re: LoneWolf88, fixed virus, now what?
ComboFix Log
ComboFix 08-09-15.02 - Gauhar 2008-09-16 13:06:33.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.550 [GMT -4:00]
Running from: C:\Documents and Settings\Gauhar\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\Gauhar\Desktop\CFScript.txt
* Created a new restore point
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\Gauhar\Application Data\LimeWire
C:\Documents and Settings\Gauhar\Application Data\LimeWire\.NetworkShare\LimeWireWin4.16.6.exe
C:\Documents and Settings\Gauhar\Application Data\LimeWire\412splashpro.png
C:\Documents and Settings\Gauhar\Application Data\LimeWire\413splashpro.png
C:\Documents and Settings\Gauhar\Application Data\LimeWire\active.mojito
C:\Documents and Settings\Gauhar\Application Data\LimeWire\createtimes.cache
C:\Documents and Settings\Gauhar\Application Data\LimeWire\data.ser
C:\Documents and Settings\Gauhar\Application Data\LimeWire\fileurns.bak
C:\Documents and Settings\Gauhar\Application Data\LimeWire\fileurns.cache
C:\Documents and Settings\Gauhar\Application Data\LimeWire\filters.props
C:\Documents and Settings\Gauhar\Application Data\LimeWire\gnutella.net
C:\Documents and Settings\Gauhar\Application Data\LimeWire\installation.props
C:\Documents and Settings\Gauhar\Application Data\LimeWire\library.dat
C:\Documents and Settings\Gauhar\Application Data\LimeWire\limewire.props
C:\Documents and Settings\Gauhar\Application Data\LimeWire\mojito.props
C:\Documents and Settings\Gauhar\Application Data\LimeWire\pub1.key
C:\Documents and Settings\Gauhar\Application Data\LimeWire\public.key
C:\Documents and Settings\Gauhar\Application Data\LimeWire\questions.props
C:\Documents and Settings\Gauhar\Application Data\LimeWire\responses.cache
C:\Documents and Settings\Gauhar\Application Data\LimeWire\secureMessage.key
C:\Documents and Settings\Gauhar\Application Data\LimeWire\simpp.xml
C:\Documents and Settings\Gauhar\Application Data\LimeWire\spam.dat
C:\Documents and Settings\Gauhar\Application Data\LimeWire\tables.props
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme.lwtp
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\01_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\02_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\03_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\04_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\05_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\chat.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\dir_closed.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\dir_open.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\forward_dn.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\forward_up.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\kill.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\kill_on.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\lime.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\logo.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\notsearching.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\pause_dn.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\pause_up.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\play_dn.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\play_up.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\question.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\rewind_dn.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\rewind_up.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\searching.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\splash.png
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\splashpro.png
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\stop_dn.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\stop_up.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\theme.txt
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\version.txt
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\black_theme\warning.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme.lwtp
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\01_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\02_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\03_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\04_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\05_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\chat.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\dir_closed.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\dir_open.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\forward_dn.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\forward_up.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\kill.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\logo.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\notsearching.gi f
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\pause_dn.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\pause_up.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\play_dn.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\play_up.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\question.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\rewind_dn.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\rewind_up.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\search.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\searching.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\splash.png
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\splashpro.png
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\stop_dn.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\stop_up.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\theme.txt
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\version.txt
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\classic_theme\warning.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme.lwtp
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\01_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\02_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\03_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\04_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\05_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\chat.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\dir_closed.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\dir_open.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\forward_dn.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\forward_up.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\kill.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\kill_on.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\lime.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\logo.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\notsearching.g if
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\pause_dn.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\pause_up.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\play_dn.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\play_up.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\question.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\rewind_dn.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\rewind_up.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\searching.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\splash.png
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\splashpro.png
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\stop_dn.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\stop_up.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\theme.txt
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\version.txt
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewire_theme\warning.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme.lwtp
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\01_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\02_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\03_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\04_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\05_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\chat.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\dir_closed. gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\dir_open.gi f
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\forward_dn. gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\forward_up. gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\kill.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\kill_on.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\lime.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\logo.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\notsearchin g.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\pause_dn.gi f
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\pause_up.gi f
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\play_dn.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\play_up.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\question.gi f
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\rewind_dn.g if
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\rewind_up.g if
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\searching.g if
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\splash.png
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\splashpro.p ng
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\stop_dn.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\stop_up.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\theme.txt
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\version.txt
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\limewirePro_theme\warning.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme.lwtp
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme\01_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme\02_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme\03_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme\04_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme\05_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme\chat.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme\forward_dn.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme\forward_up.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme\kill.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme\kill_on.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme\logo.png
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme\name.txt
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme\notsearching.png
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme\pause_dn.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme\pause_up.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme\play_dn.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme\play_up.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme\question.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme\rewind_dn.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme\rewind_up.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme\searching.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme\splash.png
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme\splashpro.png
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme\stop_dn.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme\stop_up.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme\theme.txt
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme\version.txt
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\other_theme\warning.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\windows_theme.lwtp
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\windows_theme\01_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\windows_theme\02_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\windows_theme\03_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\windows_theme\04_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\windows_theme\05_star.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\windows_theme\chat.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\windows_theme\forward_dn.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\windows_theme\forward_up.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\windows_theme\kill.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\windows_theme\kill_on.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\windows_theme\logo.png
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\windows_theme\notsearching.pn g
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\windows_theme\pause_dn.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\windows_theme\pause_up.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\windows_theme\play_dn.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\windows_theme\play_up.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\windows_theme\question.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\windows_theme\rewind_dn.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\windows_theme\rewind_up.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\windows_theme\searching.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\windows_theme\splash.png
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\windows_theme\splashpro.png
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\windows_theme\stop_dn.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\windows_theme\stop_up.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\windows_theme\theme.txt
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\windows_theme\version.txt
C:\Documents and Settings\Gauhar\Application Data\LimeWire\themes\windows_theme\warning.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\ttree.cache
C:\Documents and Settings\Gauhar\Application Data\LimeWire\ttrees.cache
C:\Documents and Settings\Gauhar\Application Data\LimeWire\ttroot.cache
C:\Documents and Settings\Gauhar\Application Data\LimeWire\update.xml
C:\Documents and Settings\Gauhar\Application Data\LimeWire\version.key
C:\Documents and Settings\Gauhar\Application Data\LimeWire\version.xml
C:\Documents and Settings\Gauhar\Application Data\LimeWire\xml\data\application.sxml
C:\Documents and Settings\Gauhar\Application Data\LimeWire\xml\data\audio.sxml
C:\Documents and Settings\Gauhar\Application Data\LimeWire\xml\data\delete_me
C:\Documents and Settings\Gauhar\Application Data\LimeWire\xml\data\image.sxml
C:\Documents and Settings\Gauhar\Application Data\LimeWire\xml\data\video.sxml
C:\Documents and Settings\Gauhar\Application Data\LimeWire\xml\misc\application.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\xml\misc\audio.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\xml\misc\document.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\xml\misc\image.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\xml\misc\video.gif
C:\Documents and Settings\Gauhar\Application Data\LimeWire\xml\schemas\application.xsd
C:\Documents and Settings\Gauhar\Application Data\LimeWire\xml\schemas\audio.xsd
C:\Documents and Settings\Gauhar\Application Data\LimeWire\xml\schemas\document.xsd
C:\Documents and Settings\Gauhar\Application Data\LimeWire\xml\schemas\image.xsd
C:\Documents and Settings\Gauhar\Application Data\LimeWire\xml\schemas\video.xsd
C:\Documents and Settings\Guest\Application Data\LimeWire
C:\Documents and Settings\Guest\Application Data\LimeWire\.NetworkShare\LimeWireWin4.16.6.exe
C:\Documents and Settings\Guest\Application Data\LimeWire\412splashpro.png
C:\Documents and Settings\Guest\Application Data\LimeWire\413splashpro.png
C:\Documents and Settings\Guest\Application Data\LimeWire\active.mojito
C:\Documents and Settings\Guest\Application Data\LimeWire\createtimes.cache
C:\Documents and Settings\Guest\Application Data\LimeWire\data.ser
C:\Documents and Settings\Guest\Application Data\LimeWire\fileurns.bak
C:\Documents and Settings\Guest\Application Data\LimeWire\fileurns.cache
C:\Documents and Settings\Guest\Application Data\LimeWire\filters.props
C:\Documents and Settings\Guest\Application Data\LimeWire\gnutella.net
C:\Documents and Settings\Guest\Application Data\LimeWire\installation.props
C:\Documents and Settings\Guest\Application Data\LimeWire\library.dat
C:\Documents and Settings\Guest\Application Data\LimeWire\limewire.props
C:\Documents and Settings\Guest\Application Data\LimeWire\mojito.props
C:\Documents and Settings\Guest\Application Data\LimeWire\pub1.key
C:\Documents and Settings\Guest\Application Data\LimeWire\public.key
C:\Documents and Settings\Guest\Application Data\LimeWire\questions.props
C:\Documents and Settings\Guest\Application Data\LimeWire\responses.cache
C:\Documents and Settings\Guest\Application Data\LimeWire\secureMessage.key
C:\Documents and Settings\Guest\Application Data\LimeWire\simpp.xml
C:\Documents and Settings\Guest\Application Data\LimeWire\spam.dat
C:\Documents and Settings\Guest\Application Data\LimeWire\tables.props
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme.lwtp
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\01_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\02_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\03_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\04_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\05_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\chat.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\dir_closed.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\dir_open.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\forward_dn.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\forward_up.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\kill.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\kill_on.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\lime.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\logo.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\notsearching.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\pause_dn.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\pause_up.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\play_dn.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\play_up.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\question.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\rewind_dn.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\rewind_up.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\searching.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\splash.png
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\splashpro.png
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\stop_dn.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\stop_up.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\theme.txt
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\version.txt
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\black_theme\warning.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme.lwtp
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme\01_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme\02_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme\03_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme\04_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme\05_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme\chat.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme\dir_closed.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme\dir_open.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme\forward_dn.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme\forward_up.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme\kill.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme\logo.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme\notsearching.gi f
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme\pause_dn.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme\pause_up.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme\play_dn.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme\play_up.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme\question.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme\rewind_dn.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme\rewind_up.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme\search.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme\searching.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme\splash.png
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme\splashpro.png
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme\stop_dn.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme\stop_up.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme\theme.txt
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\classic_theme\warning.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme.lwtp
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\01_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\02_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\03_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\04_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\05_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\chat.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\dir_closed.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\dir_open.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\forward_dn.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\forward_up.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\kill.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\kill_on.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\lime.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\logo.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\notsearching.g if
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\pause_dn.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\pause_up.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\play_dn.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\play_up.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\question.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\rewind_dn.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\rewind_up.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\searching.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\splash.png
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\splashpro.png
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\stop_dn.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\stop_up.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\theme.txt
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewire_theme\warning.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme.lwtp
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\01_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\02_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\03_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\04_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\05_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\chat.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\dir_closed. gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\dir_open.gi f
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\forward_dn. gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\forward_up. gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\kill.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\kill_on.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\lime.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\logo.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\notsearchin g.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\pause_dn.gi f
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\pause_up.gi f
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\play_dn.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\play_up.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\question.gi f
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\rewind_dn.g if
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\rewind_up.g if
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\searching.g if
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\splash.png
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\splashpro.p ng
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\stop_dn.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\stop_up.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\theme.txt
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\version.txt
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\limewirePro_theme\warning.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme.lwtp
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme\01_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme\02_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme\03_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme\04_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme\05_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme\chat.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme\forward_dn.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme\forward_up.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme\kill.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme\kill_on.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme\logo.png
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme\name.txt
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme\notsearching.png
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme\pause_dn.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme\pause_up.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme\play_dn.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme\play_up.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme\question.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme\rewind_dn.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme\rewind_up.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme\searching.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme\splash.png
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme\splashpro.png
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme\stop_dn.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme\stop_up.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme\theme.txt
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme\version.txt
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\other_theme\warning.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\windows_theme.lwtp
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\windows_theme\01_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\windows_theme\02_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\windows_theme\03_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\windows_theme\04_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\windows_theme\05_star.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\windows_theme\chat.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\windows_theme\forward_dn.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\windows_theme\forward_up.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\windows_theme\kill.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\windows_theme\kill_on.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\windows_theme\logo.png
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\windows_theme\notsearching.pn g
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\windows_theme\pause_dn.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\windows_theme\pause_up.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\windows_theme\play_dn.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\windows_theme\play_up.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\windows_theme\question.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\windows_theme\rewind_dn.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\windows_theme\rewind_up.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\windows_theme\searching.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\windows_theme\splash.png
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\windows_theme\splashpro.png
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\windows_theme\stop_dn.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\windows_theme\stop_up.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\windows_theme\theme.txt
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\windows_theme\version.txt
C:\Documents and Settings\Guest\Application Data\LimeWire\themes\windows_theme\warning.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\ttree.cache
C:\Documents and Settings\Guest\Application Data\LimeWire\ttrees.cache
C:\Documents and Settings\Guest\Application Data\LimeWire\ttroot.cache
C:\Documents and Settings\Guest\Application Data\LimeWire\update.xml
C:\Documents and Settings\Guest\Application Data\LimeWire\version.key
C:\Documents and Settings\Guest\Application Data\LimeWire\version.xml
C:\Documents and Settings\Guest\Application Data\LimeWire\xml\data\audio.sxml
C:\Documents and Settings\Guest\Application Data\LimeWire\xml\data\delete_me
C:\Documents and Settings\Guest\Application Data\LimeWire\xml\data\video.sxml
C:\Documents and Settings\Guest\Application Data\LimeWire\xml\misc\application.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\xml\misc\audio.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\xml\misc\document.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\xml\misc\image.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\xml\misc\video.gif
C:\Documents and Settings\Guest\Application Data\LimeWire\xml\schemas\application.xsd
C:\Documents and Settings\Guest\Application Data\LimeWire\xml\schemas\audio.xsd
C:\Documents and Settings\Guest\Application Data\LimeWire\xml\schemas\document.xsd
C:\Documents and Settings\Guest\Application Data\LimeWire\xml\schemas\image.xsd
C:\Documents and Settings\Guest\Application Data\LimeWire\xml\schemas\video.xsd
C:\Documents and Settings\Guest\Application Data\Winamp\demo.mp3
C:\Documents and Settings\Guest\Application Data\Winamp\demoedit.aac
C:\Documents and Settings\Guest\Application Data\Winamp\Jamie_Lidell_Figured_Me_Out_LA_Garage_ Mix.mp3
C:\Documents and Settings\Guest\Application Data\Winamp\links.xml
C:\Documents and Settings\Guest\Application Data\Winamp\Plugins\gen_ml.ini
C:\Documents and Settings\Guest\Application Data\Winamp\Plugins\Gracenote\cddb.db
C:\Documents and Settings\Guest\Application Data\Winamp\Plugins\ml\cache\dashboard.wb
C:\Documents and Settings\Guest\Application Data\Winamp\Plugins\ml\default.vmd
C:\Documents and Settings\Guest\Application Data\Winamp\Plugins\ml\feeds.xml
C:\Documents and Settings\Guest\Application Data\Winamp\Plugins\ml\main.dat
C:\Documents and Settings\Guest\Application Data\Winamp\Plugins\ml\main.idx
C:\Documents and Settings\Guest\Application Data\Winamp\Plugins\ml\metA39A.vmd
C:\Documents and Settings\Guest\Application Data\Winamp\Plugins\ml\metA3B9.vmd
C:\Documents and Settings\Guest\Application Data\Winamp\Plugins\ml\metA3D9.vmd
C:\Documents and Settings\Guest\Application Data\Winamp\Plugins\ml\metA3E8.vmd
C:\Documents and Settings\Guest\Application Data\Winamp\Plugins\ml\metA407.vmd
C:\Documents and Settings\Guest\Application Data\Winamp\Plugins\ml\metA427.vmd
C:\Documents and Settings\Guest\Application Data\Winamp\Plugins\ml\metB36C.vmd
C:\Documents and Settings\Guest\Application Data\Winamp\Plugins\ml\ml_dash.ini
C:\Documents and Settings\Guest\Application Data\Winamp\Plugins\ml\ml_online.ini
C:\Documents and Settings\Guest\Application Data\Winamp\Plugins\ml\ml_orb.ini
C:\Documents and Settings\Guest\Application Data\Winamp\Plugins\ml\playlists.xml
C:\Documents and Settings\Guest\Application Data\Winamp\Plugins\ml\recent.dat
C:\Documents and Settings\Guest\Application Data\Winamp\Plugins\ml\recent.idx
C:\Documents and Settings\Guest\Application Data\Winamp\Plugins\ml\rss.xml
C:\Documents and Settings\Guest\Application Data\Winamp\studio.xnf
C:\Documents and Settings\Guest\Application Data\Winamp\Winamp.bm
C:\Documents and Settings\Guest\Application Data\Winamp\Winamp.ini
C:\Documents and Settings\Guest\Application Data\Winamp\Winamp.m3u
C:\Documents and Settings\Guest\Application Data\Winamp\Winamp.m3u8
C:\Documents and Settings\Guest\Application Data\Winamp\Winamp.q1
C:\Program Files\Winamp Remote
C:\Program Files\Winamp Remote\bin\aac_parser.ax
C:\Program Files\Winamp Remote\bin\avcodec-51.dll
C:\Program Files\Winamp Remote\bin\avformat-51.dll
C:\Program Files\Winamp Remote\bin\avutil-49.dll
C:\Program Files\Winamp Remote\bin\Cab.dll
C:\Program Files\Winamp Remote\bin\CabClient.dll
C:\Program Files\Winamp Remote\bin\CabDirectory.dll
C:\Program Files\Winamp Remote\bin\config.ini
C:\Program Files\Winamp Remote\bin\config.txt
C:\Program Files\Winamp Remote\bin\CoreAAC.ax
C:\Program Files\Winamp Remote\bin\CrashReporter.exe
C:\Program Files\Winamp Remote\bin\db.xml
C:\Program Files\Winamp Remote\bin\demork.exe
C:\Program Files\Winamp Remote\bin\DScaler5\GenDMOProp.dll
C:\Program Files\Winamp Remote\bin\DScaler5\MpegAudio.dll
C:\Program Files\Winamp Remote\bin\DScaler5\MpegVideo.dll
C:\Program Files\Winamp Remote\bin\encdec.dll
C:\Program Files\Winamp Remote\bin\HelixProducer\codecs\colorcvt.dll
C:\Program Files\Winamp Remote\bin\HelixProducer\codecs\cook.dll
C:\Program Files\Winamp Remote\bin\HelixProducer\codecs\erv3.dll
C:\Program Files\Winamp Remote\bin\HelixProducer\codecs\erv4.dll
C:\Program Files\Winamp Remote\bin\HelixProducer\codecs\sipr.dll
C:\Program Files\Winamp Remote\bin\HelixProducer\common\rembrdcst.dll
C:\Program Files\Winamp Remote\bin\HelixProducer\helixprodctrl.dll
C:\Program Files\Winamp Remote\bin\HelixProducer\plugins\sdpp3260.dll
C:\Program Files\Winamp Remote\bin\HelixProducer\pncrt.dll
C:\Program Files\Winamp Remote\bin\HelixProducer\tools\audiofmtconverter.d ll
C:\Program Files\Winamp Remote\bin\HelixProducer\tools\audiolimiter.dll
C:\Program Files\Winamp Remote\bin\HelixProducer\tools\audiometer.dll
C:\Program Files\Winamp Remote\bin\HelixProducer\tools\audioresampler.dll
C:\Program Files\Winamp Remote\bin\HelixProducer\tools\CodecMapping.txt
C:\Program Files\Winamp Remote\bin\HelixProducer\tools\encsession.dll
C:\Program Files\Winamp Remote\bin\HelixProducer\tools\logmessages.xml
C:\Program Files\Winamp Remote\bin\HelixProducer\tools\mediasink.dll
C:\Program Files\Winamp Remote\bin\HelixProducer\tools\rbsbroadcast.dll
C:\Program Files\Winamp Remote\bin\HelixProducer\tools\rmsessionformat.dll
C:\Program Files\Winamp Remote\bin\HelixProducer\tools\rnaudiocodec.dll
C:\Program Files\Winamp Remote\bin\HelixProducer\tools\rnaudiopacketizer.d ll
C:\Program Files\Winamp Remote\bin\HelixProducer\tools\rnvideocodec.dll
C:\Program Files\Winamp Remote\bin\HelixProducer\tools\videocolorconverter .dll
C:\Program Files\Winamp Remote\bin\HelixProducer\tools\videonoisefilter.dl l
C:\Program Files\Winamp Remote\bin\HelixProducer\tools\videoprogressive.dl l
C:\Program Files\Winamp Remote\bin\HelixProducer\tools\videoresizer.dll
C:\Program Files\Winamp Remote\bin\id3lib.dll
C:\Program Files\Winamp Remote\bin\LangRes.dll
C:\Program Files\Winamp Remote\bin\libeay32.dll
C:\Program Files\Winamp Remote\bin\libexpat.dll
C:\Program Files\Winamp Remote\bin\library.zip
C:\Program Files\Winamp Remote\bin\libspeex.dll
C:\Program Files\Winamp Remote\bin\Microsoft.VC80.CRT.manifest
C:\Program Files\Winamp Remote\bin\msvcp80.dll
C:\Program Files\Winamp Remote\bin\msvcr80.dll
C:\Program Files\Winamp Remote\bin\ogg.dll
C:\Program Files\Winamp Remote\bin\Orb.exe
C:\Program Files\Winamp Remote\bin\orbcacert.pem
C:\Program Files\Winamp Remote\bin\OrbContacts.dll
C:\Program Files\Winamp Remote\bin\OrbDMS.dll
C:\Program Files\Winamp Remote\bin\OrbImageProcessing.dll
C:\Program Files\Winamp Remote\bin\OrbIR.dll
C:\Program Files\Winamp Remote\bin\OrbMedia.dll
C:\Program Files\Winamp Remote\bin\OrbMediaService.exe
C:\Program Files\Winamp Remote\bin\OrbNSVSourceFilter.ax
C:\Program Files\Winamp Remote\bin\OrbPVR.dll
C:\Program Files\Winamp Remote\bin\OrbRequestProxy.dll
C:\Program Files\Winamp Remote\bin\OrbRTSPServer.dll
C:\Program Files\Winamp Remote\bin\OrbRTSPSource.ax
C:\Program Files\Winamp Remote\bin\OrbSourceFilter.ax
C:\Program Files\Winamp Remote\bin\OrbStats.dll
C:\Program Files\Winamp Remote\bin\OrbStreamer.dll
C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe
C:\Program Files\Winamp Remote\bin\OrbTray.exe
C:\Program Files\Winamp Remote\bin\OrbTVBuffer.exe
C:\Program Files\Winamp Remote\bin\OrbTVXML.dll
C:\Program Files\Winamp Remote\bin\OrbUrlSource.ax
C:\Program Files\Winamp Remote\bin\OrbWebServer.dll
C:\Program Files\Winamp Remote\bin\pncrt.dll
C:\Program Files\Winamp Remote\bin\python24.dll
C:\Program Files\Winamp Remote\bin\RealMediaSplitter.ax
C:\Program Files\Winamp Remote\bin\remotes\DCT2000.cf
C:\Program Files\Winamp Remote\bin\remotes\DCT2500.rem
C:\Program Files\Winamp Remote\bin\remotes\DCT2524.rem
C:\Program Files\Winamp Remote\bin\remotes\Hauppauge350.cf
C:\Program Files\Winamp Remote\bin\remotes\HauppaugePVR2.cf
C:\Program Files\Winamp Remote\bin\remotes\MCE.cf
C:\Program Files\Winamp Remote\bin\remotes\orbir.db
C:\Program Files\Winamp Remote\bin\remotes\SATB55.cf
C:\Program Files\Winamp Remote\bin\remotes\TIVO.cf
C:\Program Files\Winamp Remote\bin\remotes\TIVO.rem
C:\Program Files\Winamp Remote\bin\remotes\TIVO2.cf
C:\Program Files\Winamp Remote\bin\remotes\WINTV.cf
C:\Program Files\Winamp Remote\bin\sqlite3.dll
C:\Program Files\Winamp Remote\bin\ssleay32.dll
C:\Program Files\Winamp Remote\bin\swscale-0.dll
C:\Program Files\Winamp Remote\bin\TVGrabber.dll
C:\Program Files\Winamp Remote\bin\uuirtdrv.dll
C:\Program Files\Winamp Remote\bin\w9xpopen.exe
C:\Program Files\Winamp Remote\bin\zlib1.dll
C:\Program Files\Winamp Remote\db.xml
C:\Program Files\Winamp Remote\Orb.gif
C:\Program Files\Winamp Remote\orbLogo_120.jpg
C:\Program Files\Winamp Remote\orbLogo_32.jpg
C:\Program Files\Winamp Remote\orbLogo_48.jpg
C:\Program Files\Winamp Remote\redirect_orb.html
C:\Program Files\Winamp Remote\uninstall.exe
C:\sqmdata02.sqm
C:\sqmdata03.sqm
C:\sqmdata04.sqm
C:\sqmdata05.sqm
C:\sqmdata06.sqm
C:\sqmdata07.sqm
C:\sqmdata08.sqm
C:\sqmdata09.sqm
C:\sqmdata10.sqm
C:\sqmdata11.sqm
C:\sqmdata12.sqm
C:\sqmdata13.sqm
C:\sqmdata14.sqm
C:\sqmdata15.sqm
C:\sqmdata16.sqm
C:\sqmdata17.sqm
C:\sqmdata18.sqm
C:\sqmdata19.sqm
C:\sqmnoopt02.sqm
C:\sqmnoopt03.sqm
C:\sqmnoopt04.sqm
C:\sqmnoopt05.sqm
C:\sqmnoopt06.sqm
C:\sqmnoopt07.sqm
C:\sqmnoopt08.sqm
C:\sqmnoopt10.sqm
C:\sqmnoopt11.sqm
C:\sqmnoopt12.sqm
C:\sqmnoopt13.sqm
C:\sqmnoopt14.sqm
C:\sqmnoopt15.sqm
C:\sqmnoopt16.sqm
C:\sqmnoopt17.sqm
C:\sqmnoopt18.sqm
C:\sqmnoopt19.sqm
C:\WINDOWS\WLXPGSS.SCR
.
((((((((((((((((((((((((( Files Created from 2008-08-16 to 2008-09-16 )))))))))))))))))))))))))))))))
.
2008-09-16 12:02 . 2008-09-16 12:02 <DIR> d--h-c--- C:\$AVG8.VAULT$
2008-09-16 01:46 . 2008-09-16 12:21 <DIR> d----c--- C:\WINDOWS\system32\drivers\Avg
2008-09-16 01:46 . 2008-09-16 01:46 <DIR> d----c--- C:\Documents and Settings\Gauhar\Application Data\AVGTOOLBAR
2008-09-16 01:46 . 2008-09-16 01:46 97,928 --a--c--- C:\WINDOWS\system32\drivers\avgldx86.sys
2008-09-16 01:46 . 2008-09-16 01:46 10,520 --a--c--- C:\WINDOWS\system32\avgrsstx.dll
2008-09-16 01:45 . 2008-09-16 01:45 <DIR> d----c--- C:\Program Files\AVG
2008-09-16 01:45 . 2008-09-16 01:45 <DIR> d----c--- C:\Documents and Settings\All Users\Application Data\avg8
2008-09-15 23:51 . 2008-09-15 23:53 <DIR> d----c--- C:\Program Files\Malwarebytes' Anti-Malware
2008-09-15 23:51 . 2008-09-15 23:51 <DIR> d----c--- C:\Documents and Settings\Gauhar\Application Data\Malwarebytes
2008-09-15 23:51 . 2008-09-15 23:51 <DIR> d----c--- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-09-15 23:51 . 2008-09-10 00:04 38,528 --a--c--- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-09-15 23:51 . 2008-09-10 00:03 17,200 --a--c--- C:\WINDOWS\system32\drivers\mbam.sys
2008-09-15 21:15 . 2008-09-15 21:15 <DIR> d----c--- C:\Program Files\Trend Micro
2008-09-15 02:09 . 2008-09-15 02:10 <DIR> d----c--- C:\Program Files\Trojan Remover
2008-09-15 02:06 . 2008-09-15 02:09 <DIR> d----c--- C:\Documents and Settings\Gauhar\Application Data\Simply Super Software
2008-09-15 02:06 . 2008-09-15 02:06 <DIR> d----c--- C:\Documents and Settings\All Users\Application Data\Simply Super Software
2008-09-15 02:06 . 2006-05-25 15:52 162,304 --a--c--- C:\WINDOWS\system32\ztvunrar36.dll
2008-09-15 02:06 . 2003-02-02 20:06 153,088 --a--c--- C:\WINDOWS\system32\unrar3.dll
2008-09-15 02:06 . 2005-08-26 01:50 77,312 --a--c--- C:\WINDOWS\system32\ztvunace26.dll
2008-09-15 02:06 . 2002-03-06 01:00 75,264 --a--c--- C:\WINDOWS\system32\unacev2.dll
2008-09-15 02:06 . 2006-06-19 13:01 69,632 --a--c--- C:\WINDOWS\system32\ztvcabinet.dll
2008-09-15 02:05 . 2008-09-15 02:05 <DIR> d----c--- C:\Documents and Settings\Gauhar\Application Data\GetRightToGo
2008-09-15 01:44 . 2008-09-15 01:44 <DIR> d----c--- C:\Documents and Settings\All Users\Application Data\PC Tools
2008-09-15 01:43 . 2008-09-15 01:39 160,792 --a--c--- C:\WINDOWS\system32\drivers\pctfw2.sys
2008-09-15 01:35 . 2008-09-15 01:35 <DIR> d----c--- C:\Program Files\Common Files\PC Tools
2008-09-15 01:14 . 2008-09-16 01:38 <DIR> d----c--- C:\Program Files\Spyware Doctor
2008-09-15 01:14 . 2008-09-15 01:14 <DIR> d----c--- C:\Documents and Settings\Gauhar\Application Data\PC Tools
2008-09-15 01:14 . 2008-08-25 11:36 81,288 --a--c--- C:\WINDOWS\system32\drivers\iksyssec.sys
2008-09-15 01:14 . 2008-08-25 11:36 66,952 --a--c--- C:\WINDOWS\system32\drivers\iksysflt.sys
2008-09-15 01:14 . 2008-08-25 11:36 40,840 --a--c--- C:\WINDOWS\system32\drivers\ikfilesec.sys
2008-09-15 01:14 . 2008-06-02 15:19 29,576 --a--c--- C:\WINDOWS\system32\drivers\kcom.sys
2008-09-15 01:00 . 2008-09-15 01:04 <DIR> d----c--- C:\Documents and Settings\Gauhar\.housecall6.6
2008-09-15 01:00 . 2008-09-15 01:00 102,664 --a--c--- C:\WINDOWS\system32\drivers\tmcomm.sys
2008-09-14 17:26 . 2008-09-14 17:26 <DIR> d----c--- C:\Documents and Settings\LocalService\Application Data\Webroot
2008-09-14 17:21 . 2008-09-14 17:21 <DIR> d----c--- C:\Program Files\Webroot
2008-09-14 17:21 . 2008-09-14 17:21 <DIR> d----c--- C:\Documents and Settings\Gauhar\Application Data\Webroot
2008-09-14 17:21 . 2008-09-14 17:21 <DIR> d----c--- C:\Documents and Settings\All Users\Application Data\Webroot
2008-09-14 17:21 . 2008-08-09 16:04 1,538,928 --a--c--- C:\WINDOWS\WRSetup.dll
2008-09-14 13:00 . 2008-09-14 22:27 80,898 --a--c--- C:\WINDOWS\system32\cNbWqper.exe_
2008-09-12 11:20 . 2008-09-12 11:20 <DIR> d----c--- C:\Documents and Settings\Gauhar\Application Data\SmartFTP
2008-09-12 11:19 . 2008-09-12 11:19 <DIR> d----c--- C:\Program Files\SmartFTP Client 3.0 Setup Files
2008-09-12 11:19 . 2008-09-12 11:19 <DIR> d----c--- C:\Program Files\SmartFTP Client
2008-09-09 16:59 . 2008-09-12 00:53 244 --ah-c--- C:\sqmnoopt09.sqm
2008-09-08 02:17 . 2008-09-08 02:17 <DIR> d----c--- C:\Documents and Settings\Guest\.beaTunes
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) ))
.
2008-09-16 18:33 --------- dc----w C:\Documents and Settings\Guest\Application Data\Winamp
2008-09-16 17:00 --------- dc----w C:\Program Files\Azureus
2008-09-16 17:00 --------- dc----w C:\Documents and Settings\Gauhar\Application Data\Azureus
2008-09-16 16:58 --------- dc--a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-09-16 05:38 --------- dc----w C:\Program Files\Symantec
2008-09-16 05:38 --------- dc----w C:\Program Files\Common Files\Symantec Shared
2008-09-16 01:31 --------- dc----w C:\Program Files\Elecard
2008-09-16 01:27 --------- dc-h--w C:\Program Files\InstallShield Installation Information
2008-09-16 01:27 --------- dc----w C:\Program Files\Ares
2008-09-16 01:27 --------- dc----w C:\Documents and Settings\All Users\Application Data\BVRP Software
2008-09-15 03:29 --------- dc----w C:\Program Files\World of Warcraft
2008-09-14 22:00 --------- dc----w C:\Program Files\Norton Security Scan
2008-09-12 16:52 --------- dc----w C:\Documents and Settings\All Users\Application Data\Microsoft Help
2008-09-09 16:24 --------- dc----w C:\Documents and Settings\Gauhar\Application Data\dvdcss
2008-09-09 00:16 --------- dc----w C:\Program Files\BitComet
2008-08-09 18:42 29,808 -c--a-w C:\WINDOWS\system32\drivers\ssfs0bbc.sys
2008-08-09 18:42 23,152 -c--a-w C:\WINDOWS\system32\drivers\sshrmd.sys
2008-08-09 18:42 166,512 -c--a-w C:\WINDOWS\system32\drivers\ssidrv.sys
2008-08-03 05:29 --------- dc----w C:\Documents and Settings\Guest\Application Data\DivX
2008-07-31 05:02 --------- dc----w C:\Documents and Settings\Guest\Application Data\dvdcss
2008-07-23 00:32 32,000 -c--a-w C:\WINDOWS\system32\drivers\usbaapl.sys
2008-07-19 02:10 94,920 -c--a-w C:\WINDOWS\system32\cdm.dll
2008-07-19 02:10 53,448 -c--a-w C:\WINDOWS\system32\wuauclt.exe
2008-07-19 02:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll
2008-07-19 02:10 36,552 -c--a-w C:\WINDOWS\system32\wups.dll
2008-07-19 02:09 563,912 -c--a-w C:\WINDOWS\system32\wuapi.dll
2008-07-19 02:09 325,832 -c--a-w C:\WINDOWS\system32\wucltui.dll
2008-07-19 02:09 205,000 -c--a-w C:\WINDOWS\system32\wuweb.dll
2008-07-19 02:09 1,811,656 -c--a-w C:\WINDOWS\system32\wuaueng.dll
2008-07-19 02:07 270,880 -c--a-w C:\WINDOWS\system32\mucltui.dll
2008-07-19 02:07 210,976 -c--a-w C:\WINDOWS\system32\muweb.dll
2008-07-17 06:03 --------- dc----w C:\Program Files\Lavasoft
2008-07-17 06:00 --------- dc----w C:\Program Files\Common Files\Wise Installation Wizard
2008-07-17 05:56 --------- dc----w C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-07-07 20:06 253,952 -c--a-w C:\WINDOWS\system32\es.dll
2008-06-27 22:54 81,984 -c--a-w C:\WINDOWS\system32\bdod.bin
2008-06-27 22:26 77,824 -c--a-w C:\WINDOWS\system32\xcomm.dll
2008-06-24 22:12 295,936 -c----w C:\WINDOWS\system32\wmpeffects.dll
2008-06-24 16:23 74,240 -c--a-w C:\WINDOWS\system32\mscms.dll
2008-06-23 16:57 826,368 -c--a-w C:\WINDOWS\system32\wininet.dll
2008-06-20 17:41 245,248 -c--a-w C:\WINDOWS\system32\mswsock.dll
2007-04-21 05:42 92,064 -c--a-w C:\Documents and Settings\Gauhar\mqdmmdm.sys
2007-04-21 05:42 9,232 -c--a-w C:\Documents and Settings\Gauhar\mqdmmdfl.sys
2007-04-21 05:42 79,328 -c--a-w C:\Documents and Settings\Gauhar\mqdmserd.sys
2007-04-21 05:42 66,656 -c--a-w C:\Documents and Settings\Gauhar\mqdmbus.sys
2007-04-21 05:42 6,208 -c--a-w C:\Documents and Settings\Gauhar\mqdmcmnt.sys
2007-04-21 05:42 5,936 -c--a-w C:\Documents and Settings\Gauhar\mqdmwhnt.sys
2007-04-21 05:42 4,048 -c--a-w C:\Documents and Settings\Gauhar\mqdmcr.sys
2007-04-21 05:42 25,600 -c--a-w C:\Documents and Settings\Gauhar\usbsermptxp.sys
2007-04-21 05:42 22,768 -c--a-w C:\Documents and Settings\Gauhar\usbsermpt.sys
2007-02-05 03:49 87,608 -c--a-w C:\Documents and Settings\Gauhar\Application Data\ezpinst.exe
2007-02-05 03:49 47,360 -c--a-w C:\Documents and Settings\Gauhar\Application Data\pcouffin.sys
.
((((((((((((((((((((((((((((( snapshot@2008-09-16_ 0.53.43.90 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-09-16 05:46:41 26,824 -c--a-w C:\WINDOWS\system32\drivers\avgmfx86.sys
+ 2006-12-02 04:46:44 65,536 -c--a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3 b9a1e18e3b_8.0.50727.762_x-ww_6c18549a\vcomp.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"TOSCDSPD"="C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe" [2004-12-30 65536]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 1694208]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe" [2007-06-07 68856]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2006-06-01 94208]
"CursorXP"="C:\Program Files\CursorXP\CursorXP.exe" [2005-01-19 140288]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 15360]
"Uniblue RegistryBooster 2"="C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe" [2007-07-20 1859864]
"CurseClient"="C:\Program Files\Curse\CurseClient.exe" [2008-05-19 1400832]
"updateMgr"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 313472]
"Veoh"="C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" [2008-08-28 3660848]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2005-08-05 64512]
"RTHDCPL"="C:\WINDOWS\RTHDCPL.EXE" [2006-05-04 16206848]
"AGRSMMSG"="C:\WINDOWS\AGRSMMSG.exe" [2005-12-12 88204]
"DLA"="C:\WINDOWS\System32\DLA\DLACTRLW.EXE" [2005-10-06 122940]
"SmoothView"="C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe" [2005-04-26 122880]
"Tvs"="C:\Program Files\Toshiba\Tvs\TvsTray.exe" [2006-02-02 73728]
"THotkey"="C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe" [2006-08-25 356352]
"LtMoh"="C:\Program Files\ltmoh\Ltmoh.exe" [2004-08-17 184320]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2006-03-02 761948]
"IntelZeroConfig"="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" [2006-08-02 802816]
"IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [2006-08-02 696320]
"TPSMain"="C:\WINDOWS\system32\TPSMain.exe" [2005-06-01 282624]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2007-01-08 185896]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 144784]
"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]
"NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"googletalk"="C:\Program Files\Google\Google Talk\googletalk.exe" [2007-01-01 3739648]
"IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" [2007-02-26 131072]
"HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe" [2007-02-26 155648]
"Persistence"="C:\WINDOWS\system32\igfxpers.ex e" [2007-02-26 131072]
"Home Theater SchSvr"="C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe" [2005-11-04 106496]
"WINCINEMAMGR"="C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe" [2005-11-04 266240]
"WINREMOTE"="C:\Program Files\InterVideo\Common\Bin\WinRemote.exe" [2005-11-04 266240]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-03-28 413696]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 267048]
"AppleSyncNotifier"="C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-07-22 116040]
"TrojanScanner"="C:\Program Files\Trojan Remover\Trjscan.exe" [2008-09-04 917072]
"AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2008-09-16 1235736]
"SpySweeper"="C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" [2008-08-09 5418864]
"NDSTray.exe"="NDSTray.exe" [BU]
"TFncKy"="TFncKy.exe" [BU]
"CFSServ.exe"="CFSServ.exe" [BU]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Run]
"DWQueuedReporting"="C:\PROGRA~1\COMMON~1\MICROS~1 \DW\dwtrig20.exe" [2007-08-24 437160]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 5724184]
C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Startup\
IEHOME.LNK - C:\Documents and Settings\Default User\Local Settings\Temp\iehome.bat [2007-01-09 298]
C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\
IEHOME.LNK - C:\Documents and Settings\Default User\Local Settings\Temp\iehome.bat [2007-01-09 298]
C:\Documents and Settings\Guest\Start Menu\Programs\Startup\
OneNote 2007 Screen Clipper and Launcher.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [2007-12-07 101440]
C:\Documents and Settings\Gauhar\Start Menu\Programs\Startup\
OneNote 2007 Screen Clipper and Launcher.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [2007-12-07 101440]
WordWeb.lnk - C:\Program Files\WordWeb\wweb32.exe [2007-01-10 19968]
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 29696]
RAMASST.lnk - C:\WINDOWS\system32\RAMASST.exe [2006-01-29 155648]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\policies\system]
"InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme
"DisableStatusMessages"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="C:\\WINDOWS\\system32\\logonui.exe"
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=avgrsstx.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.l3codec"= l3codecp.acm
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\Program Files\\LimeWire\\LimeWire.exe"=
"C:\\Excursion9.5\\mIRC.ExCurSioN.exe"=
"C:\\Program Files\\Java\\jre1.5.0_06\\bin\\javaw.exe"=
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\BitComet\\BitComet.exe"=
"C:\\Program Files\\Google\\Google Talk\\googletalk.exe"=
"C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
"C:\\Program Files\\SopCast\\SopCast.exe"=
"C:\\Documents and Settings\\Gauhar\\Application Data\\SopCast\\adv\\SopAdver.exe"=
"C:\\Program Files\\uTorrent\\utorrent.exe"=
"C:\\Program Files\\Veoh Networks\\Veoh\\VeohClient.exe"=
"C:\\Program Files\\Azureus\\Azureus.exe"=
"C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe"=
"C:\\Program Files\\World of Warcraft\\WoW-2.3.0-enUS-downloader.exe"=
"C:\\Program Files\\SopCast\\adv\\SopAdver.exe"=
"C:\\Program Files\\Toshiba\\ConfigFree\\CFXFER.exe"=
"C:\\WINDOWS\\system32\\dpvsetup.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\SmartFTP Client\\SmartFTP.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\GloballyOpenPorts\List]
"12972:TCP"= 12972:TCP:BitComet 12972 TCP
"12972:UDP"= 12972:UDP:BitComet 12972 UDP
"3724:TCP"= 3724:TCP:Blizzard Downloader: 3724
R0 ssfs0bbc;ssfs0bbc;C:\WINDOWS\system32\DRIVERS\ssfs 0bbc.sys [2008-08-09 29808]
R1 AvgLdx86;AVG Free AVI Loader Driver x86;C:\WINDOWS\system32\Drivers\avgldx86.sys [2008-09-16 97928]
R1 pctfw2;pctfw2;C:\WINDOWS\system32\drivers\pctfw2.s ys [2008-09-15 160792]
R2 avg8wd;AVG Free8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-09-16 231704]
R3 Ma730Pt;MA730 Bluetooth VCOM Driver;C:\WINDOWS\system32\DRIVERS\Ma730Pt.sys [2006-09-21 103040]
R3 Ma730Vad;MA730 Bluetooth Audio;C:\WINDOWS\system32\DRIVERS\Ma730Vad.sys [2005-11-22 23376]
S1 lusbaudio;Logitech USB Microphone;C:\WINDOWS\system32\drivers\OVSound2.sy s [2001-08-17 25216]
S3 QCAbsee;Logitech QuickCam Web (0801);C:\WINDOWS\system32\DRIVERS\OVCA.sys [2001-08-17 25088]
[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\F]
\Shell\AutoRun\command - F:\setup.exe
[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\{2c9053b7-6651-11dc-9ba3-0018dea6a15a}]
\Shell\Auto\command - H:\oxbvpen.exe
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL oxbvpen.exe
[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\{3ecaa64e-3c97-11dc-9b59-0018dea6a15a}]
\Shell\Auto\command - H:\Server.exe
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Server.exe
[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\{63abb64d-2440-11dd-9c87-0018dea6a15a}]
\Shell\Auto\command - I:\Server.exe
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Server.exe
[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\{768f9e78-d1dc-11dc-9c47-0018dea6a15a}]
\Shell\Auto\command - Server.exe
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Server.exe
.
Contents of the 'Scheduled Tasks' folder
.
- - - - ORPHANS REMOVED - - - -
Notify-NavLogon - (no file)
************************************************** ************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-16 14:38:48
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
************************************************** ************************
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Toshiba\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\WINDOWS\ehome\ehrecvr.exe
C:\WINDOWS\ehome\ehSched.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\ehome\ehmsas.exe
C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
C:\Program Files\Toshiba\TOSHIBA Controls\TFncKy.exe
C:\Program Files\Synaptics\SynTP\Toshiba.exe
C:\Program Files\Toshiba\ConfigFree\CFSServ.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.exe
.
************************************************** ************************
.
Completion time: 2008-09-16 14:56:34 - machine was rebooted
ComboFix-quarantined-files.txt 2008-09-16 18:55:58
ComboFix2.txt 2008-09-16 04:55:20
Pre-Run: 23,364,616,192 bytes free
Post-Run: 23,324,725,248 bytes free
915 --- E O F --- 2008-09-12 16:52:22
