[Closed] Infected with unknown malware

A couple of weeks ago my sister's computer crashed, so she took the liberty to use my computer for a week or so while hers was being fixed. Ever since then, my computer has been horridly slow, both the computer itself as well as the internet. Random popups have been opening up too, even if no other internet processes are open. For example, I use Opera, but popups would randomly open up from Opera, or they would even start up Firefox or IE themselves.

I need help identifying and cleaning these things out. Here's my HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:16, on 2009-03-23
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\acs.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
C:\Program Files\Apache Group\Apache2\bin\Apache.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Apache Group\Apache2\bin\Apache.exe
C:\Program Files\LogMeIn\x86\RaMaint.exe
C:\Program Files\LogMeIn\x86\LogMeIn.exe
C:\Program Files\LogMeIn\x86\LMIGuardian.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Pen_Tablet.exe
C:\WINDOWS\system32\ZuneBusEnum.exe
C:\WINDOWS\system32\WTablet\Pen_TabletUser.exe
C:\WINDOWS\system32\Pen_Tablet.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Trillian\trillian.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Ventrilo\Ventrilo.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
C:\Program Files\Microsoft Office\Office12\WINWORD.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\PayPal\PayPal Plug-In\RBroker.exe
C:\Program Files\FrostWire\FrostWire.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemonsearch.com/intl/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: NBHO1 Class - {53F53E00-4C2B-43E5-8AF0-D3C863E8FC65} - C:\Program Files\Danware Data\NetOp School\Student\nbho.dll
O2 - BHO: (no name) - {55141ee0-5d46-4d01-ab8a-1663a78df868} - C:\WINDOWS\system32\dodiwake.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: IECatcher Class - {B930BA63-9E5A-11D3-A288-0000E80E2EDE} - C:\PROGRA~1\MASSDO~1\MDHELPER.DLL
O2 - BHO: {f4f581cf-25bc-6169-5874-252fab83734e} - {e43738ba-f252-4785-9616-cb52fc185f4f} - C:\WINDOWS\system32\ftkkhb.dll
O2 - BHO: OToolbarHelper Class - {EAD3A971-6A23-4246-8691-C9244E858967} - C:\Program Files\PayPal\PayPal Plug-In\PayPalHelper.dll
O3 - Toolbar: PayPal Plug-In - {DC0F2F93-27FA-4f84-ACAA-9416F90B9511} - C:\Program Files\PayPal\PayPal Plug-In\OToolbar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [niyakufafa] Rundll32.exe "C:\WINDOWS\system32\tepividu.dll",s
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [945d2293] rundll32.exe "C:\WINDOWS\system32\horegoga.dll",b
O4 - HKLM\..\Run: [CPM976e110f] Rundll32.exe "c:\windows\system32\vutuloro.dll",a
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [niyakufafa] Rundll32.exe "C:\WINDOWS\system32\tepividu.dll",s (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [niyakufafa] Rundll32.exe "C:\WINDOWS\system32\tepividu.dll",s (User 'NETWORK SERVICE')
O8 - Extra context menu item: + &Mass Downloader: download this file - C:\Program Files\Mass Downloader\Add_Url.htm
O8 - Extra context menu item: + Mass Downloader: download &All files - C:\Program Files\Mass Downloader\Add_All.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Mass Downloader - {0FD01980-CCCB-11D3-80D4-0000E80E2EDE} - C:\Program Files\Mass Downloader\massdown.exe
O9 - Extra 'Tools' menuitem: &Mass Downloader - {0FD01980-CCCB-11D3-80D4-0000E80E2EDE} - C:\Program Files\Mass Downloader\massdown.exe
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\prxernsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\prxerdrv.dll
O10 - Unknown file in Winsock LSP: w2pxdrv.dll
O10 - Unknown file in Winsock LSP: w2pxdrv.dll
O10 - Unknown file in Winsock LSP: w2pxdrv.dll
O10 - Unknown file in Winsock LSP: w2pxdrv.dll
O10 - Unknown file in Winsock LSP: w2pxdrv.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\prxerdrv.dll
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O20 - AppInit_DLLs: wbsys.dll C:\WINDOWS\system32\gofovobe.dll ftkkhb.dll c:\windows\system32\vutuloro.dll
O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\vutuloro.dll
O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\vutuloro.dll
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\System32\acs.exe
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Wireless Service - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: Apache2 - Apache Software Foundation - C:\Program Files\Apache Group\Apache2\bin\Apache.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Jumpstart Wifi Protected Setup (jswpsapi) - Atheros Communications, Inc. - C:\Program Files\D-Link\RangeBooster G WUA-2340\JSWUtil\jswpsapi.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\RaMaint.exe
O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LogMeIn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: TabletServicePen - Wacom Technology, Corp. - C:\WINDOWS\system32\Pen_Tablet.exe

–
End of file - 9129 bytes

I see a few things there myself already, but just want some further confirmation from some of the pros here at WTT.

Here ya go

ComboFix 09-03-23.01 - Cory 2009-03-24 17:27:37.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2047.1627 [GMT -4:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
FW: Sunbelt Personal Firewall *disabled*
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\mm.BOT
c:\program files\mm.BOT\Config\mm.BOT.ini
c:\program files\mm.BOT\Config\mm.BOT.Sequences.ini
c:\program files\mm.BOT\Config\mm.BotState.ini
c:\program files\mm.BOT\Config\mm.LifeCheck.ini
c:\program files\mm.BOT\Config\mm.MultiKeys.ini
c:\program files\mm.BOT\Config\mm.PKID.ini
c:\program files\mm.BOT\Config\mm.PlayKeys.ini
c:\program files\mm.BOT\Config\mmcl.PKID.Compiler.exe
c:\program files\mm.BOT\Config\System\d2-cdkey.exe
c:\program files\mm.BOT\Config\System\listfile.dat
c:\program files\mm.BOT\Config\System\LMPQAPI.DLL
c:\program files\mm.BOT\Config\System\mm.Boxes.Ref.ini
c:\program files\mm.BOT\Config\System\mm.PKID.Ref
c:\program files\mm.BOT\Config\System\mm.PKID.Usr.CH
c:\program files\mm.BOT\Config\System\mm.PKID.Usr.ID
c:\program files\mm.BOT\Config\System\mm.PKID.Usr.PK
c:\program files\mm.BOT\Config\System\MPQ2K.exe
c:\program files\mm.BOT\Config\System\Process.exe
c:\program files\mm.BOT\Config\System\SFmpq.dll
c:\program files\mm.BOT\Config\System\staredit.exe
c:\program files\mm.BOT\Config\System\Storm.dll
c:\program files\mm.BOT\Documents\Htm\CharTut.htm
c:\program files\mm.BOT\Documents\Htm\FAQ.htm
c:\program files\mm.BOT\Documents\Htm\img\automap.jpg
c:\program files\mm.BOT\Documents\Htm\img\bar.jpg
c:\program files\mm.BOT\Documents\Htm\img\coldskills.jpg
c:\program files\mm.BOT\Documents\Htm\img\controls1.jpg
c:\program files\mm.BOT\Documents\Htm\img\controls2.jpg
c:\program files\mm.BOT\Documents\Htm\img\controls3.jpg
c:\program files\mm.BOT\Documents\Htm\img\controls4.jpg
c:\program files\mm.BOT\Documents\Htm\img\Desktop.jpg
c:\program files\mm.BOT\Documents\Htm\img\favicon.ico
c:\program files\mm.BOT\Documents\Htm\img\fireskills.jpg
c:\program files\mm.BOT\Documents\Htm\img\lightskills.jpg
c:\program files\mm.BOT\Documents\Htm\img\merc_main.jpg
c:\program files\mm.BOT\Documents\Htm\img\mmbotlogo.jpg
c:\program files\mm.BOT\Documents\Htm\img\Notepad.ico
c:\program files\mm.BOT\Documents\Htm\img\Pindle.jpg
c:\program files\mm.BOT\Documents\Htm\img\Program.ico
c:\program files\mm.BOT\Documents\Htm\img\Screenshot054.jpg
c:\program files\mm.BOT\Documents\Htm\img\Screenshot065.jpg
c:\program files\mm.BOT\Documents\Htm\img\Screenshot072.jpg
c:\program files\mm.BOT\Documents\Htm\img\Screenshot090.jpg
c:\program files\mm.BOT\Documents\Htm\img\Screenshot101.jpg
c:\program files\mm.BOT\Documents\Htm\img\Screenshot169.jpg
c:\program files\mm.BOT\Documents\Htm\img\skillskeys.jpg
c:\program files\mm.BOT\Documents\Htm\img\SoulSpawn.jpg
c:\program files\mm.BOT\Documents\Htm\img\stats_ctaswitch.jpg
c:\program files\mm.BOT\Documents\Htm\img\Thumbs.db
c:\program files\mm.BOT\Documents\Htm\img\Update.ico
c:\program files\mm.BOT\Documents\Htm\img\video.jpg
c:\program files\mm.BOT\Documents\Htm\Installation.htm
c:\program files\mm.BOT\Documents\Htm\KeysSwapping.htm
c:\program files\mm.BOT\Documents\Htm\LMenu.htm
c:\program files\mm.BOT\Documents\Htm\MainPage.htm
c:\program files\mm.BOT\Documents\Htm\MercTut.htm
c:\program files\mm.BOT\Documents\Htm\MySorce.htm
c:\program files\mm.BOT\Documents\Htm\PKID.ByGroups.htm
c:\program files\mm.BOT\Documents\Htm\PKID.ByItems.htm
c:\program files\mm.BOT\Documents\Htm\PkIdListing.htm
c:\program files\mm.BOT\Documents\Htm\PkIdSamples.htm
c:\program files\mm.BOT\Documents\Htm\PkIdSyntax.htm
c:\program files\mm.BOT\Documents\Htm\SeqCommands.htm
c:\program files\mm.BOT\Documents\Htm\SeqExamples.htm
c:\program files\mm.BOT\Documents\img\favicon.ico
c:\program files\mm.BOT\Documents\img\Home.ico
c:\program files\mm.BOT\Documents\img\Notepad.ico
c:\program files\mm.BOT\Documents\img\Program.ico
c:\program files\mm.BOT\Documents\img\Update.ico
c:\program files\mm.BOT\Documents\mm.BOT.History.txt
c:\program files\mm.BOT\Logs\_STATS.ini
c:\program files\mm.BOT\Logs\Archive\_STATS.0207204958.ini
c:\program files\mm.BOT\Logs\Archive\_STATS.0207204959.ini
c:\program files\mm.BOT\Logs\Archive\Compiler.0207204958.txt
c:\program files\mm.BOT\Logs\Archive\Events_Bot.0207204958.txt
c:\program files\mm.BOT\Logs\Archive\LifeCheck.0207204958.txt
c:\program files\mm.BOT\Logs\Archive\Picked_Items.0207204958.txt
c:\program files\mm.BOT\Logs\Archive\ScanDrop_Items.0207204958.txt
c:\program files\mm.BOT\Logs\Archive\Slot.0207204958.txt
c:\program files\mm.BOT\Logs\Archive\Sold_Items.0207204958.txt
c:\program files\mm.BOT\Logs\ArchiveCurrent.exe
c:\program files\mm.BOT\Logs\Compiler.txt
c:\program files\mm.BOT\Logs\DeleteCurrent.exe
c:\program files\mm.BOT\Logs\Events_Bot.txt
c:\program files\mm.BOT\Logs\LifeCheck.txt
c:\program files\mm.BOT\Logs\Picked_Items.txt
c:\program files\mm.BOT\Logs\ScanDrop_Items.txt
c:\program files\mm.BOT\Logs\SearchInLogs.exe
c:\program files\mm.BOT\Logs\Sold_Items.txt
c:\program files\mm.BOT\mm.BOT.545.exe
c:\program files\mm.BOT\mm.BOT.546.exe
c:\program files\mm.BOT\mm.Bot.chm
c:\program files\mm.BOT\mm.BOT.MANUAL.htm
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\excel\Levels.txt
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\excel\Missiles.txt
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\excel\objects.txt
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\excel\States.txt
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\excel\SuperUniques.txt
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\HP\s1\HPS1LITS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\HP\tr\HPTRLITA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\HP\tr\HPTRLITGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\HP\tr\HPTRLITNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\HP\tr\HPTRLITS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\HP\tr\HPTRLITWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OR\TR\orTRLITNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OR\TR\ORTRLITS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OR\TR\orTRLITWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\HD\OSHDHVYA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\HD\OSHDHVYA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\HD\OSHDHVYGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\HD\OSHDHVYNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\HD\OSHDHVYS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\HD\OSHDHVYS2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\HD\OSHDHVYWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\HD\OSHDLITA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\HD\OSHDLITA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\HD\OSHDLITGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\HD\OSHDLITNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\HD\OSHDLITS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\HD\OSHDLITS2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\HD\OSHDLITWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\HD\OSHDMEDA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\HD\OSHDMEDA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\HD\OSHDMEDGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\HD\OSHDMEDNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\HD\OSHDMEDS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\HD\OSHDMEDS2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\HD\OSHDMEDWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\LA\OSLAHVYA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\LA\OSLAHVYA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\LA\OSLAHVYGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\LA\OSLAHVYNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\LA\OSLAHVYS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\LA\OSLAHVYS2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\LA\OSLAHVYWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\LA\OSLALITA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\LA\OSLALITA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\LA\OSLALITGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\LA\OSLALITNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\LA\OSLALITS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\LA\OSLALITS2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\LA\OSLALITWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\LH\OSLHLITA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\LH\OSLHLITA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\LH\OSLHLITGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\LH\OSLHLITNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\LH\OSLHLITS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\LH\OSLHLITS2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\LH\OSLHLITWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\RA\OSRAHVYA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\RA\OSRAHVYA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\RA\OSRAHVYGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\RA\OSRAHVYNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\RA\OSRAHVYS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\RA\OSRAHVYS2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\RA\OSRAHVYWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\RA\OSRALITA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\RA\OSRALITA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\RA\OSRALITGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\RA\OSRALITNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\RA\OSRALITS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\RA\OSRALITS2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\RA\OSRALITWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S1\OSS1HVYA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S1\OSS1HVYA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S1\OSS1HVYGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S1\OSS1HVYNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S1\OSS1HVYS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S1\OSS1HVYS2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S1\OSS1HVYWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S1\OSS1LITA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S1\OSS1LITA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S1\OSS1LITGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S1\OSS1LITNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S1\OSS1LITS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S1\OSS1LITS2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S1\OSS1LITWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S1\OSS1MEDA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S1\OSS1MEDA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S1\OSS1MEDGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S1\OSS1MEDNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S1\OSS1MEDS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S1\OSS1MEDS2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S1\OSS1MEDWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S2\OSS2HVYA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S2\OSS2HVYA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S2\OSS2HVYGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S2\OSS2HVYNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S2\OSS2HVYS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S2\OSS2HVYS2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S2\OSS2HVYWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S2\OSS2LITA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S2\OSS2LITA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S2\OSS2LITGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S2\OSS2LITNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S2\OSS2LITS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S2\OSS2LITS2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S2\OSS2LITWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S2\OSS2MEDA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S2\OSS2MEDA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S2\OSS2MEDGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S2\OSS2MEDNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S2\OSS2MEDS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S2\OSS2MEDS2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S2\OSS2MEDWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\S3\OSS3LITS2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\TR\OSTRHVYA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\TR\OSTRHVYA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\TR\OSTRHVYGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\TR\OSTRHVYNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\TR\OSTRHVYS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\TR\OSTRHVYS2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\TR\OSTRHVYWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\TR\OSTRLITA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\TR\OSTRLITA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\TR\OSTRLITGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\TR\OSTRLITNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\TR\OSTRLITS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\TR\OSTRLITS2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\OS\TR\OSTRLITWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\HD\REHDHVYA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\HD\REHDHVYA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\HD\REHDHVYGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\HD\REHDHVYNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\HD\REHDHVYRNHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\HD\REHDHVYS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\HD\REHDHVYWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\HD\REHDLITA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\HD\REHDLITA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\HD\REHDLITGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\HD\REHDLITNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\HD\REHDLITRNHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\HD\REHDLITS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\HD\REHDLITWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\LA\RELAHVYA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\LA\RELAHVYA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\LA\RELAHVYGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\LA\RELAHVYNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\LA\RELAHVYRNHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\LA\RELAHVYS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\LA\RELAHVYWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\LA\RELALITA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\LA\RELALITA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\LA\RELALITGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\LA\RELALITNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\LA\RELALITRNHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\LA\RELALITS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\LA\RELALITWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\LG\RELGHVYA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\LG\RELGHVYA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\LG\RELGHVYGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\LG\RELGHVYNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\LG\RELGHVYRNHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\LG\RELGHVYS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\LG\RELGHVYWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\LG\RELGLITA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\LG\RELGLITA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\LG\RELGLITGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\LG\RELGLITNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\LG\RELGLITRNHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\LG\RELGLITS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\LG\RELGLITWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\RA\RERAHVYA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\RA\RERAHVYA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\RA\RERAHVYGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\RA\RERAHVYNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\RA\RERAHVYRNHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\RA\RERAHVYS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\RA\RERAHVYWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\RA\RERALITA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\RA\RERALITA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\RA\RERALITGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\RA\RERALITNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\RA\RERALITRNHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\RA\RERALITS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\RA\RERALITWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\RH\RERHCLMA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\RH\RERHCLMA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\RH\RERHCLMGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\RH\RERHCLMNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\RH\RERHCLMRNHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\RH\RERHCLMS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\RH\RERHCLMWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\S1\RES1HVYA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\S1\RES1HVYA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\S1\RES1HVYGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\S1\RES1HVYNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\S1\RES1HVYRNHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\S1\RES1HVYS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\S1\RES1HVYWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\S1\RES1LITA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\S1\RES1LITA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\S1\RES1LITGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\S1\RES1LITNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\S1\RES1LITRNHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\S1\RES1LITS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\S1\RES1LITWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\S2\RES2HVYA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\S2\RES2HVYA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\S2\RES2HVYGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\S2\RES2HVYNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\S2\RES2HVYRNHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\S2\RES2HVYS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\S2\RES2HVYWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\S2\RES2LITA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\S2\RES2LITA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\S2\RES2LITGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\S2\RES2LITNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\S2\RES2LITRNHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\S2\RES2LITS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\S2\RES2LITWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\TR\RETRHVYA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\TR\RETRHVYA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\TR\RETRHVYGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\TR\RETRHVYNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\TR\RETRHVYRNHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\TR\RETRHVYS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\TR\RETRHVYWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\TR\RETRLITA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\TR\RETRLITA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\TR\RETRLITGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\TR\RETRLITNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\TR\RETRLITRNHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\TR\RETRLITS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\RE\TR\RETRLITWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XR\Tr\XRTRLITNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XR\Tr\XRTRLITS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XR\Tr\XRTRLITWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XS\Tr\XSTRLITNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XS\Tr\XSTRLITWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XT\tr\XTTRLITNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XT\tr\XTTRLITS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XT\tr\XTTRLITWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XV\Tr\XVTRLITNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XV\Tr\XVTRLITS1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XV\Tr\XVTRLITWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\HD\XXHDHVYA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\HD\XXHDHVYA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\HD\XXHDHVYGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\HD\XXHDHVYNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\HD\XXHDHVYRNHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\HD\XXHDHVYWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\HD\XXHDLITA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\HD\XXHDLITA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\HD\XXHDLITGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\HD\XXHDLITNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\HD\XXHDLITRNHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\HD\XXHDLITWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\HD\XXHDMEDA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\HD\XXHDMEDA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\HD\XXHDMEDGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\HD\XXHDMEDNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\HD\XXHDMEDRNHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\HD\XXHDMEDWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\RH\xxRHHvyA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\RH\xxRHHvyA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\RH\XXRHHvyGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\RH\XXRHHvyNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\RH\XXRHHvyRNHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\RH\XXRHHvyWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\RH\XXRHLITA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\RH\XXRHLITA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\RH\XXRHLITGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\RH\XXRHLITNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\RH\XXRHLITRNHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\RH\XXRHLITWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\RH\XXRHMedA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\RH\XXRHMedA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\RH\XXRHMedGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\RH\XXRHMedNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\RH\XXRHMedRNHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\RH\XXRHMedWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\S1\XXS1LITA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\S1\XXS1LITA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\SH\XXSHHvyA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\SH\XXSHHvyA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\SH\XXSHHvyGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\SH\XXSHHvyNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\SH\XXSHHvyRNHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\SH\XXSHHvyWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\SH\XXSHMedA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\SH\XXSHMedA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\SH\XXSHMedGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\SH\XXSHMedNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\SH\XXSHMedRNHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\SH\XXSHMedWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\TR\XXTRLITA1HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\TR\XXTRLITA2HTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\TR\XXTRLITGHHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\TR\XXTRLITNUHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\TR\XXTRLITRNHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\monsters\XX\TR\XXTRLITWLHTH.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\objects\2P\tr\2ptrlitnuhth.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\objects\2x\tr\2xtrlitnuhth.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\objects\JT\tr\jttrlitonhth.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\objects\TP\HD\Tphdlitonhth.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\objects\VG\tr\VGtrlitNUhth.dcc
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\tiles\ACT3\Docktown\market.dt1
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\tiles\ACT3\Kurast\terraces.dt1
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\tiles\ACT3\Travincal\travN.ds1
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\tiles\expansion\Siege\rockcliff.dt1
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\tiles\expansion\Town\TownWest.ds1
c:\program files\mm.BOT\mm.BOT.MOD.70\data\global\tiles\expansion\Wildtemple\entrance.dt1
c:\program files\mm.BOT\mm.BOT.MOD.70\data\local\FONT\LATIN\font16.dc6
c:\program files\mm.BOT\mm.BOT.MOD.70\data\local\LNG\ENG\expansionstring.tbl
c:\program files\mm.BOT\mm.BOT.MOD.70\data\local\LNG\ENG\patchstring.tbl
c:\program files\mm.BOT\mm.BOT.MOD.70\data\local\LNG\ENG\string.tbl
c:\program files\mm.BOT\mm.BOT.MOD.70\data\local\use
c:\program files\mm.BOT\mm.BOT.MOD.70\Readme.txt
c:\program files\mm.BOT\Readme.txt
c:\program files\mm.BOT\Scripts\ACT1_5NEWEST.log
c:\program files\mm.BOT\Scripts\Andy\Andy.au3
c:\program files\mm.BOT\Scripts\Andy\Andy_WP.au3
c:\program files\mm.BOT\Scripts\Andy\AndyFocus.au3
c:\program files\mm.BOT\Scripts\Andy\KukBot.log
c:\program files\mm.BOT\Scripts\Andy\mm.BOT.Include.au3
c:\program files\mm.BOT\Scripts\Config.ini
c:\program files\mm.BOT\Scripts\Example.au3
c:\program files\mm.BOT\Scripts\Meph\KukBot.log
c:\program files\mm.BOT\Scripts\Meph\Meph.au3
c:\program files\mm.BOT\Scripts\Meph\Meph_WP.au3
c:\program files\mm.BOT\Scripts\Meph\MephFocus.au3
c:\program files\mm.BOT\Scripts\Meph\mm.BOT.Include.au3
c:\program files\mm.BOT\Scripts\mm.BOT.Include.au3
c:\program files\mm.BOT\Scripts\PotBot.exe
c:\program files\mm.BOT\Scripts\PotThread.exe
c:\program files\mm.BOT\Scripts\Readme.txt
c:\program files\mm.BOT\Scripts\RECOVER_NEWST_SCR.exe
c:\program files\mm.BOT\Scripts\Shenk\mm.BOT.Include.au3
c:\program files\mm.BOT\Scripts\Shenk\ShenkFocus.au3
c:\program files\mm.BOT\Scripts\Slot1.au3
c:\program files\mm.BOT\Scripts\Slot2.au3
c:\program files\mm.BOT\Scripts\StartPotthread.exe
c:\program files\mm.BOT\Scripts\Trav\mm.BOT.Include.au3
c:\program files\mm.BOT\Scripts\Trav\TravFocus.au3
c:\program files\mm.BOT\Tools\autoit-v3.1.0-setup.exe
c:\program files\mm.BOT\Tools\ImportantRead.txt
c:\program files\mm.BOT\Tools\mm.FList\mm.FList.exe
c:\program files\mm.BOT\Tools\mm.FList\mm.FList.ini
c:\program files\mm.BOT\Tools\mm.ItemReader\mm.ItemReader.exe
c:\program files\mm.BOT\Tools\mm.ItemReader\mm.ItemReader.ini
c:\program files\mm.BOT\Tools\mm.RBlocks\mm.RBlocks.exe
c:\program files\mm.BOT\Tools\Readme.txt
c:\windows\system32\abarqj.dll
c:\windows\system32\abufkm.dll
c:\windows\system32\ailejm.dll
c:\windows\system32\amqbtsge.ini
c:\windows\system32\avetenef.ini
c:\windows\system32\awttqqii.dll
c:\windows\system32\bakowayu.dll
c:\windows\system32\bbsssjah.ini
c:\windows\system32\bgdqixxy.ini
c:\windows\system32\biawnkvf.ini
c:\windows\system32\bkoney.dll
c:\windows\system32\bnklxu.dll
c:\windows\system32\bnvujdpd.dll
c:\windows\system32\bqgkekqs.ini
c:\windows\system32\bsqkpuvd.dll
c:\windows\system32\cdwzze.dll
c:\windows\system32\cvoubdti.dll
c:\windows\system32\cxfxez.dll
c:\windows\system32\dbvohk.dll
c:\windows\system32\dcbtuyli.dll
c:\windows\system32\dizagiji.dll
c:\windows\system32\djfvcfbb.dll
c:\windows\system32\dlqmxk.dll
c:\windows\system32\dlskfgfb.dll
c:\windows\system32\dnkegsvu.dll
c:\windows\system32\dodiwake.dll
c:\windows\system32\dovhiu.dll
c:\windows\system32\duafsx.dll
c:\windows\system32\ebkxwh.dll
c:\windows\system32\ebntntwy.dll
c:\windows\system32\efykpxwm.ini
c:\windows\system32\enhlgxey.dll
c:\windows\system32\enwsdx.dll
c:\windows\system32\epmjedyg.ini
c:\windows\system32\extzkd.dll
c:\windows\system32\fdhdhq.dll
c:\windows\system32\feneteva.dll
c:\windows\system32\fnadkwqc.dll
c:\windows\system32\fokebaka.dll
c:\windows\system32\fvtvya.dll
c:\windows\system32\gbunppfc.ini
c:\windows\system32\gdfkrktj.dll
c:\windows\system32\gdhtre.dll
c:\windows\system32\gofovobe.dll
c:\windows\system32\gwznig.dll
c:\windows\system32\gyuqrw.dll
c:\windows\system32\gzewew.dll
c:\windows\system32\hatakuvu.dll
c:\windows\system32\hlacvrii.dll
c:\windows\system32\hpusuc.dll
c:\windows\system32\hraooypb.dll
c:\windows\system32\hratdsnr.dll
c:\windows\system32\hrkcpg.dll
c:\windows\system32\huydpx.dll
c:\windows\system32\ijigazid.ini
c:\windows\system32\itibpf.dll
c:\windows\system32\itrhwwnw.dll
c:\windows\system32\ivhehraj.dll
c:\windows\system32\jkkJcYOF.dll
c:\windows\system32\juffvh.dll
c:\windows\system32\juxeyebm.ini
c:\windows\system32\kbprcvuy.dll
c:\windows\system32\kezomeho.dll
c:\windows\system32\kogevovu.dll
c:\windows\system32\kpwrvdbm.dll
c:\windows\system32\krvynbfo.dll
c:\windows\system32\kywylchr.dll
c:\windows\system32\lenebimo.dll
c:\windows\system32\lfhblimv.dll
c:\windows\system32\ljdcmz.dll
c:\windows\system32\ljqxvoli.dll
c:\windows\system32\lkelkimj.dll
c:\windows\system32\luxpti.dll
c:\windows\system32\moepkf.dll
c:\windows\system32\ndcjxuqh.dll
c:\windows\system32\nhgssdue.dll
c:\windows\system32\nvnybm.dll
c:\windows\system32\ojikhldp.ini
c:\windows\system32\pghdjnxt.ini
c:\windows\system32\phqmpurp.dll
c:\windows\system32\pinugevu.dll
c:\windows\system32\pkfnqd.dll
c:\windows\system32\pklnpf.dll
c:\windows\system32\pnotrpaa.dll
c:\windows\system32\ptgvez.dll
c:\windows\system32\ptifiq.dll
c:\windows\system32\pumuviba.dll
c:\windows\system32\qcuwjbld.dll
c:\windows\system32\qpmrfmlh.dll
c:\windows\system32\qugtcemu.dll
c:\windows\system32\qusyvd.dll
c:\windows\system32\qvnhkkpv.dll
c:\windows\system32\rbgidz.dll
c:\windows\system32\rcwnfpnj.dll
c:\windows\system32\rhttddaq.ini
c:\windows\system32\rjjxxktx.ini
c:\windows\system32\rlkzcc.dll
c:\windows\system32\sfohrjhb.dll
c:\windows\system32\shdrdlxt.ini
c:\windows\system32\shgdys.dll
c:\windows\system32\sqbbqrtm.ini
c:\windows\system32\sqxqefip.dll
c:\windows\system32\svpjjdcm.dll
c:\windows\system32\svubbp.dll
c:\windows\system32\swvqmj.dll
c:\windows\system32\taetbrtp.dll
c:\windows\system32\tafusopu.dll
c:\windows\system32\tbjsxysg.dll
c:\windows\system32\tbkwre.dll
c:\windows\system32\tepividu.dll
c:\windows\system32\tkpmhhth.ini
c:\windows\system32\tlgvemjs.dll
c:\windows\system32\tqcqui.dll
c:\windows\system32\tsbpxe.dll
c:\windows\system32\txejgkse.dll
c:\windows\system32\ujufakeq.dll
c:\windows\system32\uleifb.dll
c:\windows\system32\uneomz.dll
c:\windows\system32\uxjiwjyn.dll
c:\windows\system32\uyjoik.dll
c:\windows\system32\vfajsr.dll
c:\windows\system32\vhsprxtb.ini
c:\windows\system32\vicnrxco.ini
c:\windows\system32\vjlwwpkn.ini
c:\windows\system32\vjwyzj.dll
c:\windows\system32\vmwwoiyy.dll
c:\windows\system32\vqlvbx.dll
c:\windows\system32\vujuxg.dll
c:\windows\system32\wbqwalbf.dll
c:\windows\system32\wemilera.dll
c:\windows\system32\wkdfrbuv.dll
c:\windows\system32\wnjywv.dll
c:\windows\system32\woebym.dll
c:\windows\system32\wrtwve.dll
c:\windows\system32\wrueuksm.ini
c:\windows\system32\wvejqu.dll
c:\windows\system32\wyyhej.dll
c:\windows\system32\xctgbymd.ini
c:\windows\system32\xhlxdspf.ini
c:\windows\system32\xihgrony.dll
c:\windows\system32\xintrfcv.ini
c:\windows\system32\xkpjlwqd.dll
c:\windows\system32\xowfyxdo.ini
c:\windows\system32\xwnvbenk.dll
c:\windows\system32\yqfakbdj.dll
c:\windows\system32\ysrnixcx.ini
c:\windows\Tasks\wafzahei.job

.
((((((((((((((((((((((((( Files Created from 2009-02-24 to 2009-03-24 )))))))))))))))))))))))))))))))
.

2009-03-19 19:15 . 2009-03-19 19:15 d——– c:\program files\cdv USA
2009-03-17 10:47 . 2009-03-17 10:47 d——– c:\documents and settings\All Users\Application Data\Fallout3
2009-03-15 21:58 . 2009-03-15 21:58 d——– c:\program files\7-Zip
2009-03-14 15:32 . 2009-03-14 15:32 d——– c:\program files\Viewpoint
2009-03-14 15:32 . 2009-03-14 15:32 d——– c:\documents and settings\All Users\Application Data\Viewpoint
2009-03-13 14:17 . 2009-03-13 14:17 d——– c:\program files\FLV Player
2009-03-12 10:30 . 2009-03-12 10:30 d——– c:\documents and settings\Cory\Application Data\Malwarebytes
2009-03-09 12:37 . 2009-03-09 12:37 d——– c:\program files\HandBrake
2009-03-02 12:39 . 2009-03-02 12:43 d——– c:\program files\RivaTuner v2.24
2009-03-01 20:39 . 2009-03-14 14:24 189,496 –a—— c:\windows\system32\PnkBstrB.xtr
2009-03-01 17:16 . 2009-03-01 17:28 d——– c:\program files\ATITool
2009-02-26 22:26 . 2009-02-26 22:26 d——– c:\program files\HP
2009-02-26 22:26 . 2007-03-28 15:01 118,272 -ra—— c:\windows\system32\hpvqclm02.dll
2009-02-26 22:26 . 2008-04-13 14:47 25,856 –a—— c:\windows\system32\drivers\usbprint.sys
2009-02-26 22:26 . 2008-04-13 14:47 25,856 –a–c— c:\windows\system32\dllcache\usbprint.sys
2009-02-26 14:46 . 2009-02-26 14:46 42,320 –a—— c:\windows\system32\xfcodec.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-24 21:47 ——— d—–w c:\documents and settings\Cory\Application Data\WTablet
2009-03-24 21:18 ——— d—–w c:\program files\Trillian
2009-03-24 17:23 ——— d—–w c:\program files\Runes of Magic
2009-03-24 16:41 ——— d—–w c:\program files\Common Files\Wise Installation Wizard
2009-03-24 16:41 ——— d—–w c:\program files\AGEIA Technologies
2009-03-24 16:41 ——— d—–w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-03-24 16:39 13,935 —-a-w c:\windows\system32\drivers\fwdrv.err
2009-03-24 10:41 ——— d—–w c:\documents and settings\LocalService\Application Data\WTablet
2009-03-24 10:38 ——— d—–w c:\program files\LogMeIn
2009-03-24 02:47 ——— d—–w c:\documents and settings\Cory\Application Data\U3
2009-03-24 02:22 ——— d—–w c:\documents and settings\Cory\Application Data\FrostWire
2009-03-18 00:36 ——— d—–w c:\documents and settings\Cory\Application Data\Xfire
2009-03-17 14:47 ——— d–h–w c:\program files\InstallShield Installation Information
2009-03-17 14:47 ——— d—–w c:\program files\Bethesda Softworks
2009-03-17 14:38 ——— d—–w c:\documents and settings\Cory\Application Data\uTorrent
2009-03-14 16:16 139,984 —-a-w c:\windows\system32\drivers\PnkBstrK.sys
2009-03-14 01:53 ——— d—–w c:\program files\Xfire
2009-03-10 17:52 ——— d—–w c:\program files\StepMania
2009-03-08 22:15 ——— d—–w c:\program files\Steam
2009-03-02 01:02 ——— d—–w c:\program files\Electronic Arts
2009-02-27 01:37 ——— d—–w c:\documents and settings\All Users\Application Data\FLEXnet
2009-02-23 03:20 ——— d—–w c:\program files\BitPim
2009-02-19 18:28 ——— d—–w c:\documents and settings\Cory\Application Data\VMware
2009-02-19 18:27 ——— d—–w c:\documents and settings\LocalService\Application Data\VMware
2009-02-19 18:27 ——— d—–w c:\documents and settings\All Users\Application Data\VMware
2009-02-18 13:40 ——— d—–w c:\program files\EA GAMES
2009-02-09 16:04 ——— d—–w c:\documents and settings\All Users\Application Data\Microsoft Help
2009-02-09 16:03 ——— d—–w c:\program files\Microsoft XNA
2009-02-07 17:09 ——— d—–w c:\program files\Opera
2009-02-03 22:03 ——— d—–w c:\program files\FrostWire
2009-02-03 22:00 ——— d—–w c:\program files\LimeWire
2009-02-03 21:48 ——— d—–w c:\program files\Java
2009-02-02 22:11 ——— d—–w c:\program files\Teamspeak2_RC2
2009-02-02 21:00 ——— d—–w c:\documents and settings\Cory\Application Data\LimeWire
2009-02-01 17:36 ——— d—–w c:\program files\SpeedFan
2009-01-31 22:37 ——— d—–w c:\documents and settings\Cory\Application Data\fretsonfire
2009-01-31 20:16 ——— d—–w c:\program files\Frets on Fire
2009-01-30 01:45 ——— d—–w c:\program files\Realtek AC97
2009-01-28 23:46 ——— d—–w c:\program files\Microsoft Silverlight
2009-01-26 17:04 ——— d—–w c:\program files\PayPal
2009-01-25 02:47 ——— d—–w c:\program files\iTunes
2009-01-25 02:47 ——— d—–w c:\program files\iPod
2009-01-25 02:47 ——— d—–w c:\program files\Common Files\Apple
2009-01-25 02:47 ——— d—–w c:\documents and settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2009-01-25 02:46 ——— d—–w c:\program files\QuickTime
2009-01-25 02:46 ——— d—–w c:\program files\Bonjour
2009-01-25 02:45 ——— d—–w c:\program files\Apple Software Update
2009-01-24 18:05 ——— d—–w c:\documents and settings\NetworkService\Application Data\VMware
2008-12-31 11:41 22,328 —-a-w c:\documents and settings\Cory\Application Data\PnkBstrK.sys
2008-11-17 00:59 36,868 —-a-w c:\program files\uninst-Particular.exe
2008-09-05 17:53 9,103,872 —-a-w c:\documents and settings\Cory\ELI.exe
2007-05-22 23:14 8,784 —-a-w c:\program files\mozilla firefox\plugins\ractrlkeyhook.dll
2007-05-22 23:17 245,408 —-a-w c:\program files\mozilla firefox\plugins\unicows.dll
2009-01-15 11:47 67,688 —-a-w c:\program files\mozilla firefox\components\jar50.dll
2009-01-15 11:47 54,368 —-a-w c:\program files\mozilla firefox\components\jsd3250.dll
2009-01-15 11:47 34,944 —-a-w c:\program files\mozilla firefox\components\myspell.dll
2009-01-15 11:47 46,712 —-a-w c:\program files\mozilla firefox\components\spellchk.dll
2009-01-15 11:47 172,136 —-a-w c:\program files\mozilla firefox\components\xpinstal.dll
2008-07-01 06:02 66,936 –sha-w c:\windows\hrinfo_0.drv
2008-07-01 07:02 66,936 –sha-w c:\windows\hrinfo_1.drv
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseSVN]
@="{30351346-7B7D-4FCC-81B4-1E394CA267EB}"
[HKEY_CLASSES_ROOT\CLSID\{30351346-7B7D-4FCC-81B4-1E394CA267EB}]
2007-08-26 12:40 536576 –a—— c:\program files\TortoiseSVN\bin\tortoisesvn.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseSVN]
@="{30351347-7B7D-4FCC-81B4-1E394CA267EB}"
[HKEY_CLASSES_ROOT\CLSID\{30351347-7B7D-4FCC-81B4-1E394CA267EB}]
2007-08-26 12:40 536576 –a—— c:\program files\TortoiseSVN\bin\tortoisesvn.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseSVN]
@="{30351348-7B7D-4FCC-81B4-1E394CA267EB}"
[HKEY_CLASSES_ROOT\CLSID\{30351348-7B7D-4FCC-81B4-1E394CA267EB}]
2007-08-26 12:40 536576 –a—— c:\program files\TortoiseSVN\bin\tortoisesvn.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseSVN]
@="{3035134B-7B7D-4FCC-81B4-1E394CA267EB}"
[HKEY_CLASSES_ROOT\CLSID\{3035134B-7B7D-4FCC-81B4-1E394CA267EB}]
2007-08-26 12:40 536576 –a—— c:\program files\TortoiseSVN\bin\tortoisesvn.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseSVN]
@="{3035134C-7B7D-4FCC-81B4-1E394CA267EB}"
[HKEY_CLASSES_ROOT\CLSID\{3035134C-7B7D-4FCC-81B4-1E394CA267EB}]
2007-08-26 12:40 536576 –a—— c:\program files\TortoiseSVN\bin\tortoisesvn.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseSVN]
@="{3035134D-7B7D-4FCC-81B4-1E394CA267EB}"
[HKEY_CLASSES_ROOT\CLSID\{3035134D-7B7D-4FCC-81B4-1E394CA267EB}]
2007-08-26 12:40 536576 –a—— c:\program files\TortoiseSVN\bin\tortoisesvn.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseSVN]
@="{3035134E-7B7D-4FCC-81B4-1E394CA267EB}"
[HKEY_CLASSES_ROOT\CLSID\{3035134E-7B7D-4FCC-81B4-1E394CA267EB}]
2007-08-26 12:40 536576 –a—— c:\program files\TortoiseSVN\bin\tortoisesvn.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-10-07 13574144]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
2007-09-23 11:10 229376 c:\program files\Stardock\Object Desktop\WindowBlinds\WbSrv.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LMIinit]
2008-05-28 12:32 87352 c:\windows\system32\LMIinit.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"SENTINEL"= snti386.dll
"VIDC.XFR1"= xfcodec.dll
"msacm.ac3filter"= ac3filter.acm
"vidc.hfyu"= huffyuv.dll
"msacm.divxa32"= DivXa32.acm

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^108Mbps Wireless LAN Adapter Configuration Utility.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\108Mbps Wireless LAN Adapter Configuration Utility.lnk
backup=c:\windows\pss\108Mbps Wireless LAN Adapter Configuration Utility.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk
backup=c:\windows\pss\Adobe Gamma Loader.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Monitor Apache Servers.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Monitor Apache Servers.lnk
backup=c:\windows\pss\Monitor Apache Servers.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Privoxy.lnk]
backup=c:\windows\pss\Privoxy.lnkCommon Startup
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Privoxy.lnk

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Reg.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Reg.lnk
backup=c:\windows\pss\Reg.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Cory^Start Menu^Programs^Startup^IntelliAdmin Agent Tray Icon.lnk]
path=c:\documents and settings\Cory\Start Menu\Programs\Startup\IntelliAdmin Agent Tray Icon.lnk
backup=c:\windows\pss\IntelliAdmin Agent Tray Icon.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Cory^Start Menu^Programs^Startup^MagicDisc.lnk]
path=c:\documents and settings\Cory\Start Menu\Programs\Startup\MagicDisc.lnk
backup=c:\windows\pss\MagicDisc.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Cory^Start Menu^Programs^Startup^WampServer.lnk]
path=c:\documents and settings\Cory\Start Menu\Programs\Startup\WampServer.lnk
backup=c:\windows\pss\WampServer.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Cory^Start Menu^Programs^Startup^WinMySQLadmin.lnk]
path=c:\documents and settings\Cory\Start Menu\Programs\Startup\WinMySQLadmin.lnk
backup=c:\windows\pss\WinMySQLadmin.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Cory^Start Menu^Programs^Startup^Xfire.lnk]
backup=c:\windows\pss\Xfire.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount]
–a—— 2007-07-02 06:27 219520 c:\program files\Alcohol Soft\Alcohol 120\AxCmd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\amd_dc_opt]
–a—— 2008-07-22 13:53 77824 c:\program files\AMD\Dual-Core Optimizer\amd_dc_opt.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ANIWZCS2Service]
–a—— 2007-01-19 11:49 49152 c:\program files\ANI\ANIWZCS2 Service\WZCSLDR2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CoolSwitch]
–a—— 2002-03-19 17:30 45632 c:\windows\system32\TaskSwitch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
–a—— 2008-04-13 20:12 15360 c:\windows\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\D-Link RangeBooster G WUA-2340]
–a—— 2008-09-23 22:45 1667072 c:\program files\D-Link\RangeBooster G WUA-2340\AirPlusCFG.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
–a—— 2007-11-17 07:53 171464 c:\program files\DAEMON Tools\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core]
–a—— 2008-07-22 13:34 2772992 c:\program files\Electronic Arts\EADM\Core.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
–a—— 2006-10-27 00:47 31016 c:\program files\Microsoft Office\Office12\GrooveMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\igndlm.exe]
–a—— 2008-08-01 16:36 1103216 c:\program files\Download Manager\DLM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
–a—— 2009-01-06 14:06 290088 c:\program files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn GUI]
–a—— 2007-04-17 14:03 63048 c:\program files\LogMeIn\x86\LogMeInSystray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
–a—— 2008-10-07 14:33 13574144 c:\windows\system32\nvcpl.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
–a—— 2008-10-07 14:33 86016 c:\windows\system32\nvmctray.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ProxyCap]
–a—— 2008-02-22 02:04 229376 c:\progra~1\PROXYL~1\ProxyCap\ProxyCap.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
–a—— 2006-11-06 04:27 200704 c:\program files\PowerISO\PWRISOVM.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
–a—— 2009-01-05 17:18 413696 c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RGSC]
–a—— 2009-01-05 19:07 306088 c:\program files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
-rahs—- 2008-01-28 11:43 2097488 c:\program files\Spybot - Search & Destroy\TeaTimer.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
–a—— 2009-03-08 18:13 1410296 c:\program files\Steam\Steam.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
–a—— 2007-07-12 04:00 132496 c:\program files\Java\jre1.6.0_02\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Vidalia]
–a—— 2007-11-22 17:49 12889088 c:\program files\Vidalia Bundle\Vidalia\vidalia.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VMware hqtray]
–a—— 2008-05-16 01:51 55856 c:\program files\VMware\VMware Workstation\hqtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vmware-tray]
–a—— 2008-05-16 01:51 72240 c:\program files\VMware\VMware Workstation\vmware-tray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zune Launcher]
–a—— 2007-11-15 22:51 166304 c:\program files\Zune\ZuneLauncher.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
–a—— 2008-10-07 14:33 1630208 c:\windows\system32\nwiz.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
–a—— 2007-04-16 16:28 577536 c:\windows\soundman.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"ZuneNetworkSvc"=2 (0x2)
"XAMPP"=3 (0x3)
"WMPNetworkSvc"=3 (0x3)
"VMware NAT Service"=2 (0x2)
"vmount2"=2 (0x2)
"VMnetDHCP"=2 (0x2)
"VMAuthdService"=2 (0x2)
"ufad-ws60"=3 (0x3)
"StarWindServiceAE"=2 (0x2)
"SPF4"=2 (0x2)
"rpcapd"=3 (0x3)
"PnkBstrA"=2 (0x2)
"ose"=3 (0x3)
"odserv"=3 (0x3)
"NtIrcd"=2 (0x2)
"NetOp Host for NT Service"=2 (0x2)
"mysql"=2 (0x2)
"mi-raysat_3dsmax9_32"=2 (0x2)
"IntelliAdminRC"=2 (0x2)
"idsvc"=3 (0x3)
"IDriverT"=3 (0x3)
"FLEXnet Licensing Service"=3 (0x3)
"FileZilla Server"=2 (0x2)
"Bonjour Service"=2 (0x2)
"Autodesk Licensing Service"=2 (0x2)
"aawservice"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Sunbelt Software\\Personal Firewall\\kpf4gui.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Autodesk\\3ds Max 9\\3dsmax.exe"=
"c:\\Program Files\\Autodesk\\Backburner\\monitor.exe"=
"c:\\Program Files\\Autodesk\\Backburner\\manager.exe"=
"c:\\Program Files\\Autodesk\\Backburner\\server.exe"=
"c:\\TorqueMMOKit152\\pythonw.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Sierra Entertainment\\World in Conflict\\wic.exe"=
"c:\\Program Files\\Sierra Entertainment\\World in Conflict\\wic_online.exe"=
"c:\\Program Files\\Sierra Entertainment\\World in Conflict\\wic_ds.exe"=
"c:\\Program Files\\Java\\jre1.6.0_02\\bin\\javaw.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Atari\\Neverwinter Nights 2\\nwn2main.exe"=
"c:\\Program Files\\Atari\\Neverwinter Nights 2\\nwn2main_amdxp.exe"=
"c:\\Program Files\\Atari\\Neverwinter Nights 2\\nwupdate.exe"=
"c:\\Program Files\\Atari\\Neverwinter Nights 2\\nwn2server.exe"=
"c:\\Program Files\\Unreal Tournament 3\\Binaries\\UT3.exe"=
"c:\\Program Files\\Danware Data\\NetOp School\\Student\\nstdw32.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaWmp.exe"=
"c:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaW.exe"=
"c:\\Program Files\\Rockstar Games\\Rockstar Games Social Club\\RGSCLauncher.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\FrostWire\\FrostWire.exe"=
"c:\\Program Files\\Electronic Arts\\Burnout™ Paradise The Ultimate Box\\BurnoutLauncher.exe"=
"c:\\Program Files\\Electronic Arts\\Burnout™ Paradise The Ultimate Box\\BurnoutConfigTool.exe"=
"c:\\Program Files\\Electronic Arts\\Burnout™ Paradise The Ultimate Box\\BurnoutParadise.exe"=
"c:\\Program Files\\Electronic Arts\\BattleForgeBeta\\Bootstrapper.exe"=
"c:\\Program Files\\Electronic Arts\\BattleForgeBeta\\BattleForge.exe"=
"c:\\Program Files\\Steam\\SteamApps\\common\\call of duty 4\\iw3sp.exe"=
"c:\\Program Files\\Steam\\SteamApps\\common\\call of duty 4\\iw3mp.exe"=
"c:\\Program Files\\Ventrilo\\Ventrilo.exe"=
"c:\\Program Files\\TortoiseSVN\\bin\\TSVNCache.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"6112:TCP"= 6112:TCP:Titan
"6112:UDP"= 6112:UDP:Titan2
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
"2705:TCP"= 2705:TCP:IntelliAdmin_Net

R1 fwdrv;Firewall Driver;c:\windows\system32\drivers\fwdrv.sys [2007-04-26 302000]
R1 hwinterface;hwinterface;c:\windows\system32\drivers\hwinterface.sys [2008-08-17 3026]
R1 khips;Kerio HIPS Driver;c:\windows\system32\drivers\khips.sys [2007-04-26 72624]
R1 NHostNT1;NetOp Driver 1 ver. 9.00 (2007058);c:\windows\system32\drivers\NHOSTNT1.SYS [2008-12-12 92432]
R2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files\LogMeIn\x86\rainfo.sys [2007-04-17 12856]
R2 LMIRfsDriver;LogMeIn Remote File System Driver;c:\windows\system32\drivers\LMIRfsDriver.sys [2007-09-07 45848]
R2 SVKP;SVKP;c:\windows\system32\SVKP.sys [2008-01-03 2368]
R2 TabletServicePen;TabletServicePen;c:\windows\system32\Pen_Tablet.exe [2008-03-31 1373480]
R3 Alpham1;Ideazon Merc USB Human Interface Device;c:\windows\system32\drivers\Alpham1.sys [2007-07-23 42624]
R3 Alpham2;Ideazon Merc MM USB Human Interface Device;c:\windows\system32\drivers\Alpham2.sys [2007-03-20 18432]
R3 NHOSTNT3;NetOp Driver 3 ver. 9.00 (2007058) (NHOSTNT3);c:\windows\system32\drivers\NHOSTNT3.SYS [2008-12-12 3216]
S3 A5AGU;D-Link USB Wireless Network Adapter Service;c:\windows\system32\drivers\A5AGU.sys [2006-05-08 386784]
S3 hamachi_oem;PlayLinc Adapter;c:\windows\system32\drivers\gan_adapter.sys [2006-08-28 10664]
S3 jswpsapi;Jumpstart Wifi Protected Setup;c:\program files\D-Link\RangeBooster G WUA-2340\JSWUtil\jswpsapi.exe [2008-10-14 356434]
S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2007-11-06 34064]
S3 WtfProtector;WtfProtector;\??\g:\downloads\Diablo Stuff\WTFPK_MOD\WtfProtector.sys –> g:\downloads\Diablo Stuff\WTFPK_MOD\WtfProtector.sys [?]
S3 XDva020;XDva020;\??\c:\windows\system32\XDva020.sys –> c:\windows\system32\XDva020.sys [?]
S4 IntelliAdminRC;IntelliAdminRC;c:\program files\IntelliAdmin\Agent\Agent.exe [2006-10-18 455168]
S4 LMIRfsClientNP;LMIRfsClientNP; [x]
S4 NetOp Host for NT Service;NetOp Helper ver. 9.00 (2007058);c:\program files\Danware Data\NetOp School\Student\NHOSTSVC.EXE [2008-12-12 1372432]
S4 NtIrcd;NettalkIRCD;c:\program files\NettalkIRCD\NettalkIRCD.exe [2006-03-01 459776]
S4 Saveveemp;Saveveemp; [x]
S4 SPF4;Sunbelt Personal Firewall 4;c:\program files\Sunbelt Software\Personal Firewall\kpf4ss.exe [2007-04-26 1234480]
S4 XAMPP;XAMPP Service;c:\xampp\service.exe –> c:\xampp\service.exe [?]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{00b42f4c-ffc1-11dd-a5e1-0016e6834cb5}]
\Shell\AutoRun\command - G:\setup.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2c0c7bd2-85c2-11dc-8d07-005056c00008}]
\Shell\AutoRun\command - I:\LaunchU3.exe
.
- - - - ORPHANS REMOVED - - - -

BHO-{55141ee0-5d46-4d01-ab8a-1663a78df868} - c:\windows\system32\dodiwake.dll
BHO-{8d1886f4-050e-4b3e-b8d9-12a137d212fc} - c:\windows\system32\dbvohk.dll
Notify-NavLogon - (no file)
MSConfigStartUp-945d2293 - c:\windows\system32\sqkekgqb.dll
MSConfigStartUp-PlayNC Launcher - c:\program files\ncsoft\launcher\NCLauncher.exe


.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.daemonsearch.com/intl/
uInternet Settings,ProxyOverride = *.local
IE: + &Mass Downloader: download this file - c:\program files\Mass Downloader\Add_Url.htm
IE: + Mass Downloader: download &All files - c:\program files\Mass Downloader\Add_All.htm
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
LSP: %SystemRoot%\system32\PrxerDrv.dll
LSP: w2pxdrv.dll
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Cory\Application Data\Mozilla\Firefox\Profiles\fho4f38p.default\
FF - component: c:\program files\Mozilla Firefox\components\xpinstal.dll
FF - component: c:\program files\PayPal\PayPal Plug-In\components\PayPalPlugin.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-24 17:47:34
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
——————— DLLs Loaded Under Running Processes ———————

- - - - - - - > 'winlogon.exe'(868)
c:\windows\system32\LMIinit.dll
c:\windows\system32\LMIRfsClientNP.dll
c:\program files\Stardock\Object Desktop\WindowBlinds\wbsrv.dll

- - - - - - - > 'lsass.exe'(924)
c:\windows\system32\w2pxdrv.dll

- - - - - - - > 'explorer.exe'(3480)
c:\program files\TortoiseSVN\bin\tortoisesvn.dll
c:\program files\TortoiseSVN\bin\intl3_svn.dll
c:\windows\system32\LMIRfsClientNP.dll
c:\program files\Common Files\Microsoft Shared\OFFICE12\MSOXEV.DLL
.
———————— Other Running Processes ————————
.
c:\windows\system32\acs.exe
c:\program files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
c:\program files\Apache Group\Apache2\bin\Apache.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\LogMeIn\x86\ramaint.exe
c:\program files\LogMeIn\x86\LogMeIn.exe
c:\program files\Apache Group\Apache2\bin\Apache.exe
c:\program files\LogMeIn\x86\LMIGuardian.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\PnkBstrB.exe
c:\windows\system32\ZuneBusEnum.exe
c:\windows\system32\WTablet\Pen_TabletUser.exe
c:\windows\system32\wscntfy.exe
c:\program files\TortoiseSVN\bin\TSVNCache.exe
c:\windows\system32\verclsid.exe
.
**************************************************************************
.
Completion time: 2009-03-24 17:59:14 - machine was rebooted
ComboFix-quarantined-files.txt 2009-03-24 21:59:07
ComboFix2.txt 2008-04-07 14:45:55

Pre-Run: 15,913,504,768 bytes free
Post-Run: 15,970,234,368 bytes free

WindowsXP-KB310994-SP2-Home-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /fastdetect /NoExecute=OptIn /usepmtimer
C:\chain0="Mac OS X86"

1001 — E O F — 2009-02-11 10:03:59

certainly caught a lot of randomly named .dll's in the sys32 folder.

Thanks so much for your help thus far. Here's the newest logs…


OTMoveIt3

========== SERVICES/DRIVERS ==========

Service\Driver LMIRfsClientNP deleted successfully.

Service\Driver Saveveemp deleted successfully.
========== REGISTRY ==========
HKEY_LOCAL_MACHINE\software\microsoft\security center\\"UpdatesDisableNotify"|dword:00000000 /E : value set successfully!
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\Cory\LOCALS~1\Temp\hsperfdata_Cory\2300 scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Cory\LOCALS~1\Temp\fla115.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Java cache emptied.
FireFox cache emptied.
File delete failed. C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0002\adoc.bx scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0002\md.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0002\url.ax scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0002\w.ax scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0002\wb.vx scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0001\adoc.bx scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0001\md.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0001\url.ax scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0001\w.ax scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0001\wb.vx scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0000\adoc.bx scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0000\md.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0000\url.ax scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0000\w.ax scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0000\wb.vx scheduled to be deleted on reboot.
Opera cache emptied.
Temp folders emptied.
 
OTMoveIt3 by OldTimer - Version 1.0.9.0 log created on 03242009_214628

Files moved on Reboot…
File C:\DOCUME~1\Cory\LOCALS~1\Temp\hsperfdata_Cory\2300 not found!
File C:\DOCUME~1\Cory\LOCALS~1\Temp\fla115.tmp not found!
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.
C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0002\adoc.bx moved successfully.
C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0002\md.dat moved successfully.
C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0002\url.ax moved successfully.
C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0002\w.ax moved successfully.
C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0002\wb.vx moved successfully.
C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0001\adoc.bx moved successfully.
C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0001\md.dat moved successfully.
C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0001\url.ax moved successfully.
C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0001\w.ax moved successfully.
C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0001\wb.vx moved successfully.
C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0000\adoc.bx moved successfully.
C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0000\md.dat moved successfully.
C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0000\url.ax moved successfully.
C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0000\w.ax moved successfully.
C:\Documents and Settings\Cory\Local Settings\Application Data\Opera\Opera\Profile\vps\0000\wb.vx moved successfully.

VirusTotal

File hrinfo_0.drv received on 03.25.2009 14:53:01 (CET)
Current status:	finished 
Result: 0/40 (0%)

Antivirus	Version	Last Update	Result
a-squared	4.0.0.101	2009.03.25	-
AhnLab-V3	5.0.0.2	2009.03.25	-
AntiVir	7.9.0.126	2009.03.25	-
Antiy-AVL	2.0.3.1	2009.03.25	-
Authentium	5.1.2.4	2009.03.24	-
Avast	4.8.1335.0	2009.03.24	-
AVG	8.5.0.283	2009.03.25	-
BitDefender	7.2	2009.03.25	-
CAT-QuickHeal	10.00	2009.03.25	-
ClamAV	0.94.1	2009.03.25	-
Comodo	1084	2009.03.25	-
DrWeb	4.44.0.09170	2009.03.25	-
eSafe	7.0.17.0	2009.03.24	-
eTrust-Vet	31.6.6416	2009.03.25	-
F-Prot	4.4.4.56	2009.03.24	-
F-Secure	8.0.14470.0	2009.03.25	-
Fortinet	3.117.0.0	2009.03.25	-
GData	19	2009.03.25	-
Ikarus	T3.1.1.48.0	2009.03.25	-
K7AntiVirus	7.10.680	2009.03.24	-
Kaspersky	7.0.0.125	2009.03.25	-
McAfee	5563	2009.03.24	-
McAfee+Artemis	5563	2009.03.24	-
McAfee-GW-Edition	6.7.6	2009.03.25	-
Microsoft	1.4502	2009.03.25	-
NOD32	3961	2009.03.25	-
Norman	6.00.06	2009.03.24	-
nProtect	2009.1.8.0	2009.03.25	-
Panda	10.0.0.10	2009.03.24	-
PCTools	4.4.2.0	2009.03.25	-
Prevx1	V2	2009.03.25	-
Rising	21.22.21.00	2009.03.25	-
Sophos	4.39.0	2009.03.25	-
Sunbelt	3.2.1858.2	2009.03.25	-
Symantec	1.4.4.12	2009.03.25	-
TheHacker	[removed].290	2009.03.25	-
TrendMicro	8.700.0.1004	2009.03.25	-
VBA32	3.12.10.1	2009.03.24	-
ViRobot	2009.3.25.1663	2009.03.25	-
VirusBuster	4.6.5.0	2009.03.24	-

DDS

DDS (Ver_09-03-16.01) - NTFSx86  
Run by [removed] at 10:02:00.60 on 2009-03-25
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_02
Microsoft Windows XP Home Edition  5.1.2600.3.1252.1.1033.18.2047.1430 [GMT -4:00]

FW: Sunbelt Personal Firewall *disabled*

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\WINDOWS\System32\acs.exe
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
C:\Program Files\Apache Group\Apache2\bin\Apache.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\LogMeIn\x86\RaMaint.exe
C:\Program Files\LogMeIn\x86\LogMeIn.exe
C:\Program Files\LogMeIn\x86\LMIGuardian.exe
C:\Program Files\Apache Group\Apache2\bin\Apache.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\System32\svchost.exe -k imgsvc
C:\WINDOWS\system32\Pen_Tablet.exe
C:\WINDOWS\system32\ZuneBusEnum.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\WTablet\Pen_TabletUser.exe
C:\WINDOWS\system32\Pen_Tablet.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\Opera\opera.exe
C:\WINDOWS\system32\notepad.exe
C:\Documents and Settings\Cory\Desktop\dds.pif

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.daemonsearch.com/intl/
uInternet Settings,ProxyOverride = *.local
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\program files\spybot - search & destroy\SDHelper.dll
BHO: NBHO1 Class: {53f53e00-4c2b-43e5-8af0-d3c863e8fc65} - c:\program files\danware data\netop school\student\nbho.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~2\office12\GRA8E1~1.DLL
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_02\bin\ssv.dll
BHO: IECatcher Class: {b930ba63-9e5a-11d3-a288-0000e80e2ede} - c:\progra~1\massdo~1\MDHELPER.DLL
BHO: OToolbarHelper Class: {ead3a971-6a23-4246-8691-c9244e858967} - c:\program files\paypal\paypal plug-in\PayPalHelper.dll
TB: PayPal Plug-In: {dc0f2f93-27fa-4f84-acaa-9416f90b9511} - c:\program files\paypal\paypal plug-in\OToolbar.dll
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
IE: + &Mass Downloader: download this file - c:\program files\mass downloader\Add_Url.htm
IE: + Mass Downloader: download &All files - c:\program files\mass downloader\Add_All.htm
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {0FD01980-CCCB-11D3-80D4-0000E80E2EDE} - c:\program files\mass downloader\massdown.exe
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_02\bin\ssv.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
LSP: %SystemRoot%\system32\PrxerDrv.dll
LSP: w2pxdrv.dll
DPF: DirectAnimation Java Classes - file://c:\windows\java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\java\classes\xmldso.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {33564D57-0000-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB
DPF: {33564D57-9980-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/D/0/D/D0DD87DA-994F-4334-8B55-AF2E4D98ED0C/wmv9dmo.cab
DPF: {48DD0448-9209-4F81-9F6D-D83562940134} - hxxp://lads.myspace.com/upload/MySpaceUploader1006.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\progra~1\micros~2\office12\GR99D3~1.DLL
Notify: LMIinit - LMIinit.dll
Notify: WBSrv - c:\program files\stardock\object desktop\windowblinds\wbsrv.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~2\office12\GRA8E1~1.DLL

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\cory\applic~1\mozilla\firefox\profiles\fho4f38p.default\
FF - component: c:\program files\paypal\paypal plug-in\components\PayPalPlugin.dll

============= SERVICES / DRIVERS ===============

R1 fwdrv;Firewall Driver;c:\windows\system32\drivers\fwdrv.sys [2007-4-26 302000]
R1 hwinterface;hwinterface;c:\windows\system32\drivers\hwinterface.sys [2008-8-17 3026]
R1 khips;Kerio HIPS Driver;c:\windows\system32\drivers\khips.sys [2007-4-26 72624]
R1 NHostNT1;NetOp Driver 1 ver. 9.00 (2007058);c:\windows\system32\drivers\NHOSTNT1.SYS [2008-12-12 92432]
R2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files\logmein\x86\rainfo.sys [2007-4-17 12856]
R2 LMIRfsDriver;LogMeIn Remote File System Driver;c:\windows\system32\drivers\LMIRfsDriver.sys [2007-9-7 45848]
R2 SVKP;SVKP;c:\windows\system32\SVKP.sys [2008-1-3 2368]
R2 TabletServicePen;TabletServicePen;c:\windows\system32\Pen_Tablet.exe [2008-3-31 1373480]
R3 Alpham1;Ideazon Merc USB Human Interface Device;c:\windows\system32\drivers\Alpham1.sys [2007-7-23 42624]
R3 Alpham2;Ideazon Merc MM USB Human Interface Device;c:\windows\system32\drivers\Alpham2.sys [2007-3-20 18432]
R3 NHOSTNT3;NetOp Driver 3 ver. 9.00 (2007058) (NHOSTNT3);c:\windows\system32\drivers\NHOSTNT3.SYS [2008-12-12 3216]
S3 A5AGU;D-Link USB Wireless Network Adapter Service;c:\windows\system32\drivers\A5AGU.sys [2006-5-8 386784]
S3 hamachi_oem;PlayLinc Adapter;c:\windows\system32\drivers\gan_adapter.sys [2006-8-28 10664]
S3 jswpsapi;Jumpstart Wifi Protected Setup;c:\program files\d-link\rangebooster g wua-2340\jswutil\jswpsapi.exe [2008-10-14 356434]
S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2007-11-6 34064]
S3 WtfProtector;WtfProtector;\??\g:\downloads\diablo stuff\wtfpk_mod\wtfprotector.sys –> g:\downloads\diablo stuff\wtfpk_mod\WtfProtector.sys [?]
S3 XDva020;XDva020;\??\c:\windows\system32\xdva020.sys –> c:\windows\system32\XDva020.sys [?]
S4 aawservice;Ad-Aware 2007 Service;c:\program files\lavasoft\ad-aware 2007\aawservice.exe [2007-10-29 587096]
S4 IntelliAdminRC;IntelliAdminRC;c:\program files\intelliadmin\agent\Agent.exe [2006-10-18 455168]
S4 NetOp Host for NT Service;NetOp Helper ver. 9.00 (2007058);c:\program files\danware data\netop school\student\NHOSTSVC.EXE [2008-12-12 1372432]
S4 NtIrcd;NettalkIRCD;c:\program files\nettalkircd\NettalkIRCD.exe [2006-3-1 459776]
S4 SPF4;Sunbelt Personal Firewall 4;c:\program files\sunbelt software\personal firewall\kpf4ss.exe [2007-4-26 1234480]
S4 XAMPP;XAMPP Service;c:\xampp\service.exe –> c:\xampp\service.exe [?]

=============== Created Last 30 ================

2009-03-24 21:46		–d—–	C:\_OTMoveIt
2009-03-24 17:21		a-dshr–	C:\cmdcons
2009-03-24 17:19	161,792	a——-	c:\windows\SWREG.exe
2009-03-24 17:19	98,816	a——-	c:\windows\sed.exe
2009-03-24 17:19		–d—–	C:\ComboFix
2009-03-19 19:15		–d—–	c:\program files\cdv USA
2009-03-14 15:32		–d—–	c:\docume~1\alluse~1\applic~1\Viewpoint
2009-03-14 15:32		–d—–	c:\program files\Viewpoint
2009-03-12 10:30		–d—–	c:\docume~1\cory\applic~1\Malwarebytes
2009-03-09 12:37		–d—–	c:\program files\HandBrake
2009-03-02 12:39		–d—–	c:\program files\RivaTuner v2.24
2009-03-01 20:39	189,496	a——-	c:\windows\system32\PnkBstrB.xtr
2009-03-01 17:16		–d—–	c:\program files\ATITool
2009-02-26 22:26	118,272	a—-r–	c:\windows\system32\hpvqclm02.dll
2009-02-26 22:26	25,856	ac——	c:\windows\system32\dllcache\usbprint.sys
2009-02-26 22:26	25,856	a——-	c:\windows\system32\drivers\usbprint.sys
2009-02-26 22:26		–d—–	c:\program files\HP
2009-02-26 14:46	42,320	a——-	c:\windows\system32\xfcodec.dll

==================== Find3M  ====================

2009-03-24 12:39	13,935	a——-	c:\windows\system32\drivers\fwdrv.err
2009-03-14 14:24	189,496	a——-	c:\windows\system32\PnkBstrB.exe
2009-03-14 12:16	139,984	a——-	c:\windows\system32\drivers\PnkBstrK.sys
2009-03-01 20:31	75,064	a——-	c:\windows\system32\PnkBstrA.exe
2009-02-17 11:22	7,408	a——-	c:\windows\system32\ealregsnapshot1.reg
2009-02-16 19:50	1,583,467	—sh—	c:\windows\system32\tuqwwjvc.tmp
2009-02-15 17:04	107,888	a——-	c:\windows\system32\CmdLineExt.dll
2009-02-09 07:13	1,846,784	a——-	c:\windows\system32\win32k.sys
2009-01-05 19:49	1,700,352	a——-	c:\windows\system32\gdiplus.dll
2009-01-05 19:17	76,487	a——-	c:\windows\pchealth\helpctr\offlinecache\index.dat
2008-12-31 07:41	22,328	a——-	c:\docume~1\cory\applic~1\PnkBstrK.sys
2008-12-31 07:40	682,280	a——-	c:\windows\system32\pbsvc.exe
2008-12-28 12:59	4,377,500	a——-	c:\windows\system32\libavcodec.dll
2008-12-28 11:51	239,247	a——-	c:\windows\system32\ff_theora.dll
2008-12-28 11:50	145,609	a——-	c:\windows\system32\libmpeg2_ff.dll
2008-12-28 11:49	560,802	a——-	c:\windows\system32\libmplayer.dll
2008-11-16 20:59	36,868	a——-	c:\program files\uninst-Particular.exe
2008-09-05 13:53	9,103,872	a——-	c:\documents and settings\cory\ELI.exe
2008-07-01 02:02	66,936	a–sh—	c:\windows\hrinfo_0.drv
2008-07-01 03:02	66,936	a–sh—	c:\windows\hrinfo_1.drv

============= FINISH: 10:03:40.48 ===============

Also, I have downloaded AVG as the antivir. It was still downloading while these scans run, thus why it doesn't show that it is installed yet. I have since then installed it, though.