:38 C:\WINDOWS\Tasks\MP Scheduled Scan.job"
- C:\Program Files\Windows Defender\MpCmdRun.exe
.
************************************************** ************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2008-05-22 20:21:13
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
************************************************** ************************
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Windows Defender\MsMpEng.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\ehome\ehRecvr.exe
C:\WINDOWS\ehome\ehSched.exe
C:\WINDOWS\system32\gearsec.exe
C:\Program Files\Intel\Intel Application Accelerator\IAANTmon.exe
C:\Program Files\Norton Ghost\Agent\VProSvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\Sony Shared\WMPlugIn\SonicStageMonitoring.exe
C:\Program Files\Sony\Sony TV Tuner Library\SMceMan.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Sony\VAIO Media Integrated Server\Video\GPVSvr.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
C:\PROGRA~1\Grisoft\AVG7\avgfwsrv.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Sony\Sony TV Tuner Library\RM_SV.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\ehome\ehmsas.exe
.
************************************************** ************************
.
Completion time: 2008-05-22 20:24:17 - machine was rebooted [ERMAL]
ComboFix-quarantined-files.txt 2008-05-22 23:24:14
ComboFix2.txt 2008-05-22 22:20:59
ComboFix3.txt 2008-05-22 20:13:48
Pre-Run: 58,390,081,536 bytes free
Post-Run: 58,398,208,000 bytes free
584 --- E O F --- 2008-05-22 20:14:27