[Closed] Can't tell if I'm infected or not
71 min read
My name is SpySentinel and I will be helping you with your malware problem.
Please go HERE, follow the instructions and post a HJT Log here in a reply.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:57:54 PM, on 2/19/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\runservice.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\WLTRAY.exe
C:\WINDOWS\system32\KADxMain.exe
C:\Program Files\Dell\MediaDirect\PCMService.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AIM6\aim6.exe
C:\Program Files\AIM6\aolsoftware.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wscript.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us&ibd=5071202
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NVHotkey] rundll32.exe nvHotkey.dll,Start
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe
O4 - HKLM\..\Run: [KADxMain] C:\WINDOWS\system32\KADxMain.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe"
O4 - HKLM\..\Run: [dscactivate] "%ProgramFiles%\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Startup: Secunia PSI.lnk = C:\Program Files\Secunia\PSI\psi.exe
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Nick\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} (Wwlaunch Control) - http://www.worldwinner.com/games/shared/wwlaunch.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://152.1.164.197/activex/AxisCamControl.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://aolsvc.aol.com/onlinegames/free-tri…zylomplayer.cab
O16 - DPF: {CF969D51-F764-4FBF-9E90-475248601C8A} (FamilyFeud Control) - http://www.worldwinner.com/games/v47/famil…/familyfeud.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LicCtrl Service (LicCtrlService) - Unknown owner - C:\WINDOWS\runservice.exe
O23 - Service: Message Queuing Service (MSMQSVC) - Unknown owner - C:\WINDOWS\system32\mqsv32.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE
–
End of file - 8946 bytes
Link 1
Link 2
* IMPORTANT !!! Save ComboFix.exe to your Desktop
- Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
- Double click on ComboFix.exe & follow the prompts.
- As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
- Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.
[external image: Posted Image]
Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:
[external image: Posted Image]
Click on Yes, to continue scanning for malware.
When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1022.420 [GMT -5:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated)
* Created a new restore point
.
((((((((((((((((((((((((( Files Created from 2009-01-20 to 2009-02-20 )))))))))))))))))))))))))))))))
.
2009-02-19 20:56 . 2009-02-19 20:56 d——– c:\program files\Trend Micro
2009-02-16 11:42 . 2009-02-16 11:42 d——– c:\program files\Secunia
2009-02-16 11:28 . 2009-02-17 20:25 d-a—— c:\documents and settings\All Users\Application Data\TEMP
2009-02-16 11:12 . 2009-02-16 11:12 d——– c:\program files\ERUNT
2009-02-15 19:45 . 2009-02-15 19:57 d——– C:\Worknow
2009-02-15 04:06 . 2009-02-11 10:19 38,496 –a—— c:\windows\system32\drivers\mbamswissarmy.sys
2009-02-15 04:06 . 2009-02-11 10:19 15,504 –a—— c:\windows\system32\drivers\mbam.sys
2009-02-15 02:51 . 2009-02-15 02:51 664 –a—— c:\windows\system32\d3d9caps.dat
2009-02-14 17:08 . 2009-02-14 17:26 d——– c:\documents and settings\All Users\Application Data\Electronic Arts
2009-02-14 17:03 . 2009-02-15 19:52 d——– c:\windows\system32\inf
2009-02-10 16:35 . 2009-02-10 16:35 0 –a—— c:\windows\nsreg.dat
2009-02-04 20:24 . 2009-02-04 20:24 d——– c:\documents and settings\Nick\Application Data\Maple
2009-02-04 20:16 . 2009-02-04 20:16 d——– C:\watcom-1.3
2009-02-04 20:16 . 2009-02-04 20:16 212,992 –a—— c:\windows\system32\WMIMPLEX.dll
2009-02-04 20:16 . 2009-02-04 20:16 40,960 –a—— c:\windows\system32\maplec.dll
2009-02-04 20:16 . 2009-02-04 20:16 20,480 –a—— c:\windows\system32\maplecompat.dll
2009-02-04 20:14 . 2009-02-04 20:14 d–h—– c:\program files\Zero G Registry
2009-02-04 20:14 . 2009-02-04 20:17 d——– c:\program files\Maple 12
2009-02-04 20:13 . 2009-02-04 20:13 d–h—– c:\documents and settings\Nick\InstallAnywhere
2009-01-31 12:16 . 2009-01-31 12:16 10,520 –a—— c:\windows\system32\avgrsstx.dll
2009-01-23 15:52 . 2008-10-16 14:06 268,648 –a—— c:\windows\system32\mucltui.dll
2009-01-23 15:52 . 2008-10-16 14:06 208,744 –a—— c:\windows\system32\muweb.dll
2009-01-23 15:52 . 2008-10-16 14:06 27,496 –a—— c:\windows\system32\mucltui.dll.mui
2009-01-23 02:19 . 2009-01-23 02:19 d——– c:\program files\Microsoft Silverlight
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-02-19 03:53 3,609 –sha-w c:\windows\system32\mmf.sys
2009-02-19 03:52 ——— d—–w c:\program files\Spybot - Search & Destroy
2009-02-18 01:27 ——— d—–w c:\program files\SpywareGuard
2009-02-18 01:27 ——— d—–w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-02-18 01:25 ——— d—–w c:\program files\SpywareBlaster
2009-02-16 17:16 ——— d—–w c:\program files\BitTorrent
2009-02-16 17:10 ——— d—–w c:\program files\Sports Mogul
2009-02-16 16:25 ——— d—–w c:\program files\SUPERAntiSpyware
2009-02-16 16:25 ——— d—–w c:\documents and settings\Nick\Application Data\SUPERAntiSpyware.com
2009-02-16 16:21 ——— d—–w c:\program files\Common Files\Wise Installation Wizard
2009-02-15 17:14 ——— d—–w c:\program files\Malwarebytes' Anti-Malware
2009-02-15 16:16 ——— d—–w c:\documents and settings\All Users\Application Data\avg8
2009-02-14 22:32 ——— d—–w c:\program files\Electronic Arts
2009-02-14 19:51 ——— d—–w c:\documents and settings\Nick\Application Data\uTorrent
2009-02-03 03:58 ——— d—–w c:\program files\Wolverine Studios
2009-01-31 17:16 325,128 —-a-w c:\windows\system32\drivers\avgldx86.sys
2009-01-24 08:13 ——— d–h–w c:\program files\InstallShield Installation Information
2009-01-24 08:01 ——— d—–w c:\program files\Microsoft Works
2009-01-17 02:35 3,594,752 ——w c:\windows\system32\dllcache\mshtml.dll
2009-01-15 23:03 ——— d—–w c:\program files\Java
2009-01-14 17:22 ——— d—–w c:\documents and settings\Nick\Application Data\SPORE
2009-01-14 17:20 107,888 —-a-w c:\windows\system32\CmdLineExt.dll
2009-01-14 17:20 ——— d–h–r c:\documents and settings\Nick\Application Data\SecuROM
2009-01-13 01:20 ——— d—–w c:\documents and settings\Nick\Application Data\BitTorrent
2009-01-09 17:26 ——— d—–w c:\program files\uTorrent
2009-01-08 14:52 ——— d—–w c:\documents and settings\Nick\Application Data\SPORE Creature Creator
2008-12-25 09:48 ——— d—–w c:\program files\WinPcap
2008-12-23 19:43 ——— d—–w c:\program files\music
2008-12-19 09:10 70,656 ——w c:\windows\system32\dllcache\ie4uinit.exe
2008-12-19 09:10 13,824 ——w c:\windows\system32\dllcache\ieudinit.exe
2008-12-19 05:25 634,024 ——w c:\windows\system32\dllcache\iexplore.exe
2008-12-19 05:23 161,792 ——w c:\windows\system32\dllcache\ieakui.dll
2008-12-11 10:57 333,952 ——w c:\windows\system32\dllcache\srv.sys
2008-11-07 22:09 536,811 —-a-w c:\program files\ie-spyad.exe
2008-10-23 16:17 18,829,383 —-a-w c:\program files\tibia831.exe
2008-08-14 01:59 232,904,074 —-a-w c:\program files\ootp9setup.exe
2008-07-07 13:34 24,234,968 —-a-w c:\program files\setupeng.exe
2008-07-04 19:01 15,336,856 —-a-w c:\program files\jre-6u10-beta-windows-i586-p.exe
2008-06-23 02:32 49,384,056 —-a-w c:\program files\avg_free_stf_all_8_100a1323.exe
2008-06-21 00:07 5,632 –sha-w c:\program files\Thumbs.db
2007-11-21 22:55 6,637,432 —-a-w c:\program files\dMC-R12.3-Ref-Registered.exe
2007-11-13 16:01 13,871,095 —-a-w c:\program files\schedulemaker.zip
2007-06-15 05:35 9,690,219 —-a-w c:\program files\mws094f.exe
2007-06-14 16:29 380,208,128 —-a-w c:\program files\mtgodl2.exe
2007-03-18 23:57 26,583,420 —-a-w c:\program files\Geneforge4Demo.exe
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2008-08-13 206064]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2009-01-15 1830128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-07-09 851968]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-06-06 8429568]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-06-06 81920]
"Broadcom Wireless Manager UI"="c:\windows\system32\WLTRAY.exe" [2007-05-09 1392640]
"KADxMain"="c:\windows\system32\KADxMain.exe" [2006-11-02 282624]
"PCMService"="c:\program files\Dell\MediaDirect\PCMService.exe" [2007-04-16 184320]
"dscactivate"="c:\program files\Dell Support Center\gs_agent\custom\dsca.exe" [2007-10-09 16384]
"DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2008-08-13 206064]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-01-31 1601304]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-11-10 136600]
"Dell QuickSet"="c:\program files\Dell\QuickSet\quickset.exe" [2007-07-03 1228800]
"NVHotkey"="nvHotkey.dll" [2007-06-06 c:\windows\system32\nvhotkey.dll]
c:\documents and settings\Nick\Start Menu\Programs\Startup\
Secunia PSI.lnk - c:\program files\Secunia\PSI\psi.exe [2008-12-17 748840]
SpywareGuard.lnk - c:\program files\SpywareGuard\sgmain.exe [2003-08-29 360448]
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2007-12-01 50688]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-12-22 11:05 356352 c:\program files\SUPERAntiSpyware\SASWINLO.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-01-31 12:16 10520 c:\windows\system32\avgrsstx.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.ac3filter"= ac3filter.acm
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\a.exe]
"Debugger"=c:\windows\system32\alg.exe
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\matrix31290.exe]
"Debugger"=c:\windows\system32\alg.exe
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\~tmpa.exe]
"Debugger"=c:\windows\system32\alg.exe
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\~tmpb.exe]
"Debugger"=c:\windows\system32\alg.exe
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\~tmpc.exe]
"Debugger"=c:\windows\system32\alg.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxioDragToDisc]
–a—— 2006-08-17 10:00 1116920 c:\program files\Roxio\Drag-to-Disc\DrgToDsc.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxWatchTray]
–a—— 2006-11-05 12:22 221184 c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Dell\\MediaDirect\\PCMService.exe"=
"c:\\Program Files\\Yahoo!\\Yahoo! Music Jukebox\\YahooMusicEngine.exe"=
"c:\\Program Files\\AIM6\\aim6.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
"c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\mtg\\Magic\\Manalink.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\Malwarebytes' Anti-Malware\\mbam.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Maple 12\\jre\\bin\\maple.exe"=
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2008-11-02 325128]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [2009-01-15 8944]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2009-01-15 55024]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2009-01-31 298264]
R2 LicCtrlService;LicCtrl Service;c:\windows\Runservice.exe [2007-12-09 2560]
R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\Viewpoint\Common\ViewpointService.exe [2007-12-08 24652]
R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2009-01-15 7408]
S2 MSMQSVC;Message Queuing Service;c:\windows\system32\mqsv32.exe –> c:\windows\system32\mqsv32.exe [?]
S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2007-11-06 34064]
S3 PSI;PSI;c:\windows\system32\drivers\psi_mf.sys [2008-12-10 7808]
S3 xbreader;MaxDrive XBox Driver (xbreader.sys);c:\windows\system32\drivers\xbreader.sys [2001-01-02 19677]
.
Contents of the 'Scheduled Tasks' folder
2009-02-12 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 14:57]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://yahoo.com/
mStart Page = hxxp://www.google.com
uInternet Connection Wizard,ShellNext = iexplore
IE: Crawler Search
IE: E&xport to Microsoft Excel - c:\progra~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
IE: {{d9288080-1baa-4bc4-9cf8-a92d743db949} - c:\documents and settings\Nick\Start Menu\Programs\IMVU\Run IMVU.lnk
DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://aolsvc.aol.com/onlinegames/free-trial-yahtzee/zylomplayer.cab
FF - ProfilePath - c:\documents and settings\Nick\Application Data\Mozilla\Firefox\Profiles\5ei8gwd3.default\
FF - prefs.js: browser.startup.homepage - google.com
FF - plugin: c:\program files\Viewpoint\Viewpoint Media Player\npViewpoint.dll
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-20 18:00:24
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes …
scanning hidden autostart entries …
scanning hidden files …
scan completed successfully
hidden files: 0
**************************************************************************
.
——————— LOCKED REGISTRY KEYS ———————
[HKEY_USERS\S-1-5-21-267048546-3394276723-1217438979-1006\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{487E2DE6-47C1-82BA-77C5-BBCA30098FFF}*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"abiloomoglgjpidfgnnkhadhplebcckbfe"=hex:61,61,00,00
"bbiloomoglgjpidfgnmkkafcdennaabjgdal"=hex:61,61,00,00
[HKEY_USERS\S-1-5-21-267048546-3394276723-1217438979-1006\Software\SecuROM\License information*]
"datasecu"=hex:8c,f8,da,f0,d7,f1,ea,e5,2b,9c,4e,6b,89,01,7d,1b,6d,01,b3,64,9d,
2e,81,17,6b,c0,b5,fe,f4,97,db,ca,7a,8b,7f,c2,22,c1,ef,85,83,1b,0a,69,93,14,\
"rkeysecu"=hex:cb,bd,f2,61,5a,4e,c6,95,f2,29,8b,82,ba,6b,3d,44
[HKEY_LOCAL_MACHINE\software\LicCtrl\LicCtrl\LicCtrl\LicCtrl*lkzs$i&#&y@^t! #^$ g9^$&pgb SDB36o \169D180DB7FE8847]
"1"=hex:1a,c6,90,39,73,14,70,4f,c7,99,3b,d6,b3,40,09,16,86,2b,9b,9b,f3,96,a9,
e9
"2"=hex:05,83,26,a9,dc,b6,17,45,de,2e,f0,41,a5,95,91,56,fe,07,ca,23,63,6c,c8,
df,a0,cb,29,a7,07,62,23,54
"3"=hex:1a,c6,90,39,73,14,70,4f,c7,99,3b,d6,b3,40,09,16,39,39,6a,6e,1d,99,29,
0e,9a,9e,61,33,16,37,68,38,ee,25,f6,f1,91,9f,21,a9,58,ec,19,f6,96,30,78,09
[HKEY_LOCAL_MACHINE\software\LicCtrl\LicCtrl\LicCtrl\LicCtrl*lkzs$i&#&y@^t! #^$ g9^$&pgb SDB36o \169D180DB7FE8847\13D3AF07D4AFC792B9BD996AC108D6B5]
"1"=hex:6a,02,e3,17,35,aa,4f,41,58,69,23,a3,81,f4,a8,0e,0a,4e,8a,24,18,b0,7f,
17,12,df,d0,2e,5e,18,49,90,15,18,bd,aa,84,24,4a,2c
"2"=hex:ed,a7,cb,4f,94,68,06,bf
"3"=hex:cf,54,22,5c,b2,32,a3,f4,13,e2,99,75,72,f5,de,7b,7f,a5,9e,59,7e,5c,50,
44,b2,68,4e,b6,6c,25,93,09,5a,dc,75,c8,13,9f,30,27,3a,76,73,04,ed,44,fc,f6,\
"4"=hex:2f,ad,a2,e7,8a,bf,05,5e
"5"=hex:bf,e5,23,7b,b0,66,d6,fc,b8,e8,6b,a0,96,52,f7,32,80,09,8f,24,b7,b3,55,
1a,98,d1,47,16,02,43,61,1c,b9,d5,8f,2a,7b,81,b1,fb,95,22,f8,b3,2c,53,9d,ae,\
"6"=hex:6a,02,e3,17,35,aa,4f,41,58,69,23,a3,81,f4,a8,0e,0a,4e,8a,24,18,b0,7f,
17,12,df,d0,2e,5e,18,49,90,2f,a8,42,c9,bd,28,bd,03,a4,ed,67,8d,07,a7,03,f5,\
"7"=hex:1a,c6,90,39,73,14,70,4f,c7,99,3b,d6,b3,40,09,16,5c,6c,8a,b0,95,8d,88,
02,5c,f2,b7,9f,8e,b8,9a,b3,47,aa,06,9a,55,51,85,6f,7c,bd,b8,83,41,dc,29,77,\
"8"=hex:9d,9e,b2,b9,a7,a5,f4,ae,4d,29,c2,a3,c0,78,c4,c5,91,e8,a9,4b,f4,c5,51,
df,c7,9b,39,cf,09,f9,b0,9b,ad,64,39,7b,c1,66,34,b7,bd,5f,73,03,3f,65,09,a8,\
"9"=hex:81,20,8f,ab,28,6a,52,9c
"18"=hex:4b,72,8f,bc,6c,3f,e4,15
"10"=hex:81,20,8f,ab,28,6a,52,9c
"11"=hex:81,20,8f,ab,28,6a,52,9c
"12"=hex:65,4e,c5,8b,92,5b,93,b4,84,b4,53,c9,0f,64,69,91,d5,cf,39,d2,75,99,08,
27,e6,19,a2,b5,8e,b8,6c,07,ee,9f,43,2e,79,b7,48,19,56,03,46,c5,47,47,5e,70,\
"13"=hex:f8,b3,e2,65,7c,0d,e7,15,ac,0e,57,02,77,42,98,d3,b2,2e,ba,2f,10,0d,5f,
a0
"14"=hex:0d,7e,11,86,a7,43,bb,80,cb,84,d6,9b,52,2b,0b,b6
"24"=hex:81,20,8f,ab,28,6a,52,9c
"26"=hex:81,20,8f,ab,28,6a,52,9c
"27"=hex:81,20,8f,ab,28,6a,52,9c
"19"=hex:fc,1b,0f,70,de,f5,b6,81,51,f6,6c,be,8c,f4,09,4f
"22"=hex:81,20,8f,ab,28,6a,52,9c
"15"=hex:ea,3d,b9,9a,7b,92,6d,f6,6d,47,d0,e6,0f,f6,f3,8d,61,dc,12,97,34,e6,62,
83,72,96,f8,4a,e7,dc,ff,05,8e,96,13,15,e6,04,c8,3e,b1,5b,d5,2e,13,82,02,68,\
[HKEY_LOCAL_MACHINE\software\LicCtrl\LicCtrl\LicCtrl\LicCtrl*lkzs$i&#&y@^t! #^$ g9^$&pgb SDB36o \169D180DB7FE8847\CC7B909C85BC507A2CDBC39B09A1A69B]
"1"=hex:6a,02,e3,17,35,aa,4f,41,58,69,23,a3,81,f4,a8,0e,57,fe,fa,3f,01,c1,2c,
1c,5e,e5,91,0b,2f,7e,4c,e7,3c,a9,5c,7c,76,d5,a4,ad
"2"=hex:4c,00,a2,b4,d4,72,2e,96
"3"=hex:8f,79,e9,fb,03,cd,2a,03,2d,0f,cb,cd,74,1e,fc,f9,c7,60,c5,d9,0d,89,2d,
e1,ac,91,a2,29,00,7d,b8,b0,5b,db,a3,bb,64,f6,e7,69,15,09,37,66,19,58,5e,67,\
"4"=hex:2f,ad,a2,e7,8a,bf,05,5e
"5"=hex:bf,e5,23,7b,b0,66,d6,fc,b8,e8,6b,a0,96,52,f7,32,80,09,8f,24,b7,b3,55,
1a,98,d1,47,16,02,43,61,1c,b9,d5,8f,2a,7b,81,b1,fb,95,22,f8,b3,2c,53,9d,ae,\
"6"=hex:6a,02,e3,17,35,aa,4f,41,58,69,23,a3,81,f4,a8,0e,57,fe,fa,3f,01,c1,2c,
1c,5e,e5,91,0b,2f,7e,4c,e7,32,04,0f,a6,73,b5,06,c7,40,57,27,33,7c,b4,61,2d,\
"7"=hex:1a,c6,90,39,73,14,70,4f,c7,99,3b,d6,b3,40,09,16,5c,6c,8a,b0,95,8d,88,
02,5c,f2,b7,9f,8e,b8,9a,b3,47,aa,06,9a,55,51,85,6f,7c,bd,b8,83,41,dc,29,77,\
"8"=hex:63,5a,d7,1b,b1,d4,18,46,9d,8a,b3,da,f7,a8,9d,ab,87,a3,2a,ca,13,f6,e4,
c5,41,b1,c1,29,7c,b2,b7,13,8f,1c,0d,5f,4b,3c,0f,fb
"9"=hex:81,20,8f,ab,28,6a,52,9c
"18"=hex:4b,72,8f,bc,6c,3f,e4,15
"10"=hex:81,20,8f,ab,28,6a,52,9c
"11"=hex:81,20,8f,ab,28,6a,52,9c
"12"=hex:28,d5,32,14,d2,aa,ea,92,15,12,99,8b,12,63,43,80,74,95,f1,5d,0b,3d,c7,
a4,18,ad,c2,8f,ac,bb,a4,80,d2,74,e3,27,c9,ce,dd,39,92,fa,e1,a3,17,5c,47,2e,\
"13"=hex:0b,d1,9c,3a,64,a8,b5,e9,8c,33,4e,cd,6a,da,75,60,fc,13,0a,57,f6,08,bb,
c3
"14"=hex:0d,f5,4e,44,fe,9e,11,67,d4,ec,25,e7,d8,da,e7,24
"24"=hex:81,20,8f,ab,28,6a,52,9c
"26"=hex:81,20,8f,ab,28,6a,52,9c
"27"=hex:81,20,8f,ab,28,6a,52,9c
"19"=hex:f7,77,5c,72,03,28,57,bd,09,30,5c,5d,2b,ad,12,bd
"22"=hex:81,20,8f,ab,28,6a,52,9c
"15"=hex:ec,c6,8f,95,1e,e3,3a,a1,ca,92,d1,4c,08,18,ed,8e,3d,fe,1c,4e,f7,7d,db,
77,ee,48,d8,f6,7f,4c,f8,3e,88,68,c2,6c,63,e6,3e,8a,a3,6d,7d,b9,5b,6f,f1,9a,\
[HKEY_LOCAL_MACHINE\software\LicCtrl\LicCtrl\LicCtrl\LicCtrl*lkzs$i&#&y@^t! #^$ g9^$&pgb SDB36o \F3F0046F119EFA4F]
"1"=hex:97,5e,49,d3,7c,a0,18,18,10,c9,e3,e3,c1,ae,57,ed,c2,97,86,6a,a5,82,f8,
d5,44,f7,88,8f,b5,4c,1b,f9,3e,da,c2,d2,eb,69,77,32,91,02,8c,84,09,5e,d2,d3
"2"=hex:f1,df,16,de,80,08,0e,2a,d1,38,b5,6f,94,ca,dc,d2,b3,e8,d2,40,6c,6f,61,
5e,d2,5e,7f,21,14,b5,b2,29
"3"=hex:97,5e,49,d3,7c,a0,18,18,10,c9,e3,e3,c1,ae,57,ed,c2,97,86,6a,a5,82,f8,
d5,f2,55,76,c8,bc,53,92,25,3f,d1,b6,bc,00,35,73,43,96,90,79,f6,5b,97,35,47,\
[HKEY_LOCAL_MACHINE\software\LicCtrl\LicCtrl\LicCtrl\LicCtrl*lkzs$i&#&y@^t! #^$ g9^$&pgb SDB36o \F3F0046F119EFA4F\3323E31CCF524E1933A08EFC0405BBBB]
"1"=hex:97,5e,49,d3,7c,a0,18,18,10,c9,e3,e3,c1,ae,57,ed,60,42,a5,db,24,eb,e2,
b0,ce,d6,da,a0,ab,80,e1,24
"2"=hex:cf,77,c8,3e,ea,da,16,30
"3"=hex:a8,94,fb,1d,a8,04,93,f6,27,ba,9f,0c,1e,f4,d0,fa,15,d2,13,e7,60,58,bf,
34,53,b1,e8,5a,1a,a8,42,b7,2d,fd,1c,80,83,b7,98,df,e2,e7,5e,a6,54,59,11,31,\
"4"=hex:2f,ad,a2,e7,8a,bf,05,5e
"5"=hex:bf,e5,23,7b,b0,66,d6,fc,b8,e8,6b,a0,96,52,f7,32,80,09,8f,24,b7,b3,55,
1a,98,d1,47,16,02,43,61,1c,b9,d5,8f,2a,7b,81,b1,fb,95,22,f8,b3,2c,53,9d,ae,\
"6"=hex:97,5e,49,d3,7c,a0,18,18,10,c9,e3,e3,c1,ae,57,ed,60,42,a5,db,24,eb,e2,
b0,9f,82,d5,6a,b3,ab,12,e7,1d,59,ee,f8,65,a3,77,fa,21,98,53,17,b3,88,55,98,\
"7"=hex:97,5e,49,d3,7c,a0,18,18,10,c9,e3,e3,c1,ae,57,ed,60,42,a5,db,24,eb,e2,
b0,e5,98,6b,ad,2b,ca,86,50
"8"=hex:9d,9e,b2,b9,a7,a5,f4,ae,4d,29,c2,a3,c0,78,c4,c5,6b,8d,dd,0b,84,72,f6,
f2,3d,a6,3c,a0,07,7d,db,f3,88,a8,6c,3f,5c,60,94,94,89,77,0c,65,96,1c,ff,8e,\
"9"=hex:81,20,8f,ab,28,6a,52,9c
"18"=hex:4b,72,8f,bc,6c,3f,e4,15
"10"=hex:1c,bd,ea,59,8e,8d,e1,5f
"11"=hex:7d,ba,74,77,fe,09,92,36
"12"=hex:a0,df,59,f4,e0,d8,0a,fb,cc,26,53,e2,71,64,8d,71,ba,4e,45,28,8c,cb,ad,
f4,ad,a6,4b,f6,0b,36,45,63,80,07,b3,29,1a,d2,24,19,0d,d9,f2,62,b0,4d,44,2b,\
"13"=hex:dc,57,f7,3b,8a,43,9d,48,6e,d4,56,e7,f9,b4,6f,02,ef,9f,db,da,f9,28,c9,
17
"14"=hex:4e,63,05,ff,92,a2,5b,c8
"24"=hex:81,20,8f,ab,28,6a,52,9c
"26"=hex:81,20,8f,ab,28,6a,52,9c
"27"=hex:81,20,8f,ab,28,6a,52,9c
"19"=hex:55,3b,68,6f,03,fb,52,52,1d,27,1b,a1,9b,47,55,0a
"22"=hex:81,20,8f,ab,28,6a,52,9c
"15"=hex:e8,cc,f6,66,72,7c,fe,c6,e4,b5,3c,4a,a8,61,22,91,aa,4c,e9,68,ac,5f,e5,
82,00,ba,60,5d,62,f0,d8,db,11,10,68,38,36,5d,7f,2d,b3,37,f5,6d,42,af,fb,27,\
.
——————— DLLs Loaded Under Running Processes ———————
- - - - - - - > 'winlogon.exe'(924)
c:\program files\SUPERAntiSpyware\SASWINLO.dll
c:\windows\System32\BCMLogon.dll
.
Completion time: 2009-02-20 18:02:30
ComboFix-quarantined-files.txt 2009-02-20 23:02:08
Pre-Run: 64,352,399,360 bytes free
Post-Run: 64,340,615,168 bytes free
Current=4 Default=4 Failed=1 LastKnownGood=2 Sets=1,2,3,4
314 — E O F — 2009-02-12 17:11:48
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
3. Open notepad and copy/paste the text in the quotebox below into it:
Folder::
c:\documents and settings\Nick\Application Data\uTorrent
c:\documents and settings\Nick\Application Data\BitTorrent
c:\program files\uTorrent
RegNull::
[HKEY_LOCAL_MACHINE\software\LicCtrl\LicCtrl\LicCtrl\LicCtrl*lkzs$i&#&y@^t! #^$ g9^$&pgb SDB36o \F3F0046F119EFA4F\3323E31CCF524E1933A08EFC0405BBBB]
Driver::
Viewpoint Manager Service
Save this as CFScript.txt, in the same location as ComboFix.exe
[external image: Posted Image]
Refering to the picture above, drag CFScript into ComboFix.exe
When finished, it shall produce a log for you at C:\ComboFix.txt which I will require in your next reply.
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1022.419 [GMT -5:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\Nick\Desktop\CFScript.txt
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated)
* Created a new restore point
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\Nick\Application Data\BitTorrent
c:\documents and settings\Nick\Application Data\BitTorrent\[ALL MOVIES] aXXo's New Website WWW.MOVIEOID.COM.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\Alien.Autopsy[2006]DvDrip.AC3[Eng]-aXXo.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\Apocalypto[2006]DvDrip[Eng.Hard.Sub]-aXXo.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\aqua.teen.hunger.force.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\Babel[2006]DvDrip[Eng]-aXXo.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\Beerfest[2006]DvDrip[Eng]-aXXo.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\bittorrent.lng
c:\documents and settings\Nick\Application Data\BitTorrent\bittorrent.log
c:\documents and settings\Nick\Application Data\BitTorrent\Blades.Of.Glory[2007]DvDrip.AC3[Eng]-aXXo.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\Borat[2006]DvDrip.AC3[Eng]-aXXo.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\CSA_Main.rar.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\data\metainfo\b18e7748222ce103f04d9b0e3c9db29711c23c1d
c:\documents and settings\Nick\Application Data\BitTorrent\data\metainfo\efa5446e585b9b7fa5e91550144e1f0394d2eee5
c:\documents and settings\Nick\Application Data\BitTorrent\data\resume\b18e7748222ce103f04d9b0e3c9db29711c23c1d
c:\documents and settings\Nick\Application Data\BitTorrent\data\resume\efa5446e585b9b7fa5e91550144e1f0394d2eee5
c:\documents and settings\Nick\Application Data\BitTorrent\data\routing_table
c:\documents and settings\Nick\Application Data\BitTorrent\data\torrents\b18e7748222ce103f04d9b0e3c9db29711c23c1d
c:\documents and settings\Nick\Application Data\BitTorrent\data\torrents\efa5446e585b9b7fa5e91550144e1f0394d2eee5
c:\documents and settings\Nick\Application Data\BitTorrent\data\ui_config
c:\documents and settings\Nick\Application Data\BitTorrent\data\ui_state
c:\documents and settings\Nick\Application Data\BitTorrent\dht.dat
c:\documents and settings\Nick\Application Data\BitTorrent\dht.dat.old
c:\documents and settings\Nick\Application Data\BitTorrent\Duffy - Mercy.zip.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\Fire in the Sky.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\Game Theory and Economic Analysis A Quiet Revolution in Economics.pdf.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\I.Am.Legend[2007]DvDrip[Eng]-aXXo.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\Jacob's Ladder [1990][Eng][XviD][AC3].avi.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\Lady.In.The.Water[2006]DvDrip[Eng]-aXXo.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\Linkin Park Discography.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\magicg.zip.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\Memento[2000]DVDrip[Eng]-SCOREHUNT.com.avi.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\Microsoft Office 2003.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\Munich[2005]DvDrip[Eng]-aXXo.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\No.Country.For.Old.Men.2007.DvDRip.Eng-FxM.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\Out.Of.The.Park.Baseball.2006-ABSENTiA.[sharethefiles.com].rar.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\Pan's.Labyrinth[2006]DvDrip[Eng.Sub]-aXXo.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\Physics For Dummies.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\Pineapple.Express[2008]DvDrip-aXXo.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\Reno.911!-Miami[2007][Unrated.Edition]DvDrip.AC3[Eng]-aXXo.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\resume.dat
c:\documents and settings\Nick\Application Data\BitTorrent\resume.dat.old
c:\documents and settings\Nick\Application Data\BitTorrent\Risk 2.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\ROH.2008.11.21.Escalation.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\rss.dat
c:\documents and settings\Nick\Application Data\BitTorrent\rss.dat.old
c:\documents and settings\Nick\Application Data\BitTorrent\Sarah Mclachlan - Storytellers (DVDA 2004) - Pop [www.torrentazos.com].torrent
c:\documents and settings\Nick\Application Data\BitTorrent\settings.dat
c:\documents and settings\Nick\Application Data\BitTorrent\settings.dat.old
c:\documents and settings\Nick\Application Data\BitTorrent\Simpsons.Season.18.Complete.PDTV-XViD.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\Tenacious.D-The.Pick.Of.Destiny[2006]DvDrip[Eng]-aXXo.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\The God Delusion (Dawkins) [NF].torrent
c:\documents and settings\Nick\Application Data\BitTorrent\The Wes Anderson Collection -JBW.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\The.Prestige[2006]DvDrip[Eng]-aXXo.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\Top 500 Rock And Roll Songs.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\True Romance (1993).torrent
c:\documents and settings\Nick\Application Data\BitTorrent\V.For.Vendetta[2005]DvDrip[Eng]-aXXo.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\VPRO2007.torrent
c:\documents and settings\Nick\Application Data\BitTorrent\Winzip 11 pro.torrent
c:\documents and settings\Nick\Application Data\uTorrent
c:\documents and settings\Nick\Application Data\uTorrent\1408[2007]DvDrip[Eng]-aXXo.torrent
c:\documents and settings\Nick\Application Data\uTorrent\62 Gamehouse Games and Code.torrent
c:\documents and settings\Nick\Application Data\uTorrent\Defiance.DVDSCR.XviD-ORC.torrent
c:\documents and settings\Nick\Application Data\uTorrent\dht.dat
c:\documents and settings\Nick\Application Data\uTorrent\dht.dat.old
c:\documents and settings\Nick\Application Data\uTorrent\Funny Games U.S[2007]DvDrip[Eng]-FXG.torrent
c:\documents and settings\Nick\Application Data\uTorrent\Lakeview.Terrace[2008]DvDrip-aXXo.torrent
c:\documents and settings\Nick\Application Data\uTorrent\Lemonade_Tycoon_2_v1.1.23_New_York_Edition_CRACKED.torrent
c:\documents and settings\Nick\Application Data\uTorrent\Maple 12.torrent
c:\documents and settings\Nick\Application Data\uTorrent\Poolhall.Junkies.DVDRip-Norse.torrent
c:\documents and settings\Nick\Application Data\uTorrent\Reservation.Road[2007]DvDrip[Eng]-aXXo.torrent
c:\documents and settings\Nick\Application Data\uTorrent\resume.dat
c:\documents and settings\Nick\Application Data\uTorrent\resume.dat.old
c:\documents and settings\Nick\Application Data\uTorrent\Rod Stewart - the best of.torrent
c:\documents and settings\Nick\Application Data\uTorrent\ROH - 9.15.07 - Man Up.torrent
c:\documents and settings\Nick\Application Data\uTorrent\ROH.2008.03.29.Supercard.Of.Honor.III.torrent
c:\documents and settings\Nick\Application Data\uTorrent\ROH.2008.11.21.Escalation.torrent
c:\documents and settings\Nick\Application Data\uTorrent\Role Models Cam XviD - Lynks.torrent
c:\documents and settings\Nick\Application Data\uTorrent\rss.dat
c:\documents and settings\Nick\Application Data\uTorrent\rss.dat.old
c:\documents and settings\Nick\Application Data\uTorrent\settings.dat
c:\documents and settings\Nick\Application Data\uTorrent\settings.dat.old
c:\documents and settings\Nick\Application Data\uTorrent\Slumdog.Millionaire.DVDSCR.XviD-NoGrp.torrent
c:\documents and settings\Nick\Application Data\uTorrent\Static-X - discography (6 studio albums).torrent
c:\documents and settings\Nick\Application Data\uTorrent\Taken[2008]DvDrip-aXXo.torrent
c:\documents and settings\Nick\Application Data\uTorrent\The.Ruins[2008][Unrated.Edition]DvDrip-aXXo.torrent
c:\documents and settings\Nick\Application Data\uTorrent\The.Unreal.Story.Of.Pro.Wrestling.1998.DVDRip.XviD.avi.torrent
c:\documents and settings\Nick\Application Data\uTorrent\The.Wrestler.DVDSCR.XviD-ORC.torrent
c:\documents and settings\Nick\Application Data\uTorrent\Twilight.[2008.English].TS.HQ.DivX-LTT.torrent
c:\documents and settings\Nick\Application Data\uTorrent\WWE.24.7.Legends.Of.Wrestling.Most.Important.Moments.2008.12.00.TVRip.XviD.
torrent
c:\documents and settings\Nick\Application Data\uTorrent\Zack.And.Miri.Make.A.Porno.2008.R5.DVDRiP.XViD.torrent
c:\program files\uTorrent
c:\program files\uTorrent\uTorrent.exe
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
——-\Legacy_VIEWPOINT_MANAGER_SERVICE
——-\Service_Viewpoint Manager Service
((((((((((((((((((((((((( Files Created from 2009-01-20 to 2009-02-20 )))))))))))))))))))))))))))))))
.
2009-02-19 20:56 . 2009-02-19 20:56 d——– c:\program files\Trend Micro
2009-02-16 11:42 . 2009-02-16 11:42 d——– c:\program files\Secunia
2009-02-16 11:28 . 2009-02-17 20:25 d-a—— c:\documents and settings\All Users\Application Data\TEMP
2009-02-16 11:12 . 2009-02-16 11:12 d——– c:\program files\ERUNT
2009-02-15 19:45 . 2009-02-15 19:57 d——– C:\Worknow
2009-02-15 04:06 . 2009-02-11 10:19 38,496 –a—— c:\windows\system32\drivers\mbamswissarmy.sys
2009-02-15 04:06 . 2009-02-11 10:19 15,504 –a—— c:\windows\system32\drivers\mbam.sys
2009-02-15 02:51 . 2009-02-15 02:51 664 –a—— c:\windows\system32\d3d9caps.dat
2009-02-14 17:08 . 2009-02-14 17:26 d——– c:\documents and settings\All Users\Application Data\Electronic Arts
2009-02-14 17:03 . 2009-02-15 19:52 d——– c:\windows\system32\inf
2009-02-10 16:35 . 2009-02-10 16:35 0 –a—— c:\windows\nsreg.dat
2009-02-04 20:24 . 2009-02-04 20:24 d——– c:\documents and settings\Nick\Application Data\Maple
2009-02-04 20:16 . 2009-02-04 20:16 d——– C:\watcom-1.3
2009-02-04 20:16 . 2009-02-04 20:16 212,992 –a—— c:\windows\system32\WMIMPLEX.dll
2009-02-04 20:16 . 2009-02-04 20:16 40,960 –a—— c:\windows\system32\maplec.dll
2009-02-04 20:16 . 2009-02-04 20:16 20,480 –a—— c:\windows\system32\maplecompat.dll
2009-02-04 20:14 . 2009-02-04 20:14 d–h—– c:\program files\Zero G Registry
2009-02-04 20:14 . 2009-02-04 20:17 d——– c:\program files\Maple 12
2009-02-04 20:13 . 2009-02-04 20:13 d–h—– c:\documents and settings\Nick\InstallAnywhere
2009-01-31 12:16 . 2009-01-31 12:16 10,520 –a—— c:\windows\system32\avgrsstx.dll
2009-01-23 15:52 . 2008-10-16 14:06 268,648 –a—— c:\windows\system32\mucltui.dll
2009-01-23 15:52 . 2008-10-16 14:06 208,744 –a—— c:\windows\system32\muweb.dll
2009-01-23 15:52 . 2008-10-16 14:06 27,496 –a—— c:\windows\system32\mucltui.dll.mui
2009-01-23 02:19 . 2009-01-23 02:19 d——– c:\program files\Microsoft Silverlight
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-02-19 03:52 ——— d—–w c:\program files\Spybot - Search & Destroy
2009-02-18 01:27 ——— d—–w c:\program files\SpywareGuard
2009-02-18 01:27 ——— d—–w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-02-18 01:25 ——— d—–w c:\program files\SpywareBlaster
2009-02-16 17:16 ——— d—–w c:\program files\BitTorrent
2009-02-16 17:10 ——— d—–w c:\program files\Sports Mogul
2009-02-16 16:25 ——— d—–w c:\program files\SUPERAntiSpyware
2009-02-16 16:25 ——— d—–w c:\documents and settings\Nick\Application Data\SUPERAntiSpyware.com
2009-02-16 16:21 ——— d—–w c:\program files\Common Files\Wise Installation Wizard
2009-02-15 17:14 ——— d—–w c:\program files\Malwarebytes' Anti-Malware
2009-02-15 16:16 ——— d—–w c:\documents and settings\All Users\Application Data\avg8
2009-02-14 22:32 ——— d—–w c:\program files\Electronic Arts
2009-02-03 03:58 ——— d—–w c:\program files\Wolverine Studios
2009-01-31 17:16 325,128 —-a-w c:\windows\system32\drivers\avgldx86.sys
2009-01-24 08:13 ——— d–h–w c:\program files\InstallShield Installation Information
2009-01-24 08:01 ——— d—–w c:\program files\Microsoft Works
2009-01-15 23:03 ——— d—–w c:\program files\Java
2009-01-14 17:22 ——— d—–w c:\documents and settings\Nick\Application Data\SPORE
2009-01-14 17:20 ——— d–h–r c:\documents and settings\Nick\Application Data\SecuROM
2009-01-08 14:52 ——— d—–w c:\documents and settings\Nick\Application Data\SPORE Creature Creator
2008-12-25 09:48 ——— d—–w c:\program files\WinPcap
2008-12-23 19:43 ——— d—–w c:\program files\music
2008-11-07 22:09 536,811 —-a-w c:\program files\ie-spyad.exe
2008-10-23 16:17 18,829,383 —-a-w c:\program files\tibia831.exe
2008-08-14 01:59 232,904,074 —-a-w c:\program files\ootp9setup.exe
2008-07-07 13:34 24,234,968 —-a-w c:\program files\setupeng.exe
2008-07-04 19:01 15,336,856 —-a-w c:\program files\jre-6u10-beta-windows-i586-p.exe
2008-06-23 02:32 49,384,056 —-a-w c:\program files\avg_free_stf_all_8_100a1323.exe
2008-06-21 00:07 5,632 –sha-w c:\program files\Thumbs.db
2007-11-21 22:55 6,637,432 —-a-w c:\program files\dMC-R12.3-Ref-Registered.exe
2007-11-13 16:01 13,871,095 —-a-w c:\program files\schedulemaker.zip
2007-06-15 05:35 9,690,219 —-a-w c:\program files\mws094f.exe
2007-06-14 16:29 380,208,128 —-a-w c:\program files\mtgodl2.exe
2007-03-18 23:57 26,583,420 —-a-w c:\program files\Geneforge4Demo.exe
.
((((((((((((((((((((((((((((( SnapShot@2009-02-20_18.00.42.90 )))))))))))))))))))))))))))))))))))))))))
.
+ 2005-10-21 01:02:28 163,328 —-a-w c:\windows\ERDNT\subs\ERDNT.EXE
- 2009-02-19 03:53:16 3,609 –sha-w c:\windows\system32\mmf.sys
+ 2009-02-20 23:32:16 3,609 –sha-w c:\windows\system32\mmf.sys
+ 2009-02-20 23:32:15 16,384 —-atw c:\windows\Temp\Perflib_Perfdata_118.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2008-08-13 206064]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2009-01-15 1830128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-07-09 851968]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-06-06 8429568]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-06-06 81920]
"Broadcom Wireless Manager UI"="c:\windows\system32\WLTRAY.exe" [2007-05-09 1392640]
"KADxMain"="c:\windows\system32\KADxMain.exe" [2006-11-02 282624]
"PCMService"="c:\program files\Dell\MediaDirect\PCMService.exe" [2007-04-16 184320]
"dscactivate"="c:\program files\Dell Support Center\gs_agent\custom\dsca.exe" [2007-10-09 16384]
"DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2008-08-13 206064]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-01-31 1601304]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-11-10 136600]
"Dell QuickSet"="c:\program files\Dell\QuickSet\quickset.exe" [2007-07-03 1228800]
"NVHotkey"="nvHotkey.dll" [2007-06-06 c:\windows\system32\nvhotkey.dll]
c:\documents and settings\Nick\Start Menu\Programs\Startup\
Secunia PSI.lnk - c:\program files\Secunia\PSI\psi.exe [2008-12-17 748840]
SpywareGuard.lnk - c:\program files\SpywareGuard\sgmain.exe [2003-08-29 360448]
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2007-12-01 50688]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-12-22 11:05 356352 c:\program files\SUPERAntiSpyware\SASWINLO.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-01-31 12:16 10520 c:\windows\system32\avgrsstx.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.ac3filter"= ac3filter.acm
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\a.exe]
"Debugger"=c:\windows\system32\alg.exe
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\matrix31290.exe]
"Debugger"=c:\windows\system32\alg.exe
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\~tmpa.exe]
"Debugger"=c:\windows\system32\alg.exe
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\~tmpb.exe]
"Debugger"=c:\windows\system32\alg.exe
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\~tmpc.exe]
"Debugger"=c:\windows\system32\alg.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxioDragToDisc]
–a—— 2006-08-17 10:00 1116920 c:\program files\Roxio\Drag-to-Disc\DrgToDsc.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxWatchTray]
–a—— 2006-11-05 12:22 221184 c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Dell\\MediaDirect\\PCMService.exe"=
"c:\\Program Files\\Yahoo!\\Yahoo! Music Jukebox\\YahooMusicEngine.exe"=
"c:\\Program Files\\AIM6\\aim6.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
"c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\mtg\\Magic\\Manalink.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\Malwarebytes' Anti-Malware\\mbam.exe"=
"c:\\Program Files\\Maple 12\\jre\\bin\\maple.exe"=
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2008-11-02 325128]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [2009-01-15 8944]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2009-01-15 55024]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2009-01-31 298264]
R2 LicCtrlService;LicCtrl Service;c:\windows\Runservice.exe [2007-12-09 2560]
R3 PSI;PSI;c:\windows\system32\drivers\psi_mf.sys [2008-12-10 7808]
R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2009-01-15 7408]
S2 MSMQSVC;Message Queuing Service;c:\windows\system32\mqsv32.exe –> c:\windows\system32\mqsv32.exe [?]
S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2007-11-06 34064]
S3 xbreader;MaxDrive XBox Driver (xbreader.sys);c:\windows\system32\drivers\xbreader.sys [2001-01-02 19677]
.
Contents of the 'Scheduled Tasks' folder
2009-02-12 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 14:57]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://yahoo.com/
mStart Page = hxxp://www.google.com
uInternet Connection Wizard,ShellNext = iexplore
IE: Crawler Search
IE: E&xport to Microsoft Excel - c:\progra~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
IE: {{d9288080-1baa-4bc4-9cf8-a92d743db949} - c:\documents and settings\Nick\Start Menu\Programs\IMVU\Run IMVU.lnk
DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://aolsvc.aol.com/onlinegames/free-trial-yahtzee/zylomplayer.cab
FF - ProfilePath - c:\documents and settings\Nick\Application Data\Mozilla\Firefox\Profiles\5ei8gwd3.default\
FF - prefs.js: browser.startup.homepage - google.com
FF - plugin: c:\program files\Viewpoint\Viewpoint Media Player\npViewpoint.dll
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-20 18:32:41
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes …
scanning hidden autostart entries …
scanning hidden files …
scan completed successfully
hidden files: 0
**************************************************************************
.
——————— LOCKED REGISTRY KEYS ———————
[HKEY_USERS\S-1-5-21-267048546-3394276723-1217438979-1006\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{487E2DE6-47C1-82BA-77C5-BBCA30098FFF}*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"abiloomoglgjpidfgnnkhadhplebcckbfe"=hex:61,61,00,00
"bbiloomoglgjpidfgnmkkafcdennaabjgdal"=hex:61,61,00,00
[HKEY_USERS\S-1-5-21-267048546-3394276723-1217438979-1006\Software\SecuROM\License information*]
"datasecu"=hex:8c,f8,da,f0,d7,f1,ea,e5,2b,9c,4e,6b,89,01,7d,1b,6d,01,b3,64,9d,
2e,81,17,6b,c0,b5,fe,f4,97,db,ca,7a,8b,7f,c2,22,c1,ef,85,83,1b,0a,69,93,14,\
"rkeysecu"=hex:cb,bd,f2,61,5a,4e,c6,95,f2,29,8b,82,ba,6b,3d,44
.
——————— DLLs Loaded Under Running Processes ———————
- - - - - - - > 'winlogon.exe'(928)
c:\program files\SUPERAntiSpyware\SASWINLO.dll
c:\windows\System32\BCMLogon.dll
.
———————— Other Running Processes ————————
.
c:\windows\system32\WLTRYSVC.EXE
c:\windows\system32\BCMWLTRY.EXE
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\windows\system32\nvsvc32.exe
c:\program files\AVG\AVG8\avgrsx.exe
c:\program files\Dell Support Center\bin\sprtsvc.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\rundll32.exe
c:\windows\system32\rundll32.exe
c:\program files\SpywareGuard\sgbhp.exe
.
**************************************************************************
.
Completion time: 2009-02-20 18:36:39 - machine was rebooted
ComboFix-quarantined-files.txt 2009-02-20 23:36:36
ComboFix2.txt 2009-02-20 23:02:31
Pre-Run: 64,323,117,056 bytes free
Post-Run: 64,251,609,088 bytes free
Current=4 Default=4 Failed=1 LastKnownGood=2 Sets=1,2,3,4
321 — E O F — 2009-02-12 17:11:48
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
3. Open notepad and copy/paste the text in the quotebox below into it:
Folder::
c:\program files\BitTorrent
RegNull::
[HKEY_USERS\S-1-5-21-267048546-3394276723-1217438979-1006\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{487E2DE6-47C1-82BA-77C5-BBCA30098FFF}*]
Save this as CFScript.txt, in the same location as ComboFix.exe
[external image: Posted Image]
Refering to the picture above, drag CFScript into ComboFix.exe
When finished, it shall produce a log for you at C:\ComboFix.txt which I will require in your next reply.
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1022.488 [GMT -5:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\Nick\Desktop\CFScript.txt
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated)
* Created a new restore point
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\program files\BitTorrent
c:\program files\BitTorrent\5535-bittorrent.041d.dmp
c:\program files\BitTorrent\5535-bittorrent.bf68.dmp
c:\program files\BitTorrent\addrmap.dat
c:\program files\BitTorrent\Apocalypto[2006]DvDrip[Eng.Hard.Sub]-aXXo\~BitTorrentPartFile_383FE999.dat
c:\program files\BitTorrent\Apocalypto[2006]DvDrip[Eng.Hard.Sub]-aXXo\Apocalypto[2006]DvDrip[Eng.Hard.Sub]-aXXo.avi
c:\program files\BitTorrent\Apocalypto[2006]DvDrip[Eng.Hard.Sub]-aXXo\IMPORTANT.Read carefully before enjoy this movie.txt
c:\program files\BitTorrent\Babel[2006]DvDrip[Eng]-aXXo\~BitTorrentPartFile_38553B45.dat
c:\program files\BitTorrent\Babel[2006]DvDrip[Eng]-aXXo\Babel[2006]DvDrip[Eng]-aXXo.avi
c:\program files\BitTorrent\Babel[2006]DvDrip[Eng]-aXXo\Babel[2006]DvDrip[Eng]-aXXo.srt
c:\program files\BitTorrent\Babel[2006]DvDrip[Eng]-aXXo\IMPORTANT.Read carefully before enjoy this movie.txt
c:\program files\BitTorrent\Beerfest[2006]DvDrip[Eng]-aXXo\~BitTorrentPartFile_2BD4AF2C.dat
c:\program files\BitTorrent\Beerfest[2006]DvDrip[Eng]-aXXo\Beerfest[2006]DvDrip[Eng]-aXXo.avi
c:\program files\BitTorrent\Blades.Of.Glory[2007]DvDrip.AC3[Eng]-aXXo\~BitTorrentPartFile_2BBC3AC3.dat
c:\program files\BitTorrent\Blades.Of.Glory[2007]DvDrip.AC3[Eng]-aXXo\Blades.Of.Glory[2007]DvDrip.AC3[Eng]-aXXo.avi
c:\program files\BitTorrent\Blades.Of.Glory[2007]DvDrip.AC3[Eng]-aXXo\Read.Carefully.txt
c:\program files\BitTorrent\Borat[2006]DvDrip.AC3[Eng]-aXXo\~BitTorrentPartFile_2BBB229F.dat
c:\program files\BitTorrent\Borat[2006]DvDrip.AC3[Eng]-aXXo\Borat[2006]DvDrip.AC3[Eng]-aXXo.avi
c:\program files\BitTorrent\Borat[2006]DvDrip.AC3[Eng]-aXXo\IMPORTANT.Read carefully before enjoy this movie.txt
c:\program files\BitTorrent\CSA_Main.rar
c:\program files\BitTorrent\Defiance.DVDSCR.XviD-ORC\~uTorrentPartFile_5851AB82.dat
c:\program files\BitTorrent\Defiance.DVDSCR.XviD-ORC\CD1\orc-def1.avi
c:\program files\BitTorrent\Defiance.DVDSCR.XviD-ORC\CD2\orc-def2.avi
c:\program files\BitTorrent\I.Am.Legend[2007]DvDrip[Eng]-aXXo\~BitTorrentPartFile_2BDB507A.dat
c:\program files\BitTorrent\I.Am.Legend[2007]DvDrip[Eng]-aXXo\I.Am.Legend[2007]DvDrip[Eng]-aXXo.avi
c:\program files\BitTorrent\Lady.In.The.Water[2006]DvDrip[Eng]-aXXo\~BitTorrentPartFile_321C27D4.dat
c:\program files\BitTorrent\Lady.In.The.Water[2006]DvDrip[Eng]-aXXo\Lady.In.The.Water[2006]DvDrip[Eng]-aXXo.avi
c:\program files\BitTorrent\Linkin Park Discography\~BitTorrentPartFile_1CE1B2F9.dat
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Hybrid Theory\Linkin Park - Hybrid Theory - 01 - Papercut.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Hybrid Theory\Linkin Park - Hybrid Theory - 02 - One Step Closer.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Hybrid Theory\Linkin Park - Hybrid Theory - 03 - With You.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Hybrid Theory\Linkin Park - Hybrid Theory - 04 - Points Of Authority.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Hybrid Theory\Linkin Park - Hybrid Theory - 05 - Crawling.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Hybrid Theory\Linkin Park - Hybrid Theory - 06 - Runaway.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Hybrid Theory\Linkin Park - Hybrid Theory - 07 - By Myself.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Hybrid Theory\Linkin Park - Hybrid Theory - 08 - In The End.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Hybrid Theory\Linkin Park - Hybrid Theory - 09 - A Place For My Head.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Hybrid Theory\Linkin Park - Hybrid Theory - 10 - Forgotten.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Hybrid Theory\Linkin Park - Hybrid Theory - 11 - Cure For The Itch.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Hybrid Theory\Linkin Park - Hybrid Theory - 12 - Pushing Me Away.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Hybrid Theory\Linkin Park - Hybrid Theory [Bonus CD] - 01 - Papercut (Live).mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Hybrid Theory\Linkin Park - Hybrid Theory [Bonus CD] - 02 - Points of Authority (Live).mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Hybrid Theory\Linkin Park - Hybrid Theory [Bonus CD] - 03 - A Place for My Head (Live).mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Hybrid Theory\Linkin Park - Hybrid Theory [Bonus CD] - 04 - My December.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Hybrid Theory\Linkin Park - Hybrid Theory [Bonus CD] - 05 - High Voltage.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Live In Texas\Linkin Park - Live in Texas - 01 - Somewhere I belong.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Live In Texas\Linkin Park - Live in Texas - 02 - Lying from you.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Live In Texas\Linkin Park - Live in Texas - 03 - Papercut.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Live In Texas\Linkin Park - Live in Texas - 04 - Points of Authority.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Live In Texas\Linkin Park - Live in Texas - 05 - Runaway.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Live In Texas\Linkin Park - Live in Texas - 06 - Faint.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Live In Texas\Linkin Park - Live in Texas - 07 - From the Inside.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Live In Texas\Linkin Park - Live in Texas - 08 - P5hng me Axwy.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Live In Texas\Linkin Park - Live in Texas - 09 - Numb.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Live In Texas\Linkin Park - Live in Texas - 10 - Crawling.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Live In Texas\Linkin Park - Live in Texas - 11 - In the end.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Live In Texas\Linkin Park - Live in Texas - 12 - One step closer.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Meteora\Linkin Park - Meteora - 01 - Foreword.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Meteora\Linkin Park - Meteora - 02 - Don't Stay.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Meteora\Linkin Park - Meteora - 03 - Somewhere I Belong.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Meteora\Linkin Park - Meteora - 04 - Lying From You.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Meteora\Linkin Park - Meteora - 05 - Hit The Floor.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Meteora\Linkin Park - Meteora - 06 - Easier To Run.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Meteora\Linkin Park - Meteora - 07 - Faint.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Meteora\Linkin Park - Meteora - 08 - Figure.09.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Meteora\Linkin Park - Meteora - 09 - Breaking The Habit.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Meteora\Linkin Park - Meteora - 10 - From The Inside.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Meteora\Linkin Park - Meteora - 11 - Nobody's Listening.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Meteora\Linkin Park - Meteora - 12 - Session.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Meteora\Linkin Park - Meteora - 13 - Numb.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Others\Linkin Park - Buy Myself.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Others\Linkin Park - Carousel Demo.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Others\Linkin Park - Carousel.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Others\Linkin Park - Crawling Demo.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Others\Linkin Park - Demos - Linkin Park - Demos - ptsremix.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Others\Linkin Park - Enth E Nd Audio.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Others\Linkin Park - Esaúl.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Others\Linkin Park - Forgotten Demo.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Others\Linkin Park - Frgt-10 Audio.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Others\Linkin Park - Fuse.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Others\Linkin Park - Hybrid Theory EP - Part Of Me.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Others\Linkin Park - Hybrid Theory EP - Technique.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Others\Linkin Park - In The End Demo.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Others\Linkin Park - no title - 05 - Papercut (Demo).mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Others\Linkin Park - Points Of Authority 2.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Others\Linkin Park - Pts.Of.Athrty (Crystal Method Remix).MP3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Others\Linkin Park - Reading My Eyes.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Others\Linkin Park - Rhinestone.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Others\Linkin Park - Step Up.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Others\Linkin Park - Stick N' Move.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Others\Linkin Park - Super Xero.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Reanimation\Linkin Park - Reanimation - 01 - Opening.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Reanimation\Linkin Park - Reanimation - 02 - Pts.Of.Athrty.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Reanimation\Linkin Park - Reanimation - 03 - Enth E Nd.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Reanimation\Linkin Park - Reanimation - 04 - [Chali].mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Reanimation\Linkin Park - Reanimation - 05 - Frgt,10.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Reanimation\Linkin Park - Reanimation - 06 - P5hng Me Axwy.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Reanimation\Linkin Park - Reanimation - 07 - Plc.4 Mie Haed.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Reanimation\Linkin Park - Reanimation - 08 - X-ecutioner Style.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Reanimation\Linkin Park - Reanimation - 09 - H! Vltg3.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Reanimation\Linkin Park - Reanimation - 10 - [Riff Raff].mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Reanimation\Linkin Park - Reanimation - 11 - Wth]You.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Reanimation\Linkin Park - Reanimation - 12 - Ntr-Mssion.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Reanimation\Linkin Park - Reanimation - 13 - PPr-Kut.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Reanimation\Linkin Park - Reanimation - 14 - Rnw@y.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Reanimation\Linkin Park - Reanimation - 15 - My [Dsmbr.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Reanimation\Linkin Park - Reanimation - 16 - [Stef].mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Reanimation\Linkin Park - Reanimation - 17 - By_Myslf.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Reanimation\Linkin Park - Reanimation - 18 - Kyur4 Th Ich.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Reanimation\Linkin Park - Reanimation - 19 - 1Stp Klosr.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Reanimation\Linkin Park - Reanimation - 20 - Krwlng.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Underground V2.0\Linkin Park - Underground V2.0 - 01 - A.06.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Underground V2.0\Linkin Park - Underground V2.0 - 04 - Dedicated (Demo 1999).mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Underground V3.0\Linkin Park - Underground V3.0 - With You.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Underground V3.0\Linkin Park - Underground V3.0 - A Place For My Head.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Underground V3.0\Linkin Park - Underground V3.0 - By Myself.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Underground V3.0\Linkin Park - Underground V3.0 - Dont Stay.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Underground V3.0\Linkin Park - Underground V3.0 - Figure 09.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Underground V4.0\01 - Linkin Park - Sold My Soul To Yo Mama.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Underground V4.0\02 - Linkin Park - Breaking The Habit (Live).mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Underground V4.0\03 - Linkin Park - Standing In The Middle.mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Underground V4.0\04 - Linkin Park - Step Up - Nobody's Listening - Its Goin Down (Live).mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Underground V4.0\05 - Linkin Park - Wish (Live).mp3
c:\program files\BitTorrent\Linkin Park Discography\Linkin Park - Discography\Underground V4.0\06 - Linkin Park - One Step Closer (Featuring Jonathan Davis) (Live).mp3
c:\program files\BitTorrent\Maple 12\file path for license.txt
c:\program files\BitTorrent\Maple 12\license.dat
c:\program files\BitTorrent\Maple 12\Maple12WindowsInstaller.exe
c:\program files\BitTorrent\Memento[2000]DVDrip[Eng]-SCOREHUNT.com.avi
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\A2561405.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\A3561405.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\A4561405.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\AUTORUN.INF
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\AV561403.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\CC561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\CD561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\CF561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\CL561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\CM561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\CP561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\CR561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\CS561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\E2561410.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\E3561405.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\E4561410.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\EV561405.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\ACCRT\ACCESSRT.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\ACCRT\ACCESSRT.MSI
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\OWC10\SETUP.EXE
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\OWC10\SETUP.INI
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\OWC11\SETUP.EXE
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\OWC11\SETUP.INI
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\PFILES\COMMON\MSSHARED\DW\1033\DWINTL20.DLL
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\PFILES\COMMON\MSSHARED\DW\DW20.EXE
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\PFILES\COMMON\MSSHARED\DW\DWDCW20.DLL
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\PFILES\COMMON\MSSHARED\DW\DWTRIG20.EXE
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\PFILES\MSOFFICE\OFFICE11\1033\ACREADME.HTM
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\PFILES\MSOFFICE\OFFICE11\1033\FILTERS.TXT
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\PFILES\MSOFFICE\OFFICE11\1033\INREADME.HTM
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\PFILES\MSOFFICE\OFFICE11\1033\OCLNINTL.OPC
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\PFILES\MSOFFICE\OFFICE11\1033\OFREADME.HTM
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\PFILES\MSOFFICE\OFFICE11\1033\OLREADME.HTM
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\PFILES\MSOFFICE\OFFICE11\1033\PBREADME.HTM
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\PFILES\MSOFFICE\OFFICE11\1033\PPREADME.HTM
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\PFILES\MSOFFICE\OFFICE11\1033\PSS10O.CHM
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\PFILES\MSOFFICE\OFFICE11\1033\PSS10R.CHM
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\PFILES\MSOFFICE\OFFICE11\1033\PVREADME.HTM
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\PFILES\MSOFFICE\OFFICE11\1033\SETUP.CHM
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\PFILES\MSOFFICE\OFFICE11\1033\WDREADME.HTM
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\PFILES\MSOFFICE\OFFICE11\1033\XLREADME.HTM
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\PFILES\MSOFFICE\OFFICE11\OCLEAN.DLL
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\PFILES\MSOFFICE\OFFICE11\OCLNCORE.OPC
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\PFILES\MSOFFICE\OFFICE11\OCLNCUST.OPC
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\PFILES\MSOFFICE\OFFICE11\OFFCLN.EXE
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\SETUP\OSE.EXE
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\SETUP\OWC10.XML
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\SETUP\OWC11.XML
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\SETUP\PRO11.XML
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\SETUP\setup.ini
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\FILES\WINDOWS\INF\AER_1033.ADM
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\G3561403.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\GV561403.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\IJ561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\IS561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\IU561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\L2561403.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\L3561403.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\L4561403.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\L9561403.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\LV561403.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\M2561406.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\M3561404.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\M4561403.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\M9561403.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\MA561403.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\MC561403.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\MG561403.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\MH561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\MO561403.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\MSDE2000\MSDE2KS3.EXE
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\MT561403.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\O0561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\O1561403.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\O9561403.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\OWC10.MSI
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\OWC11.MSI
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\P2561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\P3561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\P4561402.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\PA561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\PR103368.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\PR103678.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\PR308246.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\PRO11.MSI
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\PV561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\PW561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\Q2561405.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\Q3561405.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\Q4561405.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\QV561405.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\README.HTM
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\SETUP.EXE
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\SETUP.HTM
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\SKU011.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\SKU011.XML
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\SKU026.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\SKU0A4.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\TR103621.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\TR308222.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\V3561403.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\W2561405.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\W3561405.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\W4561405.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\WV561405.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\X2561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\X3561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\YA561403.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\YB561408.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\YC561403.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\YH561403.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\YI561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\YL561402.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\YM561403.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\YO561403.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\YS561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\YT561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\ZA561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\ZC561402.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\ZD561402.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\ZE561406.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\ZF561402.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\ZG561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\ZH561403.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\ZI561402.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\ZJ561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\ZK561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\ZM561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\ZN561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\ZO561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\ZQ561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\ZR561403.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\ZS561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\ZT561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\ZU561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\ZV561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\ZY561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Microsoft Office 2003\ZZ561401.CAB
c:\program files\BitTorrent\Microsoft Office 2003\Serials.txt
c:\program files\BitTorrent\Munich[2005]DvDrip[Eng]-aXXo\~BitTorrentPartFile_38336B18.dat
c:\program files\BitTorrent\Munich[2005]DvDrip[Eng]-aXXo\Munich[2005]DvDrip[Eng]-aXXo.avi
c:\program files\BitTorrent\No.Country.For.Old.Men.2007.DvDRip.Eng-FxM\~BitTorrentPartFile_2BBEC6A4.dat
c:\program files\BitTorrent\No.Country.For.Old.Men.2007.DvDRip.Eng-FxM\No.Country.For.Old.Men.2007.DvDRip.Eng-FxM.avi
c:\program files\BitTorrent\Pan's.Labyrinth[2006]DvDrip[Eng.Sub]-aXXo\~BitTorrentPartFile_2BD52953.dat
c:\program files\BitTorrent\Pan's.Labyrinth[2006]DvDrip[Eng.Sub]-aXXo\IMPORTANT.Read carefully before enjoy this movie.txt
c:\program files\BitTorrent\Pan's.Labyrinth[2006]DvDrip[Eng.Sub]-aXXo\Pan's.Labyrinth[2006]DvDrip[Eng.Sub]-aXXo.avi
c:\program files\BitTorrent\Pan's.Labyrinth[2006]DvDrip[Eng.Sub]-aXXo\Pan's.Labyrinth[2006]DvDrip[Eng.Sub]-aXXo.srt
c:\program files\BitTorrent\Pineapple.Express[2008]DvDrip-aXXo\~BitTorrentPartFile_2BDF6F54.dat
c:\program files\BitTorrent\Pineapple.Express[2008]DvDrip-aXXo\Pineapple.Express[2008]DvDrip-aXXo.avi
c:\program files\BitTorrent\plugin.inf
c:\program files\BitTorrent\Risk 2\Risk 2 - {HAPPY}.part1.rar
c:\program files\BitTorrent\Risk 2\Risk 2 - {HAPPY}.part2.rar
c:\program files\BitTorrent\Risk 2\Risk 2 - {HAPPY}.part3.rar
c:\program files\BitTorrent\Risk 2\Risk 2 - {HAPPY}.part4.rar
c:\program files\BitTorrent\Risk 2\Risk 2 - {HAPPY}.part5.rar
c:\program files\BitTorrent\Risk 2\Risk 2 - {HAPPY}.part6.rar
c:\program files\BitTorrent\Risk 2\Risk 2 - {HAPPY}.part7.rar
c:\program files\BitTorrent\Risk 2\Risk 2 - {HAPPY}.part8.rar
c:\program files\BitTorrent\Risk 2\Risk 2.nfo
c:\program files\BitTorrent\Risk 2\Risk 2.sfv
c:\program files\BitTorrent\Rod Stewart - the best of\(01) The Best Of Rod Stewart - Maggie May.mp3
c:\program files\BitTorrent\Rod Stewart - the best of\(07) The Best Of Rod Stewart - Sailing.mp3
c:\program files\BitTorrent\Rod Stewart - the best of\(09) The Best Of Rod Stewart - You're In My Heart.mp3
c:\program files\BitTorrent\Rod Stewart - the best of\(11) The Best Of Rod Stewart - What Am I Gonna Do (I'm So In Love With You).mp3
c:\program files\BitTorrent\Rod Stewart - the best of\(13) The Best Of Rod Stewart - The Killing Of Georgie (Part I And II).mp3
c:\program files\BitTorrent\Rod Stewart - the best of\(14) The Best Of Rod Stewart - Tonight's The Night.mp3
c:\program files\BitTorrent\Rod Stewart - the best of\(15) The Best Of Rod Stewart - Every Beat Of My Heart.mp3
c:\program files\BitTorrent\Rod Stewart - the best of\(16) The Best Of Rod Stewart - Downtown Train.mp3
c:\program files\BitTorrent\Rod Stewart - the best of\[AllCDCovers]_rod_stewart_the_best_of_rod_stewart_2006_retail_cd-back.jpg
c:\program files\BitTorrent\Rod Stewart - the best of\[AllCDCovers]_rod_stewart_the_best_of_rod_stewart_2006_retail_cd-cd.jpg
c:\program files\BitTorrent\Rod Stewart - the best of\[AllCDCovers]_rod_stewart_the_best_of_rod_stewart_2006_retail_cd-front.jpg
c:\program files\BitTorrent\Rod Stewart - the best of\~uTorrentPartFile_A94CCE3.dat
c:\program files\BitTorrent\Rod Stewart - the best of\filmfix.jpg.jpg
c:\program files\BitTorrent\Rod Stewart - the best of\SEED.gif
c:\program files\BitTorrent\Sarah Mclachlan - Storytellers (DVDA 2004) - Pop [www.torrentazos.com]\~BitTorrentPartFile_4C336C2.dat
c:\program files\BitTorrent\Sarah Mclachlan - Storytellers (DVDA 2004) - Pop [www.torrentazos.com]\01 Sarah Mclachlan - Good Enough - www.torrentazos.com.mp3
c:\program files\BitTorrent\Sarah Mclachlan - Storytellers (DVDA 2004) - Pop [www.torrentazos.com]\02 Sarah Mclachlan - Building A Mystery - www.torrentazos.com.mp3
c:\program files\BitTorrent\Sarah Mclachlan - Storytellers (DVDA 2004) - Pop [www.torrentazos.com]\03 Sarah Mclachlan - Ice Cream - www.torrentazos.com.mp3
c:\program files\BitTorrent\Sarah Mclachlan - Storytellers (DVDA 2004) - Pop [www.torrentazos.com]\04 Sarah Mclachlan - Sweet Surrender - www.torrentazos.com.mp3
c:\program files\BitTorrent\Sarah Mclachlan - Storytellers (DVDA 2004) - Pop [www.torrentazos.com]\05 Sarah Mclachlan - Hold on - www.torrentazos.com.mp3
c:\program files\BitTorrent\Sarah Mclachlan - Storytellers (DVDA 2004) - Pop [www.torrentazos.com]\06 Sarah Mclachlan - Elsewhere - www.torrentazos.com.mp3
c:\program files\BitTorrent\Sarah Mclachlan - Storytellers (DVDA 2004) - Pop [www.torrentazos.com]\07 Sarah Mclachlan - Possession - www.torrentazos.com.mp3
c:\program files\BitTorrent\Sarah Mclachlan - Storytellers (DVDA 2004) - Pop [www.torrentazos.com]\08 Sarah Mclachlan - Adia - www.torrentazos.com.mp3
c:\program files\BitTorrent\Sarah Mclachlan - Storytellers (DVDA 2004) - Pop [www.torrentazos.com]\09 Sarah Mclachlan - Witness - www.torrentazos.com.mp3
c:\program files\BitTorrent\Sarah Mclachlan - Storytellers (DVDA 2004) - Pop [www.torrentazos.com]\10 Sarah Mclachlan - Angel - www.torrentazos.com.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - machine\01 Track 1.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - machine\02 Track 2.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - machine\03 Track 3.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - machine\04 Track 4.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - machine\05 Track 5.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - machine\06 Track 6.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - machine\07 Track 7.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - machine\08 Track 8.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - machine\09 Track 9.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - machine\10 Track 10.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - machine\11 Track 11.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - machine\e75580ijwee.jpg
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Shadow Zone\07 - The Only.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Shadow Zone\AlbumArt_{FDE2F2C2-092F-4B42-AA0F-D9F64BDDBBCB}_Large.jpg
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Shadow Zone\AlbumArt_{FDE2F2C2-092F-4B42-AA0F-D9F64BDDBBCB}_Small.jpg
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Shadow Zone\AlbumArtSmall.jpg
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Shadow Zone\Folder.jpg
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Shadow Zone\Static-X - 01 - Destroy All.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Shadow Zone\Static-X - 02 - Control It.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Shadow Zone\Static-X - 03 - New Pain.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Shadow Zone\Static-X - 04 - Shadow Zone.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Shadow Zone\Static-X - 05 - Dead World.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Shadow Zone\Static-X - 06 - Monster.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Shadow Zone\Static-X - 08 - Kill Your Idols.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Shadow Zone\Static-X - 09 - All In Wait.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Shadow Zone\Static-X - 10 - Otsegolectric.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Shadow Zone\Static-X - 11 - So.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Shadow Zone\Static-X - 12 - Transmission.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Shadow Zone\Static-X - 13 - Invincible.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Wisconsin Death Trip\01 Push It.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Wisconsin Death Trip\02 I'm With Stupid.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Wisconsin Death Trip\03 Bled for Days.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Wisconsin Death Trip\04 Love Dump.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Wisconsin Death Trip\05 I Am.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Wisconsin Death Trip\06 Otsegolation.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Wisconsin Death Trip\07 Stem.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Wisconsin Death Trip\08 Sweat of the Bud.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Wisconsin Death Trip\09 Fix.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Wisconsin Death Trip\10 Wisconsin Death Trip.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Wisconsin Death Trip\11 The Trance Is the Motion.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Wisconsin Death Trip\12 December.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Wisconsin Death Trip\AlbumArt_{90BCF7B9-7CEA-47D7-9E45-7D18A4A154CC}_Large.jpg
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Wisconsin Death Trip\AlbumArt_{90BCF7B9-7CEA-47D7-9E45-7D18A4A154CC}_Small.jpg
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Wisconsin Death Trip\AlbumArtSmall.jpg
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static-X - Wisconsin Death Trip\Folder.jpg
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - beneath between beyond\01 - Breathe (Unreleased).mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - beneath between beyond\02 - Deliver Me.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - beneath between beyond\03 - Anything But This.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - beneath between beyond\04 - S.O.M.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - beneath between beyond\05 - Down.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - beneath between beyond\06 - Head (Unreleased).mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - beneath between beyond\07 - So Real.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - beneath between beyond\08 - Crash.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - beneath between beyond\09 - Push It (Jb's Death Trance Mix).mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - beneath between beyond\10 - Im With Stupid (Paul Barker Rmx).mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - beneath between beyond\11-static_x-burning_inside-uf.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - beneath between beyond\12-static_x-behind_the_wall_of_sheep-uf.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - beneath between beyond\13-static_x-gimme_gimme_shock_treatment-uf.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - beneath between beyond\14-static_x-i_am_(demo)-uf.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - beneath between beyond\15-static_x-love_dump_(demo)-uf.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - beneath between beyond\16-static_x-get_to_the_gone_(demo)-uf.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - beneath between beyond\17-static_x-new_pain_(demo)-uf.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - beneath between beyond\18-static_x-otsegolectric_(demo)-uf.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - beneath between beyond\g37687iv73v.jpg
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - cannibal\01-static_x-cannibal.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - cannibal\02-static_x-no_submission.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - cannibal\03-static_x-behemoth.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - cannibal\04-static_x-chemical_logic.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - cannibal\05-static_x-destroyer.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - cannibal\06-static_x-forty_ways.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - cannibal\07-static_x-chroma-matic.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - cannibal\08-static_x-cuts_you_up.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - cannibal\09-static_x-reptile.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - cannibal\10-static_x-electric_pulse.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - cannibal\12-static_x-team_hate.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - cannibal\i46711abwgi.jpg
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - start a war\g78633ribak.jpg
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - start a war\Static-X - 01 - The Enemy.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - start a war\Static-X - 02 - I'm the One.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - start a war\Static-X - 03 - Start a War.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - start a war\Static-X - 04 - Pieces.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - start a war\Static-X - 05 - Dirthouse.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - start a war\Static-X - 06 - Skinnyman.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - start a war\Static-X - 07 - Just in Case.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - start a war\Static-X - 08 - Set It Off.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - start a war\Static-X - 09 - I Want to F—— Break It.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - start a war\Static-X - 10 - Night Terrors.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - start a war\Static-X - 11 - Otsego Amigo.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - start a war\Static-X - 12 - My Damnation.mp3
c:\program files\BitTorrent\Static-X - discography (6 studio albums)\Static X - start a war\Static-X - 13 - Brainfog.mp3
c:\program files\BitTorrent\The God Delusion (Dawkins) [NF]\~BitTorrentPartFile_14D67A1A.dat
c:\program files\BitTorrent\The God Delusion (Dawkins) [NF]\The God Delusion-001.mp3
c:\program files\BitTorrent\The God Delusion (Dawkins) [NF]\The God Delusion-002.mp3
c:\program files\BitTorrent\The God Delusion (Dawkins) [NF]\The God Delusion-003.mp3
c:\program files\BitTorrent\The God Delusion (Dawkins) [NF]\The God Delusion-004.mp3
c:\program files\BitTorrent\The God Delusion (Dawkins) [NF]\The God Delusion-005.mp3
c:\program files\BitTorrent\The God Delusion (Dawkins) [NF]\The God Delusion-006.mp3
c:\program files\BitTorrent\The God Delusion (Dawkins) [NF]\The God Delusion-007.mp3
c:\program files\BitTorrent\The God Delusion (Dawkins) [NF]\The God Delusion-008.mp3
c:\program files\BitTorrent\The God Delusion (Dawkins) [NF]\The God Delusion-009.mp3
c:\program files\BitTorrent\The God Delusion (Dawkins) [NF]\The God Delusion-010.mp3
c:\program files\BitTorrent\The God Delusion (Dawkins) [NF]\The God Delusion-011.mp3
c:\program files\BitTorrent\The God Delusion (Dawkins) [NF]\The God Delusion-012.mp3
c:\program files\BitTorrent\The God Delusion (Dawkins) [NF]\The God Delusion-013.mp3
c:\program files\BitTorrent\The God Delusion (Dawkins) [NF]\The God Delusion-014.mp3
c:\program files\BitTorrent\The Wes Anderson Collection -JBW\~BitTorrentPartFile_57F0C95E.dat
c:\program files\BitTorrent\The Wes Anderson Collection -JBW\01 - Bottle Rocket (1996)-JBW\Bottle Rocket - DVD Cover.jpg
c:\program files\BitTorrent\The Wes Anderson Collection -JBW\01 - Bottle Rocket (1996)-JBW\Bottle Rocket (AC3-2ch) - Subtitles.rar
c:\program files\BitTorrent\The Wes Anderson Collection -JBW\01 - Bottle Rocket (1996)-JBW\Bottle Rocket (AC3-2ch) (1of2).avi
c:\program files\BitTorrent\The Wes Anderson Collection -JBW\01 - Bottle Rocket (1996)-JBW\Bottle Rocket (AC3-2ch) (2of2).avi
c:\program files\BitTorrent\The Wes Anderson Collection -JBW\01 - Bottle Rocket (1996)-JBW\Bottle Rocket (AC3-2ch).nfo
c:\program files\BitTorrent\The.Prestige[2006]DvDrip[Eng]-aXXo\~BitTorrentPartFile_2BCBF2C6.dat
c:\program files\BitTorrent\The.Prestige[2006]DvDrip[Eng]-aXXo\IMPORTANT.Read carefully before watching this movie.txt
c:\program files\BitTorrent\The.Prestige[2006]DvDrip[Eng]-aXXo\The.Prestige[2006]DvDrip[Eng]-aXXo.avi
c:\program files\BitTorrent\Thumbs.db
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\~BitTorrentPartFile_BB13DF8F.dat
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\000 - Rock Top 500.m3u
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\001 - Led Zeppelin - Stairway To Heaven.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\002 - The Rolling Stones - Satisfaction.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\003 - Derek and the Dominos - Layla.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\005 - The Who - Won't Get Fooled Again.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\006 - The Doors - Light My Fire.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\007 - Pink Floyd - Comfortably Numb.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\008 - The Eagles - Hotel California.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\009 - Bruce Springsteen - Born To Run.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\010 - John Lennon - Imagine.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\011 - Led Zeppelin - Rock And Roll.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\012 - The Who - Baba O'Riley.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\014 - Cream - White Room.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\016 - Jimi Hendrix - Purple Haze.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\018 - Grateful Dead - Truckin'.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\019 - Pink Floyd - Money.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\021 - Moody Blues - Nights In White Satin.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\022 - Led Zeppelin - Kashmir.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\023 - The Who - Behind Blue Eyes.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\024 - Yes - Roundabout.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\027 - The Beatles - Hey Jude.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\029 - Aerosmith - Dream On.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\030 - The Rolling Stones - Jumping Jack Flash.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\031 - Led Zeppelin - Whole Lotta Love.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\032 - Lynyrd Skynyrd - Freebird.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\033 - Pink Floyd - Wish You Were Here.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\036 - Grateful Dead - Casey Jones.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\039 - The Beatles - Let It Be.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\040 - Eric Clapton - Cocaine.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\041 - Led Zeppelin - Black Dog.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\042 - The Doors - L.A. Woman.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\045 - Cream - Sunshine Of Your Love.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\046 - Deep Purple - Smoke On The Water.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\048 - John Lennon - Instant Karma!.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\049 - Animals - House of the Rising Sun.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\052 - The Beatles - While My Guitar Gently Weeps.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\054 - The Rolling Stones - Sympathy For the Devil.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\056 - Led Zeppelin - Communication Breakdown.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\059 - The Who - Pinball Wizard.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\060 - Paul McCartney - Maybe I'm Amazed.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\062 - Elton John - Bennie And The Jets.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\064 - David Bowie - Changes.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\069 - Rod Stewart - Maggie May.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\072 - Led Zeppelin - Thank You.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\073 - Pink Floyd - Hey You.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\074 - Jefferson Airplane - Somebody To Love.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\076 - Allman Brothers Band - Ramblin' Man.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\077 - Tom Petty & the Heartbreakers - Runnin' Down a Dream.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\078 - Jimi Hendrix - All Along The Watchtower.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\079 - Crosby, Stills, Nash - Woodstock.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\080 - Grand Funk Railroad - We're An American Band.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\081 - The Kinks - Lola.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\083 - The Rolling Stones - Gimme Shelter.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\084 - Fleetwood Mac - Go Your Own Way.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\090 - Grateful Dead - Touch of Grey.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\092 - Queen - We Will Rock You & We Are The Champions.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\095 - Joe Walsh - Rocky Mountain Way.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\096 - Creedence Clearwater Revival - Fortunate Son.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\097 - The Who - Who Are You.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\098 - Janis Joplin - Me And Bobby McGee.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\100 - Electric Light Orchestra - Don't Bring Me Down.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\104 - Bachman Turner Overdrive - You Ain't Seen Nothing Yet.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\109 - Doobie Brothers - China Grove.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\114 - Pink Floyd - Welcome To The Machine.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\115 - The Beatles - Come Together.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\116 - Led Zeppelin - Going To California.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\118 - The Guess Who - American Woman.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\120 - Crosby, Stills, Nash & Young - Ohio.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\123 - Neil Young - Old Man.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\124 - Supertramp - The Logical Song.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\125 - Joe Walsh - Life's Been Good.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\127 - Electric Light Orchestra - Telephone Line.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\128 - Cream - Crossroads.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\131 - Bad Company - Rock 'n' Roll Fantasy.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\132 - The Rolling Stones - Honky Tonk Woman.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\135 - Elton John - Crockodile Rock.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\136 - Eric Clapton - Let It Rain.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\138 - Creedence Clearwater Revival - Down On The Corner.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\140 - David Bowie - Ziggy Stardust.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\142 - The Eagles - Life In The Fast Lane.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\152 - Queen - Crazy Little Thing Called Love.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\157 - Led Zeppelin - Immigrant Song.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\160 - Pink Floyd - Time.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\162 - Grand Funk Railroad - I'm Your Captain & Closer To Home.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\164 - Crosby, Stills & Nash - Teach Your Children.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\167 - Dire Straits - Money For Nothing.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\168 - Fleetwood Mack - Tusk.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\171 - Steve Winwood - Higher Love.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\171 - Steve Winwood - Higher LoveRe1.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\172 - Bruce Springsteen - Born in the USA.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\174 - Elton John - Rocket Man.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\176 - Steve Miller Band - Fly Like An Eagle.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\177 - Billy Joel - Piano Man.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\178 - Grand Funk Railroad - Some Kind Of Wonderful.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\179 - The Rolling Stones - You Can't Always Get What You Want.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\181 - Van Halen - Jump.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\183 - Janis Joplin - Piece Of My Heart.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\190 - Doobie Brothers - Listen To The Music.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\191 - Led Zeppelin - Heartbreaker & Livin' Lovin' Mad.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\198 - Electric Light Orchestra - Evil Woman.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\200 - Led Zeppelin - Ramble On.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\202 - Peter Frampton - Show Me The Way.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\204 - The Beatles - Ticket To Ride.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\205 - The Beach Boys - Good Vibrations.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\207 - Tom Petty & the Heartbreakers - Breakdown.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\208 - ZZ Top - Tush.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\209 - Heart - Crazy On You.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\211 - The Rolling Stones - Angie.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\213 - Eric Clapton - After Midnight.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\222 - Byrds - Mr. Tambourine Man.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\223 - Bruce Springsteen - Tunnel Of Love.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\224 - Animals - We've Gotta Get Out Of This Place.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\225 - Steely Dan - Do It Again.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\227 - Fleetwood Mac - The Chain.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\229 - Creedence Clearwater Revival - Bad Moon Rising.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\235 - Blind Faith - Can't Find My Way Home.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\236 - The Rolling Stones - Street Fighting Man.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\239 - David Bowie - Space Oddity.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\240 - Buffalo Springfield - For What It's Worth.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\241 - The Doors - Riders On The Storm.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\242 - Allman Brothers Band - Whipping Post.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\245 - Strawberry Alarm Clock - Incense and Peppermints.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\246 - Rascals - People Got To Be Free.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\247 - Steely Dan - Reeling In The Years.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\250 - Creedence Clearwater Revival - I Heard It Through The Grapevine.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\251 - Led Zeppelin - Trampled Under Foot.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\253 - Electric Light Orchestra - Turn To Stone.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\254 - Mountain - Mississippi Queen.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\257 - Bad Company - Feel Like Making Love.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\258 - Heart - Magic Man.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\259 - The Beatles - Here Comes The Sun.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\260 - Yes - Long Distance Runaround.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\261 - Elton John - Your Song.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\262 - Fleetwood Mac - Say You Love Me.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\264 - Dire Straits - Sultans Of Swing.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\267 - Steve Miller Band - Jet Airliner.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\268 - David Bowie - Young Americans.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\271 - Creedence Clearwater Revival - Have You Ever Seen The Rain.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\273 - Eric Clapton - Tears In Heaven.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\276 - Doobie Brothers - Black Water.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\281 - The Rolling Stones - Heartbreaker.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\282 - Steppenwolf - Magic Carpet Ride.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\283 - Led Zeppelin - Over The Hills And Far Away.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\284 - Lynyrd Skynyrd - Sweet Home Alabama.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\288 - The Rolling Stones - Paint It Black.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\289 - The Who - I Can See For Miles.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\293 - Nazareth - Love Hurts.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\296 - Styx - Renegade.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\298 - The Who - The Kids Are Alright.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\301 - Creedence Clearwater Revival - Green River.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\303 - Electric Light Orchestra - Fire On High.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\305 - Deep Purple - Hush.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\310 - Led Zeppelin - Misty Mountain Hop.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\311 - Crosby, Stills, Nash - Long Time Gone.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\313 - Bob Seger - Against The Wind.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\316 - Supertramp - Give a Little Bit.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\317 - Steely Dan - FM.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\319 - Allman Brothers Band - Midnight Rider.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\320 - Derek and the Dominos - 10 - Bell Bottom Blues.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\321 - Pink Floyd - Young Lust.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\323 - Steve Miller Band - Take the Money and Run.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\328 - Elton John - Tiny Dancer.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\329 - John Fogerty - Centerfield.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\332 - Bachman Turner Overdrive - Taking Care of Business.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\336 - Animals - Don't Let Me Be Misunderstood.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\337 - Led Zeppelin - Fool In The Rain.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\346 - Neil Young - Heart of Gold.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\347 - David Bowie - Fame.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\350 - Heart - Barracuda.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\351 - Electric Light Orchestra - Livin' Thing.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\352 - Peter Gabriel - Solsbury Hill.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\355 - ZZ Top - Sharp Dressed Man.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\361 - Steely Dan - Josie.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\363 - T-Rex - Bang A Gong Get It On.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\365 - Genesis - I Can't Dance.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\367 - Paul McCartney - Another Day.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\376 - ZZ Top - La Grange.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\377 - Santana - Oye Como Va.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\381 - Steely Dan - Dirty Work.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\383 - Steve Winwood - Arc Of A Diver.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\384 - Yes - Wonderous Stories.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\386 - Paul McCartney - Jet.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\395 - Eric Clapton - I Shot the Sheriff.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\398 - The Guess Who - No Sugar Tonight.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\399 - Led Zeppelin - Good Times Bad Times.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\402 - Peter Frampton - Do You Feel Like We Do.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\403 - America - Horse With No Name.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\405 - Neil Young - Keep on Rocking in the Free World.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\406 - Deep Purple - Highway Star.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\407 - Bad Company - Bad Company.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\411 - Grateful Dead - Friend Of The Devil.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\414 - Animals - It's My Life.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\415 - Electric Light Orchestra - Strange Magic.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\420 - Rick Derringer - Rock and Roll Hoochie Koo.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\425 - U2 - Sunday Bloody Sunday.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\429 - Stephen Stills - Love the One You're With.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\430 - Led Zeppelin - Dy'er Ma'ker.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\431 - Tom Petty & the Heartbreakers - I Won't Back Down.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\436 - Dire Straits - So Far Away.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\437 - Steve Miller Band - The Joker.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\439 - Peter Frampton - Baby, I Love Your Way.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\443 - Creedence Clearwater Revival - Up Around The Bend.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\445 - Led Zeppelin - All My Love.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\446 - Crosby, Stills & Nash - Wooden Ships.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\449 - Deep Purple - Woman From Tokyo.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\451 - Pete Townsend - Rough Boys.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\459 - Eric Clapton - Layla (Unplugged).mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\460 - ZZ Top - Gimme All Your Lovin'.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\463 - Supertramp - Goodbye Stranger.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\466 - John Fogerty - The Old Man Down The Road.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\467 - The Beatles - Glass Onion.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\468 - Jethro Tull - Bungle In The Jungle.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\469 - Grateful Dead - Sugar Magnolia.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\474 - Santana - Black Magic Woman.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\476 - Crosby, Stills & Nash - Helplessly Hoping.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\477 - Neil Young - Southern Man.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\478 - Tom Petty & the Heartbreakers - Free Fallin'.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\484 - Warren Zevon - Werewolves Of London.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\485 - Creedence Clearwater Revival - Susie Q.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\486 - Sly And The Family Stone - Dance To The Music.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\487 - Ozzy Osbourne - Crazy Train.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\489 - David Bowie - Rebel Rebel.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\492 - Santana - Evil Ways.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\493 - Bob Seger - Old Time Rock & Roll.mp3
c:\program files\BitTorrent\Top 500 Rock And Roll Songs\496 - Kingsmen - Louie Louie.mp3
c:\program files\BitTorrent\V.For.Vendetta[2005]DvDrip[Eng]-aXXo\~BitTorrentPartFile_2BCA1C02.dat
c:\program files\BitTorrent\V.For.Vendetta[2005]DvDrip[Eng]-aXXo\V.For.Vendetta[2005]DvDrip[Eng]-aXXo.avi
c:\program files\BitTorrent\Winzip 11 pro\keygen.exe
c:\program files\BitTorrent\Winzip 11 pro\winzip110.exe
c:\program files\BitTorrent\Zack.And.Miri.Make.A.Porno.2008.R5.DVDRiP.XViD\~uTorrentPartFile_2BCBD639.dat
c:\program files\BitTorrent\Zack.And.Miri.Make.A.Porno.2008.R5.DVDRiP.XViD\Zack.And.Miri.Make.A.Porno.2008.R5.DVDRiP.XViD.avi
.
((((((((((((((((((((((((( Files Created from 2009-01-21 to 2009-02-21 )))))))))))))))))))))))))))))))
.
2009-02-19 20:56 . 2009-02-19 20:56 d——– c:\program files\Trend Micro
2009-02-16 11:42 . 2009-02-16 11:42 d——– c:\program files\Secunia
2009-02-16 11:28 . 2009-02-17 20:25 d-a—— c:\documents and settings\All Users\Application Data\TEMP
2009-02-16 11:12 . 2009-02-16 11:12 d——– c:\program files\ERUNT
2009-02-15 19:45 . 2009-02-15 19:57 d——– C:\Worknow
2009-02-15 04:06 . 2009-02-11 10:19 38,496 –a—— c:\windows\system32\drivers\mbamswissarmy.sys
2009-02-15 04:06 . 2009-02-11 10:19 15,504 –a—— c:\windows\system32\drivers\mbam.sys
2009-02-15 02:51 . 2009-02-15 02:51 664 –a—— c:\windows\system32\d3d9caps.dat
2009-02-14 17:08 . 2009-02-14 17:26 d——– c:\documents and settings\All Users\Application Data\Electronic Arts
2009-02-14 17:03 . 2009-02-15 19:52 d——– c:\windows\system32\inf
2009-02-10 16:35 . 2009-02-10 16:35 0 –a—— c:\windows\nsreg.dat
2009-02-04 20:24 . 2009-02-04 20:24 d——– c:\documents and settings\Nick\Application Data\Maple
2009-02-04 20:16 . 2009-02-04 20:16 d——– C:\watcom-1.3
2009-02-04 20:16 . 2009-02-04 20:16 212,992 –a—— c:\windows\system32\WMIMPLEX.dll
2009-02-04 20:16 . 2009-02-04 20:16 40,960 –a—— c:\windows\system32\maplec.dll
2009-02-04 20:16 . 2009-02-04 20:16 20,480 –a—— c:\windows\system32\maplecompat.dll
2009-02-04 20:14 . 2009-02-04 20:14 d–h—– c:\program files\Zero G Registry
2009-02-04 20:14 . 2009-02-04 20:17 d——– c:\program files\Maple 12
2009-02-04 20:13 . 2009-02-04 20:13 d–h—– c:\documents and settings\Nick\InstallAnywhere
2009-01-31 12:16 . 2009-01-31 12:16 10,520 –a—— c:\windows\system32\avgrsstx.dll
2009-01-23 15:52 . 2008-10-16 14:06 268,648 –a—— c:\windows\system32\mucltui.dll
2009-01-23 15:52 . 2008-10-16 14:06 208,744 –a—— c:\windows\system32\muweb.dll
2009-01-23 15:52 . 2008-10-16 14:06 27,496 –a—— c:\windows\system32\mucltui.dll.mui
2009-01-23 02:19 . 2009-01-23 02:19 d——– c:\program files\Microsoft Silverlight
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-02-20 23:32 3,609 –sha-w c:\windows\system32\mmf.sys
2009-02-19 03:52 ——— d—–w c:\program files\Spybot - Search & Destroy
2009-02-18 01:27 ——— d—–w c:\program files\SpywareGuard
2009-02-18 01:27 ——— d—–w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-02-18 01:25 ——— d—–w c:\program files\SpywareBlaster
2009-02-16 17:10 ——— d—–w c:\program files\Sports Mogul
2009-02-16 16:25 ——— d—–w c:\program files\SUPERAntiSpyware
2009-02-16 16:25 ——— d—–w c:\documents and settings\Nick\Application Data\SUPERAntiSpyware.com
2009-02-16 16:21 ——— d—–w c:\program files\Common Files\Wise Installation Wizard
2009-02-15 17:14 ——— d—–w c:\program files\Malwarebytes' Anti-Malware
2009-02-15 16:16 ——— d—–w c:\documents and settings\All Users\Application Data\avg8
2009-02-14 22:32 ——— d—–w c:\program files\Electronic Arts
2009-02-03 03:58 ——— d—–w c:\program files\Wolverine Studios
2009-01-31 17:16 325,128 —-a-w c:\windows\system32\drivers\avgldx86.sys
2009-01-24 08:13 ——— d–h–w c:\program files\InstallShield Installation Information
2009-01-24 08:01 ——— d—–w c:\program files\Microsoft Works
2009-01-17 02:35 3,594,752 ——w c:\windows\system32\dllcache\mshtml.dll
2009-01-15 23:03 ——— d—–w c:\program files\Java
2009-01-14 17:22 ——— d—–w c:\documents and settings\Nick\Application Data\SPORE
2009-01-14 17:20 107,888 —-a-w c:\windows\system32\CmdLineExt.dll
2009-01-14 17:20 ——— d–h–r c:\documents and settings\Nick\Application Data\SecuROM
2009-01-08 14:52 ——— d—–w c:\documents and settings\Nick\Application Data\SPORE Creature Creator
2008-12-25 09:48 ——— d—–w c:\program files\WinPcap
2008-12-23 19:43 ——— d—–w c:\program files\music
2008-12-19 09:10 70,656 ——w c:\windows\system32\dllcache\ie4uinit.exe
2008-12-19 09:10 13,824 ——w c:\windows\system32\dllcache\ieudinit.exe
2008-12-19 05:25 634,024 ——w c:\windows\system32\dllcache\iexplore.exe
2008-12-19 05:23 161,792 ——w c:\windows\system32\dllcache\ieakui.dll
2008-12-11 10:57 333,952 ——w c:\windows\system32\dllcache\srv.sys
2008-11-07 22:09 536,811 —-a-w c:\program files\ie-spyad.exe
2008-10-23 16:17 18,829,383 —-a-w c:\program files\tibia831.exe
2008-08-14 01:59 232,904,074 —-a-w c:\program files\ootp9setup.exe
2008-07-07 13:34 24,234,968 —-a-w c:\program files\setupeng.exe
2008-07-04 19:01 15,336,856 —-a-w c:\program files\jre-6u10-beta-windows-i586-p.exe
2008-06-23 02:32 49,384,056 —-a-w c:\program files\avg_free_stf_all_8_100a1323.exe
2008-06-21 00:07 5,632 –sha-w c:\program files\Thumbs.db
2007-11-21 22:55 6,637,432 —-a-w c:\program files\dMC-R12.3-Ref-Registered.exe
2007-11-13 16:01 13,871,095 —-a-w c:\program files\schedulemaker.zip
2007-06-15 05:35 9,690,219 —-a-w c:\program files\mws094f.exe
2007-06-14 16:29 380,208,128 —-a-w c:\program files\mtgodl2.exe
2007-03-18 23:57 26,583,420 —-a-w c:\program files\Geneforge4Demo.exe
.
((((((((((((((((((((((((((((( SnapShot@2009-02-20_18.00.42.90 )))))))))))))))))))))))))))))))))))))))))
.
+ 2005-10-21 01:02:28 163,328 —-a-w c:\windows\ERDNT\subs\ERDNT.EXE
+ 2009-02-20 23:32:15 16,384 —-atw c:\windows\Temp\Perflib_Perfdata_118.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2008-08-13 206064]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2009-01-15 1830128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-07-09 851968]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-06-06 8429568]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-06-06 81920]
"Broadcom Wireless Manager UI"="c:\windows\system32\WLTRAY.exe" [2007-05-09 1392640]
"KADxMain"="c:\windows\system32\KADxMain.exe" [2006-11-02 282624]
"PCMService"="c:\program files\Dell\MediaDirect\PCMService.exe" [2007-04-16 184320]
"dscactivate"="c:\program files\Dell Support Center\gs_agent\custom\dsca.exe" [2007-10-09 16384]
"DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2008-08-13 206064]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-01-31 1601304]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-11-10 136600]
"Dell QuickSet"="c:\program files\Dell\QuickSet\quickset.exe" [2007-07-03 1228800]
"NVHotkey"="nvHotkey.dll" [2007-06-06 c:\windows\system32\nvhotkey.dll]
c:\documents and settings\Nick\Start Menu\Programs\Startup\
Secunia PSI.lnk - c:\program files\Secunia\PSI\psi.exe [2008-12-17 748840]
SpywareGuard.lnk - c:\program files\SpywareGuard\sgmain.exe [2003-08-29 360448]
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2007-12-01 50688]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-12-22 11:05 356352 c:\program files\SUPERAntiSpyware\SASWINLO.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-01-31 12:16 10520 c:\windows\system32\avgrsstx.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.ac3filter"= ac3filter.acm
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\a.exe]
"Debugger"=c:\windows\system32\alg.exe
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\matrix31290.exe]
"Debugger"=c:\windows\system32\alg.exe
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\~tmpa.exe]
"Debugger"=c:\windows\system32\alg.exe
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\~tmpb.exe]
"Debugger"=c:\windows\system32\alg.exe
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\~tmpc.exe]
"Debugger"=c:\windows\system32\alg.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxioDragToDisc]
–a—— 2006-08-17 10:00 1116920 c:\program files\Roxio\Drag-to-Disc\DrgToDsc.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxWatchTray]
–a—— 2006-11-05 12:22 221184 c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Dell\\MediaDirect\\PCMService.exe"=
"c:\\Program Files\\Yahoo!\\Yahoo! Music Jukebox\\YahooMusicEngine.exe"=
"c:\\Program Files\\AIM6\\aim6.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
"c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\mtg\\Magic\\Manalink.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\Malwarebytes' Anti-Malware\\mbam.exe"=
"c:\\Program Files\\Maple 12\\jre\\bin\\maple.exe"=
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2008-11-02 325128]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [2009-01-15 8944]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2009-01-15 55024]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2009-01-31 298264]
R2 LicCtrlService;LicCtrl Service;c:\windows\Runservice.exe [2007-12-09 2560]
R3 PSI;PSI;c:\windows\system32\drivers\psi_mf.sys [2008-12-10 7808]
R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2009-01-15 7408]
S2 MSMQSVC;Message Queuing Service;c:\windows\system32\mqsv32.exe –> c:\windows\system32\mqsv32.exe [?]
S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2007-11-06 34064]
S3 xbreader;MaxDrive XBox Driver (xbreader.sys);c:\windows\system32\drivers\xbreader.sys [2001-01-02 19677]
.
Contents of the 'Scheduled Tasks' folder
2009-02-12 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 14:57]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://yahoo.com/
mStart Page = hxxp://www.google.com
uInternet Connection Wizard,ShellNext = iexplore
IE: Crawler Search
IE: E&xport to Microsoft Excel - c:\progra~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
IE: {{d9288080-1baa-4bc4-9cf8-a92d743db949} - c:\documents and settings\Nick\Start Menu\Programs\IMVU\Run IMVU.lnk
DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://aolsvc.aol.com/onlinegames/free-trial-yahtzee/zylomplayer.cab
FF - ProfilePath - c:\documents and settings\Nick\Application Data\Mozilla\Firefox\Profiles\5ei8gwd3.default\
FF - prefs.js: browser.startup.homepage - google.com
FF - plugin: c:\program files\Viewpoint\Viewpoint Media Player\npViewpoint.dll
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-21 18:39:57
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes …
scanning hidden autostart entries …
scanning hidden files …
scan completed successfully
hidden files: 0
**************************************************************************
.
——————— LOCKED REGISTRY KEYS ———————
[HKEY_USERS\S-1-5-21-267048546-3394276723-1217438979-1006\Software\SecuROM\License information*]
"datasecu"=hex:8c,f8,da,f0,d7,f1,ea,e5,2b,9c,4e,6b,89,01,7d,1b,6d,01,b3,64,9d,
2e,81,17,6b,c0,b5,fe,f4,97,db,ca,7a,8b,7f,c2,22,c1,ef,85,83,1b,0a,69,93,14,\
"rkeysecu"=hex:cb,bd,f2,61,5a,4e,c6,95,f2,29,8b,82,ba,6b,3d,44
.
——————— DLLs Loaded Under Running Processes ———————
- - - - - - - > 'winlogon.exe'(928)
c:\program files\SUPERAntiSpyware\SASWINLO.dll
c:\windows\System32\BCMLogon.dll
.
Completion time: 2009-02-21 18:42:14
ComboFix-quarantined-files.txt 2009-02-21 23:42:11
ComboFix2.txt 2009-02-20 23:36:40
ComboFix3.txt 2009-02-20 23:02:31
Pre-Run: 64,164,958,208 bytes free
Post-Run: 63,903,916,032 bytes free
Current=4 Default=4 Failed=1 LastKnownGood=2 Sets=1,2,3,4
867 — E O F — 2009-02-12 17:11:48
Anytime you are running any type of peer-to-peer application, you are more prone to infection by malware, and this is probably how you became infected in the first place. Please at least refrain from using any peer-to-peer programs for the remainder of my fix.
Launch Malwarebytes' Anti-Malware
- If an update is found, it will download and install the latest version.
- Once the program has loaded, select "Perform Quick Scan", then click Scan.
- The scan may take some time to finish,so please be patient.
- When the scan is complete, click OK, then Show Results to view the results.
- Make sure that everything is checked, and click Remove Selected.
- When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
- The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
- Copy&Paste the entire report in your next reply.
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.
Please click here to download AVP Tool by Kaspersky.
- Save it to your desktop.
- Reboot your computer into SafeMode.
You can do this by restarting your computer and continually tapping the F8 key until a menu appears.
Use your up arrow key to highlight SafeMode then hit enter. - Double click the setup file to run it.
- Click Next to continue.
- It will by default install it to your desktop folder.Click Next.
- Hit ok at the prompt for scanning in Safe Mode.
- It will then open a box There will be a tab that says Automatic scan.
- Under Automatic scan make sure these are checked.
- System Memory
- Startup Objects
- Disk Boot Sectors.
- My Computer.
- Also any other drives (Removable that you may have)
After that click on Security level then choose Customize then click on the tab that says Heuristic Analyzer then choose Enable Deep rootkit search then choose ok.
Then choose OK again then you are back to the main screen.
- Then click on Scan at the to right hand Corner.
- It will automatically Neutralize any objects found.
- If some objects are left un-neutralized then click the button that says Neutralize all
- If it says it cannot be Neutralized then chooose The delete option when prompted.
- After that is done click on the reports button at the bottom and save it to file name it Kas.
- Save it somewhere convenient like your desktop and just post only the detected Virus\malware in the report it will be at the very top under Detected post those results in your next reply.
Note: This tool will self uninstall when you close it so please save the log before closing it.
I know, just found it curious how you zeroed in on the torrents & no worries, have zero intention of installing or running any p2p programs.True, they are not always associated with infection, however
Anytime you are running any type of peer-to-peer application, you are more prone to infection by malware, and this is probably how you became infected in the first place. Please at least refrain from using any peer-to-peer programs for the remainder of my fix.
Ask AI
AI can make mistakes. Check the cited posts. Archived advice can be out-of-date
Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI