Hi!
Thanks a lot for helping me and for a super speedy reply. I really appreciate it. Just got in from work and have been able to follow your instructions - up to a point…..
Here's the ComboFix log…
ComboFix 12-07-10.01 - Dougie 11/07/2012 3:45.2.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.44.1033.18.2046.1420 [GMT 1:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\Dougie\Desktop\CFScript.txt
.
FILE ::
"c:\program files\Common Files\McAfee\MNA\McNASvc.exe"
"c:\program files\McAfee.com\Agent\mcagent.exe"
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\All Users\Application Data\McAfee
c:\documents and settings\All Users\Application Data\McAfee\dspwrp\SmartMessaging.db
c:\documents and settings\All Users\Application Data\McAfee\HackerWatch\data\hwid.idx
c:\documents and settings\All Users\Application Data\McAfee\HackerWatch\data\HwLocal.xdb
c:\documents and settings\All Users\Application Data\McAfee\HackerWatch\data\HwShared.xdb
c:\documents and settings\All Users\Application Data\McAfee\HackerWatch\sum_04_hw.htm
c:\documents and settings\All Users\Application Data\McAfee\McCleanup\mccleanup.log
c:\documents and settings\All Users\Application Data\McAfee\mcdndb.dat
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\Anti-Spam\mcinst\mcinst000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\Anti-Spam\McSvHost\McSvHost000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\antitheft\AutoUninstall\AutoUninstall000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\antitheft\Explorer\Explorer000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\Common\Install\Install000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\Common\Install\Install001.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\Common\Install\Install002.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\Common\Install\log.ini
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\Common\McAfeeSetup(1)\McAfeeSetup(1)000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\Common\McAfeeSetup(2)\McAfeeSetup(2)000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\Common\McAfeeSetup(3)\McAfeeSetup(3)000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\Common\McAfeeSetup(4)\McAfeeSetup(4)000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\Common\McAfeeSetup\McAfeeSetup000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\Common\mcagent\log.ini
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\Common\mcagent\mcagent000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\Common\mcagent\mcagent001.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\Common\mcagent\mcagent002.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\Common\McUICnt\McUICnt000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\Common\mcuihost\mcuihost000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\Common\RiskScan\RiskScan000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\CoreTech\Explorer\Explorer000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\CoreTech\Install\Install000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\CoreTech\mcagent\mcagent000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\CoreTech\mcalert\mcalert000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\CoreTech\McAltHst\McAltHst000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\CoreTech\mcinfo\mcinfo000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\CoreTech\mcinst\mcinst000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\CoreTech\McInstru\McInstru000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\CoreTech\mcocrollback\mcocrollback000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\CoreTech\mcods\mcods000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\CoreTech\McPvTray\McPvTray000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\CoreTech\McSvHost\McSvHost000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\CoreTech\McSync\McSync000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\CoreTech\McUICnt\McUICnt000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\CoreTech\mcuihost\mcuihost000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\CoreTech\McUpdate\log.ini
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\CoreTech\McUpdate\McUpdate000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\CoreTech\McUpdate\McUpdate001.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\CoreTech\mcupdmgr\mcupdmgr000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\CoreTech\mcvsshld\mcvsshld000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\CoreTech\mpfalert\mpfalert000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\CoreTech\rundll32\rundll32000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\CoreTech\verclsid\verclsid000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\CoreTech\WINWORD\WINWORD000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\DetectMPSdll\mcinst\mcinst000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\HomeNet\McSvHost\McSvHost000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\HWAPI\mcinst\mcinst000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\HWAPI\regsvr32\regsvr32000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MasterInstaller\Install\Install000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\mcdspwrp\mcagent\mcagent000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\mcdspwrp\McUICnt\McUICnt000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\mcdspwrp\mcuihost\mcuihost000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\mcinfo\mcinfo000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McInst\Cleanup000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McInst\Delfolders000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McInst\instLD.inf000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McInst\mclgtmpl.inf000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McInst\McOcInstru.inf000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McInst\mcocrollback.inf000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McInst\mcpins.inf000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McInst\mcpLD.inf000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McInst\mcqc.inf000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McInst\mcshr.inf000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McInst\mna32.inf000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McInst\mpfLD.inf000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McInst\mpsmisp.inf000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McInst\mqsuc.inf000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McInst\msccmn.inf000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McInst\msclgmis.inf000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McInst\mscLI.inf000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McInst\mscmisc.inf000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McInst\mscreg.inf000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McInst\mscshll.inf000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McInst\mscsvc.inf000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McInst\mscupd.inf000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McInst\rmoldfile.inf000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McInst\rmoldmpsfile.inf000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McInst\sa_main.inf000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McInst\subst.inf000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McInst\vso.inf000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McInst\vsopost.inf000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McItInfo\McItInfo000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\mcitinfo_1337650810\mcitinfo_1337650810000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McMSCIns\Install\Install000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McMSCIns\mcagent\mcagent000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McMSCIns\mcsync\log.ini
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McMSCIns\mcsync\mcsync000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McMSCIns\mcsync\McSync001.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McMSCIns\mcsync\McSync002.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McMSCIns\rundll32\log.ini
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McMSCIns\rundll32\rundll32000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McMSCIns\rundll32\rundll32001.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McOneClickAct\McInstru\McInstru000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McOneClickAct\mcocrollback\mcocrollback000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McProxy\McSvHost\McSvHost000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\mcsmttsk\McUpdate\McUpdate000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\mcsvrcnt\mcsvrcnt000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McSync\mcsync\log.ini
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McSync\mcsync\mcsync000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McSync\mcsync\McSync001.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McSync\mcsync\McSync002.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McSync\mcsync000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McUICnt\McUICnt\McUICnt000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\McUninst\mcuihost\mcuihost000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\mfehidin.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\Install\Install000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\mcagent\log.ini
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\mcagent\mcagent000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\mcagent\mcagent001.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\mcagent\mcagent002.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\mcappcfg\mcappcfg000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\McHlp32\McHlp32000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\mchost\log.ini
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\mchost\mchost000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\mchost\mchost001.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\mchost\mchost002.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\mcinfo\log.ini
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\mcinfo\mcinfo000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\mcinfo\McInfo001.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\mcinfo\mcinfo002.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\mcinst\mcinst000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\McItInfo\McItInfo000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\mcitinfo_1337650810\mcitinfo_1337650810000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\mcods\mcods000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\McSmtFwk\McSmtFwk000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\McSvHost\log.ini
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\McSvHost\McSvHost000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\McSvHost\McSvHost001.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\McSvHost\McSvHost002.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\mcsvrcnt\mcsvrcnt000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\mcsync\log.ini
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\mcsync\mcsync000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\mcsync\McSync001.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\mcsync\McSync002.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\mcuihost\mcuihost000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\McUpdate\McUpdate000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\mcupdmgr\log.ini
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\mcupdmgr\mcupdmgr000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\mcupdmgr\mcupdmgr001.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\mcupdmgr\mcupdmgr002.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\mcvsshld\mcvsshld000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MISP\mispreg\mispreg000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MPF\Install\Install000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MPF\mcinst\mcinst000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MPF\McSmtFwk\McSmtFwk000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MPF\McSvHost\log.ini
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MPF\McSvHost\McSvHost000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MPF\McSvHost\McSvHost001.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MPF\McSvHost\McSvHost002.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MPF\mcuihost\mcuihost000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MPF\mcupdmgr\mcupdmgr000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MPF\mpfalert\mpfalert000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MPF\regsvr32\regsvr32000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\Mps\McSvHost\McSvHost000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MPV\Explorer\Explorer000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MPV\mcinst\mcinst000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MQS\McPvTray\McPvTray000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MSC\Explorer\Explorer000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\MSC\McPvTray\McPvTray000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\PartnerCustom\McUICnt\McUICnt000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\PartnerCustom\SSScheduler\SSScheduler000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\Pearl\mcagent\mcagent000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\SecurityScanner\McUICnt\McUICnt000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\VSCore\mcupdmgr\mcupdmgr000.log
c:\documents and settings\All Users\Application Data\McAfee\MCLOGS\VSCore\rundll32\rundll32000.log
c:\documents and settings\All Users\Application Data\McAfee\MNA\NAData
c:\documents and settings\All Users\Application Data\McAfee\MNM\NDData
c:\documents and settings\All Users\Application Data\McAfee\MSC\Cache\McSubDB.Bak
c:\documents and settings\All Users\Application Data\McAfee\MSC\installinstru.dat
c:\documents and settings\All Users\Application Data\McAfee\MSC\installinstru_pre.dat
c:\documents and settings\All Users\Application Data\McAfee\MSC\Logs\{0A6B6099-936F-4209-B31A-123F694F295C}.log
c:\documents and settings\All Users\Application Data\McAfee\MSC\Logs\{0A9AF731-EEC1-4ED2-8E7D-66C08512138D}.log
c:\documents and settings\All Users\Application Data\McAfee\MSC\Logs\{1E1FEB0E-ABA0-4074-B363-BE2ADC6D4CE8}.log
c:\documents and settings\All Users\Application Data\McAfee\MSC\Logs\{34144B7A-8AD8-4DF3-A766-A1D15615E4A9}.log
c:\documents and settings\All Users\Application Data\McAfee\MSC\Logs\{39828ECD-9C08-4B82-8F5C-29E45289CF5A}.log
c:\documents and settings\All Users\Application Data\McAfee\MSC\Logs\{3D2DDDCB-E952-457A-8575-E0D454773B67}.log
c:\documents and settings\All Users\Application Data\McAfee\MSC\Logs\{8C99B8FE-3478-4A9D-AB1B-77F05ABB114D}.log
c:\documents and settings\All Users\Application Data\McAfee\MSC\Logs\{96111A4D-9614-478E-AC99-079CCB2872C8}.log
c:\documents and settings\All Users\Application Data\McAfee\MSC\Logs\{9B49996C-6291-4616-B5B4-03791ACB464C}.log
c:\documents and settings\All Users\Application Data\McAfee\MSC\Logs\{B94E1AF4-CD9E-4C3C-9524-0270A17EFBEF}.log
c:\documents and settings\All Users\Application Data\McAfee\MSC\Logs\{D7FB805D-8827-4A38-8241-340B5D18D9F7}.log
c:\documents and settings\All Users\Application Data\McAfee\MSC\Logs\Events.dat
c:\documents and settings\All Users\Application Data\McAfee\MSC\Logs\settings.dat
c:\documents and settings\All Users\Application Data\McAfee\MSC\McConfig.dat
c:\documents and settings\All Users\Application Data\McAfee\MSC\mcifolog.log
c:\documents and settings\All Users\Application Data\McAfee\MSC\mcini.ini
c:\documents and settings\All Users\Application Data\McAfee\MSC\McSubDB.Dat
c:\documents and settings\All Users\Application Data\McAfee\MSC\McUsers.dat
c:\documents and settings\All Users\Application Data\McAfee\SiteAdvisor\mcsacore.exe\log.txt
c:\documents and settings\All Users\Application Data\McAfee\SiteAdvisor\SA.dat
c:\documents and settings\All Users\Application Data\McAfee\SiteAdvisor\SACore\sacore.db
c:\documents and settings\All Users\Application Data\McAfee\SiteAdvisor\SACore\sacore_cache.db
c:\documents and settings\All Users\Application Data\McAfee\SiteAdvisor\SACore\sacore_priv.db
c:\documents and settings\All Users\Application Data\McAfee\SiteAdvisor\sasshmod.dll\log.txt
c:\documents and settings\All Users\Application Data\McAfee\SiteAdvisor\saupkeep.dll\log.txt
c:\documents and settings\All Users\Application Data\McAfee\WinCore\persist.mtk
c:\program files\Common Files\McAfee
c:\program files\Common Files\McAfee\FWDriver\fwdrv.inf
c:\program files\Common Files\McAfee\FWDriver\fwdrvins.exe
c:\program files\Common Files\McAfee\FWDriver\fwdrvver.dll
c:\program files\Common Files\McAfee\FWDriver\mpfp.cat
c:\program files\Common Files\McAfee\FWDriver\mpfp.sys
c:\program files\Common Files\McAfee\FWDriver\Vista\fwdrvex.inf
c:\program files\Common Files\McAfee\FWDriver\Vista\fwdrvv.cab
c:\program files\Common Files\McAfee\HackerWatch\HWAPI.dll
c:\program files\Common Files\McAfee\HackerWatch\hwapi.inf
c:\program files\Common Files\McAfee\HackerWatch\hwupdchk.exe
c:\program files\Common Files\McAfee\Installer\mcinst.exe
c:\program files\Common Files\McAfee\McProxy\McProxy.dll
c:\program files\Common Files\McAfee\McProxy\McProxy.inf
c:\program files\Common Files\McAfee\McProxy\Proxyver.dll
c:\program files\Common Files\McAfee\McProxy\rmoldfile.inf
c:\program files\Common Files\McAfee\McSvcHost\McSHIns.dll
c:\program files\Common Files\McAfee\McSvcHost\McSvcHost.inf
c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe
c:\program files\Common Files\McAfee\McSvcHost\McSvHVer.dll
c:\program files\Common Files\McAfee\MNA\McAltHPS.dll
c:\program files\Common Files\McAfee\MNA\McAltHst.exe
c:\program files\Common Files\McAfee\MNA\McNaIns.dll
c:\program files\Common Files\McAfee\MNA\McNAReg.dll
c:\program files\Common Files\McAfee\MNA\McNARgPS.dll
c:\program files\Common Files\McAfee\MNA\McNASvc.dll
c:\program files\Common Files\McAfee\MNA\McNASvPS.dll
c:\program files\Common Files\McAfee\MNA\McNAVer.dll
c:\program files\Common Files\McAfee\MNA\McTrstPS.dll
c:\program files\Common Files\McAfee\MNA\mna32.inf
c:\program files\Common Files\McAfee\SystemCore\chrome.manifest
c:\program files\Common Files\McAfee\SystemCore\components\ScriptFF.gif
c:\program files\Common Files\McAfee\SystemCore\components\scriptff.js
c:\program files\Common Files\McAfee\SystemCore\components\ScriptFF.xul
c:\program files\Common Files\McAfee\SystemCore\dainstall.exe
c:\program files\Common Files\McAfee\SystemCore\ftl.dll
c:\program files\Common Files\McAfee\SystemCore\fwinfo.exe
c:\program files\Common Files\McAfee\SystemCore\install.rdf
c:\program files\Common Files\McAfee\SystemCore\lockdown.dll
c:\program files\Common Files\McAfee\SystemCore\mcshield.dll
c:\program files\Common Files\McAfee\SystemCore\mcshield.exe
c:\program files\Common Files\McAfee\SystemCore\mfeapfa.dll
c:\program files\Common Files\McAfee\SystemCore\mfeavfa.dll
c:\program files\Common Files\McAfee\SystemCore\mfebopa.dll
c:\program files\Common Files\McAfee\SystemCore\mfefire.exe
c:\program files\Common Files\McAfee\SystemCore\mfefwctl.dll
c:\program files\Common Files\McAfee\SystemCore\mfehida.dll
c:\program files\Common Files\McAfee\SystemCore\mfehidin.exe
c:\program files\Common Files\McAfee\SystemCore\mfehidk_messages.dll
c:\program files\Common Files\McAfee\SystemCore\mferkda.dll
c:\program files\Common Files\McAfee\SystemCore\mfevtpa.dll
c:\program files\Common Files\McAfee\SystemCore\mytilus3.dll
c:\program files\Common Files\McAfee\SystemCore\mytilus3_server.dll
c:\program files\Common Files\McAfee\SystemCore\mytilus3_worker.dll
c:\program files\Common Files\McAfee\SystemCore\naevent.dll
c:\program files\Common Files\McAfee\SystemCore\naievent.dll
c:\program files\Common Files\McAfee\SystemCore\rkscan.dll
c:\program files\Common Files\McAfee\SystemCore\scriptff.dll
c:\program files\Common Files\McAfee\SystemCore\ScriptFF.gif
c:\program files\Common Files\McAfee\SystemCore\Scriptff.js
c:\program files\Common Files\McAfee\SystemCore\ScriptFF.xul
c:\program files\Common Files\McAfee\SystemCore\ScriptSn.20120520155218.dll
c:\program files\Common Files\McAfee\SystemCore\ScriptSn.20120520155219.dll
c:\program files\Common Files\McAfee\SystemCore\ScriptSn.20120709005209.dll
c:\program files\Common Files\McAfee\SystemCore\scriptsn.dll
c:\program files\Common Files\McAfee\SystemCore\strings.bin
c:\program files\Common Files\McAfee\SystemCore\vscan.bof
c:\program files\Common Files\McAfee\SystemCore\vtp_catcache
c:\program files\Common Files\McAfee\VSCore\av.inf
c:\program files\Common Files\McAfee\VSCore\cfwids.cat
c:\program files\Common Files\McAfee\VSCore\cfwids.inf
c:\program files\Common Files\McAfee\VSCore\cfwids.sys
c:\program files\Common Files\McAfee\VSCore\chrome.manifest
c:\program files\Common Files\McAfee\VSCore\DAInstall.exe
c:\program files\Common Files\McAfee\VSCore\ftl.dll
c:\program files\Common Files\McAfee\VSCore\fw.inf
c:\program files\Common Files\McAfee\VSCore\install.rdf
c:\program files\Common Files\McAfee\VSCore\lockdown.dll
c:\program files\Common Files\McAfee\VSCore\McShield.dll
c:\program files\Common Files\McAfee\VSCore\Mcshield.exe
c:\program files\Common Files\McAfee\VSCore\mfeapfa.dll
c:\program files\Common Files\McAfee\VSCore\mfeapfk.cat
c:\program files\Common Files\McAfee\VSCore\mfeapfk.inf
c:\program files\Common Files\McAfee\VSCore\mfeapfk.sys
c:\program files\Common Files\McAfee\VSCore\mfeavfa.dll
c:\program files\Common Files\McAfee\VSCore\mfeavfk.cat
c:\program files\Common Files\McAfee\VSCore\mfeavfk.inf
c:\program files\Common Files\McAfee\VSCore\mfeavfk.sys
c:\program files\Common Files\McAfee\VSCore\mfebopa.dll
c:\program files\Common Files\McAfee\VSCore\mfebopk.cat
c:\program files\Common Files\McAfee\VSCore\mfebopk.inf
c:\program files\Common Files\McAfee\VSCore\mfebopk.sys
c:\program files\Common Files\McAfee\VSCore\mfeclnk.cat
c:\program files\Common Files\McAfee\VSCore\mfeclnk.inf
c:\program files\Common Files\McAfee\VSCore\mfeclnk.sys
c:\program files\Common Files\McAfee\VSCore\mfefire.exe
c:\program files\Common Files\McAfee\VSCore\mfefirek.cat
c:\program files\Common Files\McAfee\VSCore\mfefirek.inf
c:\program files\Common Files\McAfee\VSCore\mfefirek.sys
c:\program files\Common Files\McAfee\VSCore\mfefwctl.dll
c:\program files\Common Files\McAfee\VSCore\mfehida.dll
c:\program files\Common Files\McAfee\VSCore\mfehidin.exe
c:\program files\Common Files\McAfee\VSCore\mfehidk.cat
c:\program files\Common Files\McAfee\VSCore\mfehidk.inf
c:\program files\Common Files\McAfee\VSCore\mfehidk.sys
c:\program files\Common Files\McAfee\VSCore\mfehidk_messages.dll
c:\program files\Common Files\McAfee\VSCore\mfendisk.cat
c:\program files\Common Files\McAfee\VSCore\mfendisk.inf
c:\program files\Common Files\McAfee\VSCore\mfendisk.sys
c:\program files\Common Files\McAfee\VSCore\mfendisk_m.cat
c:\program files\Common Files\McAfee\VSCore\mfendisk_m.inf
c:\program files\Common Files\McAfee\VSCore\mfenlfk.cat
c:\program files\Common Files\McAfee\VSCore\mfenlfk.inf
c:\program files\Common Files\McAfee\VSCore\mfenlfk.sys
c:\program files\Common Files\McAfee\VSCore\mferkda.dll
c:\program files\Common Files\McAfee\VSCore\mferkdet.cat
c:\program files\Common Files\McAfee\VSCore\mferkdet.inf
c:\program files\Common Files\McAfee\VSCore\mferkdet.sys
c:\program files\Common Files\McAfee\VSCore\mfetdi2k.cat
c:\program files\Common Files\McAfee\VSCore\mfetdi2k.inf
c:\program files\Common Files\McAfee\VSCore\mfetdi2k.sys
c:\program files\Common Files\McAfee\VSCore\mfevtpa.dll
c:\program files\Common Files\McAfee\VSCore\mfevtps.exe
c:\program files\Common Files\McAfee\VSCore\mfewfpk.cat
c:\program files\Common Files\McAfee\VSCore\mfewfpk.inf
c:\program files\Common Files\McAfee\VSCore\mfewfpk.sys
c:\program files\Common Files\McAfee\VSCore\mytilus3.dll
c:\program files\Common Files\McAfee\VSCore\mytilus3_server.dll
c:\program files\Common Files\McAfee\VSCore\mytilus3_worker.dll
c:\program files\Common Files\McAfee\VSCore\NaEvent.dll
c:\program files\Common Files\McAfee\VSCore\NaiEvent.dll
c:\program files\Common Files\McAfee\VSCore\reinstall.log
c:\program files\Common Files\McAfee\VSCore\RkScan.dll
c:\program files\Common Files\McAfee\VSCore\scriptff.dll
c:\program files\Common Files\McAfee\VSCore\scriptff.gif
c:\program files\Common Files\McAfee\VSCore\scriptff.js
c:\program files\Common Files\McAfee\VSCore\scriptff.xul
c:\program files\Common Files\McAfee\VSCore\scriptsn.dll
c:\program files\Common Files\McAfee\VSCore\strings.bin
c:\program files\Common Files\McAfee\VSCore\tools\fwinfo.exe
c:\program files\Common Files\McAfee\VSCore\vscore.inf
c:\program files\Common Files\McAfee\VSCore\vscore.xml
c:\program files\Common Files\McAfee\VSCore\VSCVer.dll
c:\program files\Common Files\McAfee\VSCore\vtp_catcache
c:\program files\McAfee
c:\program files\McAfee.com\Agent
c:\program files\McAfee.com\Agent\mcscentr.adf
c:\program files\McAfee\MQC\2057\mcpLD.inf
c:\program files\McAfee\MQC\2057\mcqchelp.inf
c:\program files\McAfee\MQC\2057\mcqcres.inf
c:\program files\McAfee\MQC\2057\QcLog.xml
c:\program files\McAfee\MQC\2057\QcRes.dll
c:\program files\McAfee\MQC\2057\Readme.htm
c:\program files\McAfee\MQC\McpAdmin.exe
c:\program files\McAfee\MQC\McpIns.dll
c:\program files\McAfee\MQC\mcpins.inf
c:\program files\McAfee\MQC\mcpLI.inf
c:\program files\McAfee\MQC\mcpmain.inf
c:\program files\McAfee\MQC\McpSched.dll
c:\program files\McAfee\MQC\mcqc.inf
c:\program files\McAfee\MQC\MRU.bak
c:\program files\McAfee\MQC\MRU.ini
c:\program files\McAfee\MQC\qcconf.bak
c:\program files\McAfee\MQC\qcconf.dat
c:\program files\McAfee\MQC\QcConsol.exe
c:\program files\McAfee\MQC\QCLite.dll
c:\program files\McAfee\MQC\QCMISP.dll
c:\program files\McAfee\MSC\2057\instLD.inf
c:\program files\McAfee\MSC\2057\msclcres.inf
c:\program files\McAfee\MSC\2057\mscpstLD.inf
c:\program files\McAfee\MSC\Custom_Uninstall\McOcInstru.inf
c:\program files\McAfee\MSC\Custom_Uninstall\mcocrollback.inf
c:\program files\McAfee\MSC\langmap.dat
c:\program files\McAfee\MSC\mcactui.dll
c:\program files\McAfee\MSC\mcactwiz.dll
c:\program files\McAfee\MSC\mcactwiz_ld.dll
c:\program files\McAfee\MSC\mcinstru.dll
c:\program files\McAfee\MSC\McInstru.exe
c:\program files\McAfee\MSC\mcmscins.dll
c:\program files\McAfee\MSC\msccust.inf
c:\program files\McAfee\MSC\mscdfoem.inf
c:\program files\McAfee\MSC\mscLD.inf
c:\program files\McAfee\MSC\mscLI.inf
c:\program files\McAfee\MSC\mscuicfg.dat
c:\program files\McAfee\MSC\MSFix.inf
c:\program files\McAfee\MSC\OOBE\mcocrollback.exe
c:\program files\McAfee\MSC\override.inf
c:\program files\McAfee\MSC\subst.inf
c:\program files\McAfee\MSC\subst2.inf
c:\program files\McAfee\MSC\vscan.bof
c:\program files\McAfee\MSHR\2057\mcshrres.inf
c:\program files\McAfee\MSHR\2057\ShrRes.dll
c:\program files\McAfee\MSHR\mcshr.inf
c:\program files\McAfee\MSHR\Readme.txt
c:\program files\McAfee\MSHR\ShrCL.exe
c:\program files\McAfee\MSHR\ShrCore.dll
c:\program files\McAfee\MSHR\Shredder.ini
c:\program files\McAfee\MSHR\ShrMISP.dll
c:\program files\McAfee\SiteAdvisor\ActUtil.exe
c:\program files\McAfee\SiteAdvisor\chr.inf
c:\program files\McAfee\SiteAdvisor\chrome.manifest
c:\program files\McAfee\SiteAdvisor\contents.rdf
c:\program files\McAfee\SiteAdvisor\default.txt
c:\program files\McAfee\SiteAdvisor\Download\s19o
c:\program files\McAfee\SiteAdvisor\Download\s1ms
c:\program files\McAfee\SiteAdvisor\Download\s26o
c:\program files\McAfee\SiteAdvisor\Download\s2p8
c:\program files\McAfee\SiteAdvisor\Download\s2sc
c:\program files\McAfee\SiteAdvisor\Download\s3eo
c:\program files\McAfee\SiteAdvisor\Download\s3n8
c:\program files\McAfee\SiteAdvisor\Download\s3s4
c:\program files\McAfee\SiteAdvisor\Download\s3tk
c:\program files\McAfee\SiteAdvisor\Download\s43c
c:\program files\McAfee\SiteAdvisor\Download\s48
c:\program files\McAfee\SiteAdvisor\Download\s4u0
c:\program files\McAfee\SiteAdvisor\Download\s5cg
c:\program files\McAfee\SiteAdvisor\Download\s5j4
c:\program files\McAfee\SiteAdvisor\Download\s5n0
c:\program files\McAfee\SiteAdvisor\Download\s5nc
c:\program files\McAfee\SiteAdvisor\Download\s5og
c:\program files\McAfee\SiteAdvisor\Download\s5q8
c:\program files\McAfee\SiteAdvisor\elist.dat
c:\program files\McAfee\SiteAdvisor\install.rdf
c:\program files\McAfee\SiteAdvisor\mcbrwctl.dll
c:\program files\McAfee\SiteAdvisor\McChPlg.crx
c:\program files\McAfee\SiteAdvisor\McIEPlg.dll
c:\program files\McAfee\SiteAdvisor\McPlgUI.dll
c:\program files\McAfee\SiteAdvisor\McSACore.exe
c:\program files\McAfee\SiteAdvisor\McSACorePS.dll
c:\program files\McAfee\SiteAdvisor\NPMcFFPlg32.dll
c:\program files\McAfee\SiteAdvisor\Oem.txt
c:\program files\McAfee\SiteAdvisor\SA_indep.inf
c:\program files\McAfee\SiteAdvisor\SA_main.inf
c:\program files\McAfee\SiteAdvisor\SA_win32.inf
c:\program files\McAfee\SiteAdvisor\sahook.dll
c:\program files\McAfee\SiteAdvisor\saplugin.dll
c:\program files\McAfee\SiteAdvisor\sares.dll
c:\program files\McAfee\SiteAdvisor\saSets.ini
c:\program files\McAfee\SiteAdvisor\SaSSHMod.dll
c:\program files\McAfee\SiteAdvisor\saUI.exe
c:\program files\McAfee\SiteAdvisor\saUpd.exe
c:\program files\McAfee\SiteAdvisor\saupkeep.dll
c:\program files\McAfee\SiteAdvisor\Scripts\balloon.html
c:\program files\McAfee\SiteAdvisor\Scripts\balloon.js
c:\program files\McAfee\SiteAdvisor\Scripts\balloon_logo.gif
c:\program files\McAfee\SiteAdvisor\Scripts\balloon_logo_plus.gif
c:\program files\McAfee\SiteAdvisor\Scripts\blackpixel.gif
c:\program files\McAfee\SiteAdvisor\Scripts\bullet.gif
c:\program files\McAfee\SiteAdvisor\Scripts\button_black.gif
c:\program files\McAfee\SiteAdvisor\Scripts\button_black_lock.gif
c:\program files\McAfee\SiteAdvisor\Scripts\button_disabled.gif
c:\program files\McAfee\SiteAdvisor\Scripts\button_green.gif
c:\program files\McAfee\SiteAdvisor\Scripts\button_green_lock.gif
c:\program files\McAfee\SiteAdvisor\Scripts\button_grey.gif
c:\program files\McAfee\SiteAdvisor\Scripts\button_grey_lock.gif
c:\program files\McAfee\SiteAdvisor\Scripts\button_hs.gif
c:\program files\McAfee\SiteAdvisor\Scripts\button_hs_lock.gif
c:\program files\McAfee\SiteAdvisor\Scripts\button_red.gif
c:\program files\McAfee\SiteAdvisor\Scripts\button_red_lock.gif
c:\program files\McAfee\SiteAdvisor\Scripts\button_yellow.gif
c:\program files\McAfee\SiteAdvisor\Scripts\button_yellow_lock.gif
c:\program files\McAfee\SiteAdvisor\Scripts\common.js
c:\program files\McAfee\SiteAdvisor\Scripts\corner-solid.gif
c:\program files\McAfee\SiteAdvisor\Scripts\cornersm-hollow.gif
c:\program files\McAfee\SiteAdvisor\Scripts\cornersm-solid.gif
c:\program files\McAfee\SiteAdvisor\Scripts\down_arrow.gif
c:\program files\McAfee\SiteAdvisor\Scripts\download_careful.gif
c:\program files\McAfee\SiteAdvisor\Scripts\download_unsafe.gif
c:\program files\McAfee\SiteAdvisor\Scripts\empty.gif
c:\program files\McAfee\SiteAdvisor\Scripts\engine.js
c:\program files\McAfee\SiteAdvisor\Scripts\error-icon.gif
c:\program files\McAfee\SiteAdvisor\Scripts\facebook.js
c:\program files\McAfee\SiteAdvisor\Scripts\favicon.ico
c:\program files\McAfee\SiteAdvisor\Scripts\g_banner_c.gif
c:\program files\McAfee\SiteAdvisor\Scripts\g_banner_l.gif
c:\program files\McAfee\SiteAdvisor\Scripts\g_banner_r.gif
c:\program files\McAfee\SiteAdvisor\Scripts\g_banner_sep.gif
c:\program files\McAfee\SiteAdvisor\Scripts\g_bottom_c.gif
c:\program files\McAfee\SiteAdvisor\Scripts\g_bottom_l.gif
c:\program files\McAfee\SiteAdvisor\Scripts\g_bottom_r.gif
c:\program files\McAfee\SiteAdvisor\Scripts\g_bottom_sep.gif
c:\program files\McAfee\SiteAdvisor\Scripts\g_facet.gif
c:\program files\McAfee\SiteAdvisor\Scripts\g_footer_c.gif
c:\program files\McAfee\SiteAdvisor\Scripts\g_footer_l.gif
c:\program files\McAfee\SiteAdvisor\Scripts\g_footer_r.gif
c:\program files\McAfee\SiteAdvisor\Scripts\g_header_c.gif
c:\program files\McAfee\SiteAdvisor\Scripts\g_header_l.gif
c:\program files\McAfee\SiteAdvisor\Scripts\g_header_r.gif
c:\program files\McAfee\SiteAdvisor\Scripts\g_icon.gif
c:\program files\McAfee\SiteAdvisor\Scripts\g_upsell_border.gif
c:\program files\McAfee\SiteAdvisor\Scripts\gleftarrow.gif
c:\program files\McAfee\SiteAdvisor\Scripts\google.js
c:\program files\McAfee\SiteAdvisor\Scripts\green.gif
c:\program files\McAfee\SiteAdvisor\Scripts\grightarrow.gif
c:\program files\McAfee\SiteAdvisor\Scripts\hackersafe.gif
c:\program files\McAfee\SiteAdvisor\Scripts\hs.gif
c:\program files\McAfee\SiteAdvisor\Scripts\hs_icon.gif
c:\program files\McAfee\SiteAdvisor\Scripts\inst-background.gif
c:\program files\McAfee\SiteAdvisor\Scripts\inst-top.gif
c:\program files\McAfee\SiteAdvisor\Scripts\inst-xup.gif
c:\program files\McAfee\SiteAdvisor\Scripts\large-buttonC.gif
c:\program files\McAfee\SiteAdvisor\Scripts\large-buttonL.gif
c:\program files\McAfee\SiteAdvisor\Scripts\large-buttonR.gif
c:\program files\McAfee\SiteAdvisor\Scripts\main.js
c:\program files\McAfee\SiteAdvisor\Scripts\mcafee_logo.gif
c:\program files\McAfee\SiteAdvisor\Scripts\mcafee_logo_shield.png
c:\program files\McAfee\SiteAdvisor\Scripts\mcafee_yahoo_cobranded_toolbar.gif
c:\program files\McAfee\SiteAdvisor\Scripts\mcafeesiteadvisor.gif
c:\program files\McAfee\SiteAdvisor\Scripts\mcwedge.gif
c:\program files\McAfee\SiteAdvisor\Scripts\nb_arrow_down.gif
c:\program files\McAfee\SiteAdvisor\Scripts\nb_arrow_up.gif
c:\program files\McAfee\SiteAdvisor\Scripts\nb_button_black.gif
c:\program files\McAfee\SiteAdvisor\Scripts\nb_button_black_lock.gif
c:\program files\McAfee\SiteAdvisor\Scripts\nb_button_disabled.gif
c:\program files\McAfee\SiteAdvisor\Scripts\nb_button_green.gif
c:\program files\McAfee\SiteAdvisor\Scripts\nb_button_green_lock.gif
c:\program files\McAfee\SiteAdvisor\Scripts\nb_button_grey.gif
c:\program files\McAfee\SiteAdvisor\Scripts\nb_button_grey_lock.gif
c:\program files\McAfee\SiteAdvisor\Scripts\nb_button_hs.gif
c:\program files\McAfee\SiteAdvisor\Scripts\nb_button_hs_lock.gif
c:\program files\McAfee\SiteAdvisor\Scripts\nb_button_red.gif
c:\program files\McAfee\SiteAdvisor\Scripts\nb_button_red_lock.gif
c:\program files\McAfee\SiteAdvisor\Scripts\nb_button_yellow.gif
c:\program files\McAfee\SiteAdvisor\Scripts\nb_button_yellow_lock.gif
c:\program files\McAfee\SiteAdvisor\Scripts\protectedmode.gif
c:\program files\McAfee\SiteAdvisor\Scripts\protection.gif
c:\program files\McAfee\SiteAdvisor\Scripts\protmode-off.gif
c:\program files\McAfee\SiteAdvisor\Scripts\protmode-on.gif
c:\program files\McAfee\SiteAdvisor\Scripts\question-icon.gif
c:\program files\McAfee\SiteAdvisor\Scripts\r_banner_c.gif
c:\program files\McAfee\SiteAdvisor\Scripts\r_banner_l.gif
c:\program files\McAfee\SiteAdvisor\Scripts\r_banner_r.gif
c:\program files\McAfee\SiteAdvisor\Scripts\r_banner_sep.gif
c:\program files\McAfee\SiteAdvisor\Scripts\r_blocked.png
c:\program files\McAfee\SiteAdvisor\Scripts\r_bottom_c.gif
c:\program files\McAfee\SiteAdvisor\Scripts\r_bottom_l.gif
c:\program files\McAfee\SiteAdvisor\Scripts\r_bottom_r.gif
c:\program files\McAfee\SiteAdvisor\Scripts\r_bottom_sep.gif
c:\program files\McAfee\SiteAdvisor\Scripts\r_facet.gif
c:\program files\McAfee\SiteAdvisor\Scripts\r_footer_c.gif
c:\program files\McAfee\SiteAdvisor\Scripts\r_footer_l.gif
c:\program files\McAfee\SiteAdvisor\Scripts\r_footer_r.gif
c:\program files\McAfee\SiteAdvisor\Scripts\r_header_c.gif
c:\program files\McAfee\SiteAdvisor\Scripts\r_header_l.gif
c:\program files\McAfee\SiteAdvisor\Scripts\r_header_r.gif
c:\program files\McAfee\SiteAdvisor\Scripts\r_header_r_nox.gif
c:\program files\McAfee\SiteAdvisor\Scripts\r_icon.gif
c:\program files\McAfee\SiteAdvisor\Scripts\r_upsell_border.gif
c:\program files\McAfee\SiteAdvisor\Scripts\r_x_icon.gif
c:\program files\McAfee\SiteAdvisor\Scripts\red.gif
c:\program files\McAfee\SiteAdvisor\Scripts\redarrow.gif
c:\program files\McAfee\SiteAdvisor\Scripts\rleftarrow.gif
c:\program files\McAfee\SiteAdvisor\Scripts\rrightarrow.gif
c:\program files\McAfee\SiteAdvisor\Scripts\sa-logo-plus.gif
c:\program files\McAfee\SiteAdvisor\Scripts\sa-logo-white.gif
c:\program files\McAfee\SiteAdvisor\Scripts\sa-logo.gif
c:\program files\McAfee\SiteAdvisor\Scripts\sachplg.js
c:\program files\McAfee\SiteAdvisor\Scripts\safe.js
c:\program files\McAfee\SiteAdvisor\Scripts\safe.xul
c:\program files\McAfee\SiteAdvisor\Scripts\safe_im.js
c:\program files\McAfee\SiteAdvisor\Scripts\safeshare_green.gif
c:\program files\McAfee\SiteAdvisor\Scripts\safeshare_grey.gif
c:\program files\McAfee\SiteAdvisor\Scripts\safeshare_red.gif
c:\program files\McAfee\SiteAdvisor\Scripts\safeshare_yellow.gif
c:\program files\McAfee\SiteAdvisor\Scripts\saffplg.js
c:\program files\McAfee\SiteAdvisor\Scripts\SAPlus-graphic.gif
c:\program files\McAfee\SiteAdvisor\Scripts\searchglass.gif
c:\program files\McAfee\SiteAdvisor\Scripts\selected_tab.gif
c:\program files\McAfee\SiteAdvisor\Scripts\selectors.js
c:\program files\McAfee\SiteAdvisor\Scripts\siteadvisor.gif
c:\program files\McAfee\SiteAdvisor\Scripts\sizzle.js
c:\program files\McAfee\SiteAdvisor\Scripts\SliderA1.gif
c:\program files\McAfee\SiteAdvisor\Scripts\SliderA2.gif
c:\program files\McAfee\SiteAdvisor\Scripts\SliderA3.gif
c:\program files\McAfee\SiteAdvisor\Scripts\SliderA4.gif
c:\program files\McAfee\SiteAdvisor\Scripts\SliderD1.gif
c:\program files\McAfee\SiteAdvisor\Scripts\SliderD2.gif
c:\program files\McAfee\SiteAdvisor\Scripts\SliderD3.gif
c:\program files\McAfee\SiteAdvisor\Scripts\SliderD4.gif
c:\program files\McAfee\SiteAdvisor\Scripts\small-buttonC.gif
c:\program files\McAfee\SiteAdvisor\Scripts\small-buttonL.gif
c:\program files\McAfee\SiteAdvisor\Scripts\small-buttonR.gif
c:\program files\McAfee\SiteAdvisor\Scripts\ss_bottom_c.gif
c:\program files\McAfee\SiteAdvisor\Scripts\ss_bottom_l.gif
c:\program files\McAfee\SiteAdvisor\Scripts\ss_bottom_r.gif
c:\program files\McAfee\SiteAdvisor\Scripts\ss_copylink_off.gif
c:\program files\McAfee\SiteAdvisor\Scripts\ss_copylink_on.gif
c:\program files\McAfee\SiteAdvisor\Scripts\ss_facebook_off.gif
c:\program files\McAfee\SiteAdvisor\Scripts\ss_facebook_on.gif
c:\program files\McAfee\SiteAdvisor\Scripts\ss_footer_c.gif
c:\program files\McAfee\SiteAdvisor\Scripts\ss_footer_l.gif
c:\program files\McAfee\SiteAdvisor\Scripts\ss_footer_r.gif
c:\program files\McAfee\SiteAdvisor\Scripts\ss_header_c.gif
c:\program files\McAfee\SiteAdvisor\Scripts\ss_header_l.gif
c:\program files\McAfee\SiteAdvisor\Scripts\ss_header_r.gif
c:\program files\McAfee\SiteAdvisor\Scripts\ss_twitter_off.gif
c:\program files\McAfee\SiteAdvisor\Scripts\ss_twitter_on.gif
c:\program files\McAfee\SiteAdvisor\Scripts\unselected_tab.gif
c:\program files\McAfee\SiteAdvisor\Scripts\untested.gif
c:\program files\McAfee\SiteAdvisor\Scripts\vertical_divider.png
c:\program files\McAfee\SiteAdvisor\Scripts\vertical_divider_live.png
c:\program files\McAfee\SiteAdvisor\Scripts\w_banner_c.gif
c:\program files\McAfee\SiteAdvisor\Scripts\w_banner_l.gif
c:\program files\McAfee\SiteAdvisor\Scripts\w_banner_r.gif
c:\program files\McAfee\SiteAdvisor\Scripts\w_banner_sep.gif
c:\program files\McAfee\SiteAdvisor\Scripts\w_bottom_c.gif
c:\program files\McAfee\SiteAdvisor\Scripts\w_bottom_l.gif
c:\program files\McAfee\SiteAdvisor\Scripts\w_bottom_r.gif
c:\program files\McAfee\SiteAdvisor\Scripts\w_bottom_sep.gif
c:\program files\McAfee\SiteAdvisor\Scripts\w_footer_c.gif
c:\program files\McAfee\SiteAdvisor\Scripts\w_footer_l.gif
c:\program files\McAfee\SiteAdvisor\Scripts\w_footer_r.gif
c:\program files\McAfee\SiteAdvisor\Scripts\w_header_c.gif
c:\program files\McAfee\SiteAdvisor\Scripts\w_header_l.gif
c:\program files\McAfee\SiteAdvisor\Scripts\w_header_r.gif
c:\program files\McAfee\SiteAdvisor\Scripts\w_icon.gif
c:\program files\McAfee\SiteAdvisor\Scripts\w_upsell_border.gif
c:\program files\McAfee\SiteAdvisor\Scripts\warning.html
c:\program files\McAfee\SiteAdvisor\Scripts\warning.js
c:\program files\McAfee\SiteAdvisor\Scripts\wleftarrow.gif
c:\program files\McAfee\SiteAdvisor\Scripts\wrightarrow.gif
c:\program files\McAfee\SiteAdvisor\Scripts\xdown.gif
c:\program files\McAfee\SiteAdvisor\Scripts\xup.gif
c:\program files\McAfee\SiteAdvisor\Scripts\xup_light.png
c:\program files\McAfee\SiteAdvisor\Scripts\y_banner_c.gif
c:\program files\McAfee\SiteAdvisor\Scripts\y_banner_l.gif
c:\program files\McAfee\SiteAdvisor\Scripts\y_banner_r.gif
c:\program files\McAfee\SiteAdvisor\Scripts\y_banner_sep.gif
c:\program files\McAfee\SiteAdvisor\Scripts\y_bottom_c.gif
c:\program files\McAfee\SiteAdvisor\Scripts\y_bottom_l.gif
c:\program files\McAfee\SiteAdvisor\Scripts\y_bottom_r.gif
c:\program files\McAfee\SiteAdvisor\Scripts\y_bottom_sep.gif
c:\program files\McAfee\SiteAdvisor\Scripts\y_facet.gif
c:\program files\McAfee\SiteAdvisor\Scripts\y_footer_c.gif
c:\program files\McAfee\SiteAdvisor\Scripts\y_footer_l.gif
c:\program files\McAfee\SiteAdvisor\Scripts\y_footer_r.gif
c:\program files\McAfee\SiteAdvisor\Scripts\y_header_c.gif
c:\program files\McAfee\SiteAdvisor\Scripts\y_header_l.gif
c:\program files\McAfee\SiteAdvisor\Scripts\y_header_r.gif
c:\program files\McAfee\SiteAdvisor\Scripts\y_header_r_nox.gif
c:\program files\McAfee\SiteAdvisor\Scripts\y_icon.gif
c:\program files\McAfee\SiteAdvisor\Scripts\y_upsell_border.gif
c:\program files\McAfee\SiteAdvisor\Scripts\yahoo.js
c:\program files\McAfee\SiteAdvisor\Scripts\yellow.gif
c:\program files\McAfee\SiteAdvisor\Scripts\yleftarrow.gif
c:\program files\McAfee\SiteAdvisor\Scripts\yrightarrow.gif
c:\program files\McAfee\SiteAdvisor\Scripts\ytri.gif
c:\program files\McAfee\SiteAdvisor\uninstall.exe
c:\program files\McAfee\Temp\qxzCE\actwizui.inf
c:\program files\McAfee\Temp\qxzCE\avap.inf
c:\program files\McAfee\Temp\qxzCE\extra.rul
c:\program files\McAfee\Temp\qxzCE\Fix519818.exe
c:\program files\McAfee\Temp\qxzCE\InstProg.dll
c:\program files\McAfee\Temp\qxzCE\langmap.dat
c:\program files\McAfee\Temp\qxzCE\LangSel.dll
c:\program files\McAfee\Temp\qxzCE\license.txt
c:\program files\McAfee\Temp\qxzCE\mcactui.dll
c:\program files\McAfee\Temp\qxzCE\mcactui.inf
c:\program files\McAfee\Temp\qxzCE\mcactwiz.dll
c:\program files\McAfee\Temp\qxzCE\mcactwiz.inf
c:\program files\McAfee\Temp\qxzCE\mcactwiz_ld.dll
c:\program files\McAfee\Temp\qxzCE\mcafee.html
c:\program files\McAfee\Temp\qxzCE\mcagent.exe
c:\program files\McAfee\Temp\qxzCE\mcagntps.dll
c:\program files\McAfee\Temp\qxzCE\mcawlang.inf
c:\program files\McAfee\Temp\qxzCE\mcbrwsr2.dll
c:\program files\McAfee\Temp\qxzCE\mccontextust.dll
c:\program files\McAfee\Temp\qxzCE\mccore.inf
c:\program files\McAfee\Temp\qxzCE\McCorePS.dll
c:\program files\McAfee\Temp\qxzCE\McCtxMenuFrmWrk.dll
c:\program files\McAfee\Temp\qxzCE\McDBMgr.dll
c:\program files\McAfee\Temp\qxzCE\McDisc.dll
c:\program files\McAfee\Temp\qxzCE\McDiscPS.dll
c:\program files\McAfee\Temp\qxzCE\McDspWrp.dll
c:\program files\McAfee\Temp\qxzCE\mcdspwrp.inf
c:\program files\McAfee\Temp\qxzCE\McEvtBrk.dll
c:\program files\McAfee\Temp\qxzCE\McGsShm.dll
c:\program files\McAfee\Temp\qxzCE\mchlp32.exe
c:\program files\McAfee\Temp\qxzCE\McHNShim.dll
c:\program files\McAfee\Temp\qxzCE\McHNShPS.dll
c:\program files\McAfee\Temp\qxzCE\mchost.exe
c:\program files\McAfee\Temp\qxzCE\mcinfo.exe
c:\program files\McAfee\Temp\qxzCE\McInstru.dll
c:\program files\McAfee\Temp\qxzCE\mcinstru.exe
c:\program files\McAfee\Temp\qxzCE\McIPTShm.dll
c:\program files\McAfee\Temp\qxzCE\mclangmap.inf
c:\program files\McAfee\Temp\qxzCE\McLib.lib
c:\program files\McAfee\Temp\qxzCE\McLogShm.dll
c:\program files\McAfee\Temp\qxzCE\mcltvers.ini
c:\program files\McAfee\Temp\qxzCE\mclwapi.dll
c:\program files\McAfee\Temp\qxzCE\McMISPPS.dll
c:\program files\McAfee\Temp\qxzCE\mcmispps.inf
c:\program files\McAfee\Temp\qxzCE\McMPFEvt.dll
c:\program files\McAfee\Temp\qxzCE\mcmschlp.dll
c:\program files\McAfee\Temp\qxzCE\mcmscins.dll
c:\program files\McAfee\Temp\qxzCE\McMscShm.dll
c:\program files\McAfee\Temp\qxzCE\mcmscsub.dll
c:\program files\McAfee\Temp\qxzCE\McMscVer.dll
c:\program files\McAfee\Temp\qxzCE\McNdAtpg.dll
c:\program files\McAfee\Temp\qxzCE\McNDLor.dll
c:\program files\McAfee\Temp\qxzCE\McNDSv.dll
c:\program files\McAfee\Temp\qxzCE\McNDSVPS.dll
c:\program files\McAfee\Temp\qxzCE\McNMAtpg.dll
c:\program files\McAfee\Temp\qxzCE\McNmcIns.dll
c:\program files\McAfee\Temp\qxzCE\McNmcLoR.dll
c:\program files\McAfee\Temp\qxzCE\McNmcShell.exe
c:\program files\McAfee\Temp\qxzCE\McNmcSPS.dll
c:\program files\McAfee\Temp\qxzCE\McNmcSrv.dll
c:\program files\McAfee\Temp\qxzCE\McNmcVer.dll
c:\program files\McAfee\Temp\qxzCE\mcocdisable.inf
c:\program files\McAfee\Temp\qxzCE\mcocenable.inf
c:\program files\McAfee\Temp\qxzCE\mcocinstru.inf
c:\program files\McAfee\Temp\qxzCE\mcoemmgr.exe
c:\program files\McAfee\Temp\qxzCE\mcoemmgr.inf
c:\program files\McAfee\Temp\qxzCE\mcoemres.dll
c:\program files\McAfee\Temp\qxzCE\mcoemres.inf
c:\program files\McAfee\Temp\qxzCE\mcprlalt.dll
c:\program files\McAfee\Temp\qxzCE\mcprlres.dll
c:\program files\McAfee\Temp\qxzCE\McPrsShm.dll
c:\program files\McAfee\Temp\qxzCE\McRegObj.dll
c:\program files\McAfee\Temp\qxzCE\McRTMui.dll
c:\program files\McAfee\Temp\qxzCE\mcscindx.dat
c:\program files\McAfee\Temp\qxzCE\mcscrhlp.dll
c:\program files\McAfee\Temp\qxzCE\McSmpUI.dll
c:\program files\McAfee\Temp\qxzCE\McSmtFWk.exe
c:\program files\McAfee\Temp\qxzCE\mcsmtmsg.inf
c:\program files\McAfee\Temp\qxzCE\McSmtStr.dll
c:\program files\McAfee\Temp\qxzCE\McSmtTsk.dll
c:\program files\McAfee\Temp\qxzCE\McSnIEPl.dll
c:\program files\McAfee\Temp\qxzCE\mcsubmgr.dll
c:\program files\McAfee\Temp\qxzCE\mcsvrcnt.exe
c:\program files\McAfee\Temp\qxzCE\mcsync.exe
c:\program files\McAfee\Temp\qxzCE\mcuc.inf
c:\program files\McAfee\Temp\qxzCE\McUiCfg.dll
c:\program files\McAfee\Temp\qxzCE\mcuicnt.exe
c:\program files\McAfee\Temp\qxzCE\mcuihost.exe
c:\program files\McAfee\Temp\qxzCE\mcuinshm.dll
c:\program files\McAfee\Temp\qxzCE\mcuninst.exe
c:\program files\McAfee\Temp\qxzCE\mcupdate.exe
c:\program files\McAfee\Temp\qxzCE\McUpdMgr.exe
c:\program files\McAfee\Temp\qxzCE\McUpdShm.dll
c:\program files\McAfee\Temp\qxzCE\mcutil.dll
c:\program files\McAfee\Temp\qxzCE\mcutil2.dll
c:\program files\McAfee\Temp\qxzCE\misplf.dll
c:\program files\McAfee\Temp\qxzCE\mispreg.exe
c:\program files\McAfee\Temp\qxzCE\msc\mscLI.inf
c:\program files\McAfee\Temp\qxzCE\msccmn.inf
c:\program files\McAfee\Temp\qxzCE\msccust.inf
c:\program files\McAfee\Temp\qxzCE\mscinres.dll
c:\program files\McAfee\Temp\qxzCE\mscjsres.dll
c:\program files\McAfee\Temp\qxzCE\msclgmis.inf
c:\program files\McAfee\Temp\qxzCE\mscmisc.inf
c:\program files\McAfee\Temp\qxzCE\mscoobe.inf
c:\program files\McAfee\Temp\qxzCE\mscprmgr.inf
c:\program files\McAfee\Temp\qxzCE\mscpstLI.inf
c:\program files\McAfee\Temp\qxzCE\mscreg.inf
c:\program files\McAfee\Temp\qxzCE\mscrem.inf
c:\program files\McAfee\Temp\qxzCE\mscres.inf
c:\program files\McAfee\Temp\qxzCE\mscshll.inf
c:\program files\McAfee\Temp\qxzCE\mscsvc.inf
c:\program files\McAfee\Temp\qxzCE\mscuild.dll
c:\program files\McAfee\Temp\qxzCE\mscuimgr.inf
c:\program files\McAfee\Temp\qxzCE\mscupd.inf
c:\program files\McAfee\Temp\qxzCE\nmcdef.inf
c:\program files\McAfee\Temp\qxzCE\NMCJsRes.dll
c:\program files\McAfee\Temp\qxzCE\nmcLI32.inf
c:\program files\McAfee\Temp\qxzCE\nmcuicfg.dat
c:\program files\McAfee\Temp\qxzCE\npMcSnFFPl.dll
c:\program files\McAfee\Temp\qxzCE\oemui.dll
c:\program files\McAfee\Temp\qxzCE\oemui.inf
c:\program files\McAfee\Temp\qxzCE\oemuild.dll
c:\program files\McAfee\Temp\qxzCE\oemuild.inf
c:\program files\McAfee\Temp\qxzCE\RprtShm.dll
c:\program files\McAfee\Temp\qxzCE\sqlite3.dll
c:\program files\McAfee\Temp\qxzCE\TskTCShm.dll
c:\program files\McAfee\Temp\qxzCE\vscore.inf
c:\program files\McAfee\Temp\qxzCE\vscore_fresh.inf
c:\program files\McAfee\Temp\qxzCE\vscore_pre.inf
c:\program files\McAfee\Temp\qxzCE\vscore_update.inf
c:\program files\McAfee\Temp\qxzCE\x64\mcactui.dll
c:\program files\McAfee\Temp\qxzCE\x64\mcactwiz.dll
c:\program files\McAfee\Temp\qxzCE\x64\mcactwiz_ld.dll
c:\program files\McAfee\Temp\qxzCE\x64\McInstru.dll
c:\program files\McAfee\Temp\qxzCE\x64\mcinstru.exe
c:\program files\McAfee\Temp\qxzCE\x64\mcoemmgr.exe
c:\program files\McAfee\Temp\qxzD3\actwizui.inf
c:\program files\McAfee\Temp\qxzD3\avap.inf
c:\program files\McAfee\Temp\qxzD3\extra.rul
c:\program files\McAfee\Temp\qxzD3\Fix519818.exe
c:\program files\McAfee\Temp\qxzD3\InstProg.dll
c:\program files\McAfee\Temp\qxzD3\langmap.dat
c:\program files\McAfee\Temp\qxzD3\LangSel.dll
c:\program files\McAfee\Temp\qxzD3\license.txt
c:\program files\McAfee\Temp\qxzD3\mcactui.dll
c:\program files\McAfee\Temp\qxzD3\mcactui.inf
c:\program files\McAfee\Temp\qxzD3\mcactwiz.dll
c:\program files\McAfee\Temp\qxzD3\mcactwiz.inf
c:\program files\McAfee\Temp\qxzD3\mcactwiz_ld.dll
c:\program files\McAfee\Temp\qxzD3\mcafee.html
c:\program files\McAfee\Temp\qxzD3\mcagent.exe
c:\program files\McAfee\Temp\qxzD3\mcagntps.dll
c:\program files\McAfee\Temp\qxzD3\mcawlang.inf
c:\program files\McAfee\Temp\qxzD3\mcbrwsr2.dll
c:\program files\McAfee\Temp\qxzD3\mccontextust.dll
c:\program files\McAfee\Temp\qxzD3\mccore.inf
c:\program files\McAfee\Temp\qxzD3\McCorePS.dll
c:\program files\McAfee\Temp\qxzD3\McCtxMenuFrmWrk.dll
c:\program files\McAfee\Temp\qxzD3\McDBMgr.dll
c:\program files\McAfee\Temp\qxzD3\McDisc.dll
c:\program files\McAfee\Temp\qxzD3\McDiscPS.dll
c:\program files\McAfee\Temp\qxzD3\McDspWrp.dll
c:\program files\McAfee\Temp\qxzD3\mcdspwrp.inf
c:\program files\McAfee\Temp\qxzD3\McEvtBrk.dll
c:\program files\McAfee\Temp\qxzD3\McGsShm.dll
c:\program files\McAfee\Temp\qxzD3\mchlp32.exe
c:\program files\McAfee\Temp\qxzD3\McHNShim.dll
c:\program files\McAfee\Temp\qxzD3\McHNShPS.dll
c:\program files\McAfee\Temp\qxzD3\mchost.exe
c:\program files\McAfee\Temp\qxzD3\mcinfo.exe
c:\program files\McAfee\Temp\qxzD3\McInstru.dll
c:\program files\McAfee\Temp\qxzD3\mcinstru.exe
c:\program files\McAfee\Temp\qxzD3\McIPTShm.dll
c:\program files\McAfee\Temp\qxzD3\mclangmap.inf
c:\program files\McAfee\Temp\qxzD3\McLib.lib
c:\program files\McAfee\Temp\qxzD3\McLogShm.dll
c:\program files\McAfee\Temp\qxzD3\mcltvers.ini
c:\program files\McAfee\Temp\qxzD3\mclwapi.dll
c:\program files\McAfee\Temp\qxzD3\McMISPPS.dll
c:\program files\McAfee\Temp\qxzD3\mcmispps.inf
c:\program files\McAfee\Temp\qxzD3\McMPFEvt.dll
c:\program files\McAfee\Temp\qxzD3\mcmschlp.dll
c:\program files\McAfee\Temp\qxzD3\mcmscins.dll
c:\program files\McAfee\Temp\qxzD3\McMscShm.dll
c:\program files\McAfee\Temp\qxzD3\mcmscsub.dll
c:\program files\McAfee\Temp\qxzD3\McMscVer.dll
c:\program files\McAfee\Temp\qxzD3\McNdAtpg.dll
c:\program files\McAfee\Temp\qxzD3\McNDLor.dll
c:\program files\McAfee\Temp\qxzD3\McNDSv.dll
c:\program files\McAfee\Temp\qxzD3\McNDSVPS.dll
c:\program files\McAfee\Temp\qxzD3\McNMAtpg.dll
c:\program files\McAfee\Temp\qxzD3\McNmcIns.dll
c:\program files\McAfee\Temp\qxzD3\McNmcLoR.dll
c:\program files\McAfee\Temp\qxzD3\McNmcShell.exe
c:\program files\McAfee\Temp\qxzD3\McNmcSPS.dll
c:\program files\McAfee\Temp\qxzD3\McNmcSrv.dll
c:\program files\McAfee\Temp\qxzD3\McNmcVer.dll
c:\program files\McAfee\Temp\qxzD3\mcocdisable.inf
c:\program files\McAfee\Temp\qxzD3\mcocenable.inf
c:\program files\McAfee\Temp\qxzD3\mcocinstru.inf
c:\program files\McAfee\Temp\qxzD3\mcoemmgr.exe
c:\program files\McAfee\Temp\qxzD3\mcoemmgr.inf
c:\program files\McAfee\Temp\qxzD3\mcoemres.dll
c:\program files\McAfee\Temp\qxzD3\mcoemres.inf
c:\program files\McAfee\Temp\qxzD3\mcprlalt.dll
c:\program files\McAfee\Temp\qxzD3\mcprlres.dll
c:\program files\McAfee\Temp\qxzD3\McPrsShm.dll
c:\program files\McAfee\Temp\qxzD3\McRegObj.dll
c:\program files\McAfee\Temp\qxzD3\McRTMui.dll
c:\program files\McAfee\Temp\qxzD3\mcscindx.dat
c:\program files\McAfee\Temp\qxzD3\mcscrhlp.dll
c:\program files\McAfee\Temp\qxzD3\McSmpUI.dll
c:\program files\McAfee\Temp\qxzD3\McSmtFWk.exe
c:\program files\McAfee\Temp\qxzD3\mcsmtmsg.inf
c:\program files\McAfee\Temp\qxzD3\McSmtStr.dll
c:\program files\McAfee\Temp\qxzD3\McSmtTsk.dll
c:\program files\McAfee\Temp\qxzD3\McSnIEPl.dll
c:\program files\McAfee\Temp\qxzD3\mcsubmgr.dll
c:\program files\McAfee\Temp\qxzD3\mcsvrcnt.exe
c:\program files\McAfee\Temp\qxzD3\mcsync.exe
c:\program files\McAfee\Temp\qxzD3\mcuc.inf
c:\program files\McAfee\Temp\qxzD3\McUiCfg.dll
c:\program files\McAfee\Temp\qxzD3\mcuicnt.exe
c:\program files\McAfee\Temp\qxzD3\mcuihost.exe
c:\program files\McAfee\Temp\qxzD3\mcuinshm.dll
c:\program files\McAfee\Temp\qxzD3\mcuninst.exe
c:\program files\McAfee\Temp\qxzD3\mcupdate.exe
c:\program files\McAfee\Temp\qxzD3\McUpdMgr.exe
c:\program files\McAfee\Temp\qxzD3\McUpdShm.dll
c:\program files\McAfee\Temp\qxzD3\mcutil.dll
c:\program files\McAfee\Temp\qxzD3\mcutil2.dll
c:\program files\McAfee\Temp\qxzD3\misplf.dll
c:\program files\McAfee\Temp\qxzD3\mispreg.exe
c:\program files\McAfee\Temp\qxzD3\msc\mscLI.inf
c:\program files\McAfee\Temp\qxzD3\msccmn.inf
c:\program files\McAfee\Temp\qxzD3\msccust.inf
c:\program files\McAfee\Temp\qxzD3\mscinres.dll
c:\program files\McAfee\Temp\qxzD3\mscjsres.dll
c:\program files\McAfee\Temp\qxzD3\msclgmis.inf
c:\program files\McAfee\Temp\qxzD3\mscmisc.inf
c:\program files\McAfee\Temp\qxzD3\mscoobe.inf
c:\program files\McAfee\Temp\qxzD3\mscprmgr.inf
c:\program files\McAfee\Temp\qxzD3\mscpstLI.inf
c:\program files\McAfee\Temp\qxzD3\mscreg.inf
c:\program files\McAfee\Temp\qxzD3\mscrem.inf
c:\program files\McAfee\Temp\qxzD3\mscres.inf
c:\program files\McAfee\Temp\qxzD3\mscshll.inf
c:\program files\McAfee\Temp\qxzD3\mscsvc.inf
c:\program files\McAfee\Temp\qxzD3\mscuild.dll
c:\program files\McAfee\Temp\qxzD3\mscuimgr.inf
c:\program files\McAfee\Temp\qxzD3\mscupd.inf
c:\program files\McAfee\Temp\qxzD3\nmcdef.inf
c:\program files\McAfee\Temp\qxzD3\NMCJsRes.dll
c:\program files\McAfee\Temp\qxzD3\nmcLI32.inf
c:\program files\McAfee\Temp\qxzD3\nmcuicfg.dat
c:\program files\McAfee\Temp\qxzD3\npMcSnFFPl.dll
c:\program files\McAfee\Temp\qxzD3\oemui.dll
c:\program files\McAfee\Temp\qxzD3\oemui.inf
c:\program files\McAfee\Temp\qxzD3\oemuild.dll
c:\program files\McAfee\Temp\qxzD3\oemuild.inf
c:\program files\McAfee\Temp\qxzD3\RprtShm.dll
c:\program files\McAfee\Temp\qxzD3\sqlite3.dll
c:\program files\McAfee\Temp\qxzD3\TskTCShm.dll
c:\program files\McAfee\Temp\qxzD3\vscore.inf
c:\program files\McAfee\Temp\qxzD3\vscore_fresh.inf
c:\program files\McAfee\Temp\qxzD3\vscore_pre.inf
c:\program files\McAfee\Temp\qxzD3\vscore_update.inf
c:\program files\McAfee\Temp\qxzD3\x64\mcactui.dll
c:\program files\McAfee\Temp\qxzD3\x64\mcactwiz.dll
c:\program files\McAfee\Temp\qxzD3\x64\mcactwiz_ld.dll
c:\program files\McAfee\Temp\qxzD3\x64\McInstru.dll
c:\program files\McAfee\Temp\qxzD3\x64\mcinstru.exe
c:\program files\McAfee\Temp\qxzD3\x64\mcoemmgr.exe
c:\program files\McAfee\Temp\qxzD4\mscLD.inf
c:\program files\McAfee\Temp\qxzD5\mclgtmpl.inf
c:\program files\McAfee\Temp\qxzDA\mscLD.inf
c:\program files\McAfee\Temp\qxzDB\mclgtmpl.inf
c:\program files\McAfee\Temp\qxzE2\override.inf
c:\program files\McAfee\Temp\qxzF0\override.inf
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
——-\Legacy_McAfee_SiteAdvisor_Service
——-\Legacy_McAfee_SiteAdvisor_Service
——-\Legacy_mfefire
——-\Service_McAfee SiteAdvisor Service
——-\Service_McAfee SiteAdvisor Service
——-\Service_mfefire
.
.
((((((((((((((((((((((((( Files Created from 2012-06-11 to 2012-07-11 )))))))))))))))))))))))))))))))
.
.
2012-07-09 01:21 . 2012-07-09 01:21 ——– d–h–w- c:\windows\system32\GroupPolicy
2012-07-09 00:44 . 2012-04-04 14:56 22344 —-a-w- c:\windows\system32\drivers\mbam.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-06-02 14:19 . 2007-05-30 22:39 22040 —-a-w- c:\windows\system32\wucltui.dll.mui
2012-06-02 14:19 . 2007-05-30 22:39 15384 —-a-w- c:\windows\system32\wuaucpl.cpl.mui
2012-06-02 14:19 . 2005-08-16 03:40 329240 —-a-w- c:\windows\system32\wucltui.dll
2012-06-02 14:19 . 2005-08-16 03:40 210968 —-a-w- c:\windows\system32\wuweb.dll
2012-06-02 14:19 . 2005-08-16 03:40 219160 —-a-w- c:\windows\system32\wuaucpl.cpl
2012-06-02 14:19 . 2007-05-30 22:39 15384 —-a-w- c:\windows\system32\wuapi.dll.mui
2012-06-02 14:19 . 2005-08-16 03:40 53784 —-a-w- c:\windows\system32\wuauclt.exe
2012-06-02 14:19 . 2005-08-16 03:40 35864 —-a-w- c:\windows\system32\wups.dll
2012-06-02 14:19 . 2005-08-16 03:18 97304 —-a-w- c:\windows\system32\cdm.dll
2012-06-02 14:19 . 2005-05-26 03:16 45080 —-a-w- c:\windows\system32\wups2.dll
2012-06-02 14:19 . 2007-05-30 22:39 17944 —-a-w- c:\windows\system32\wuaueng.dll.mui
2012-06-02 14:19 . 2005-08-16 03:40 577048 —-a-w- c:\windows\system32\wuapi.dll
2012-06-02 14:19 . 2005-08-16 03:40 1933848 —-a-w- c:\windows\system32\wuaueng.dll
2012-06-02 14:18 . 2007-05-31 18:20 17136 —-a-w- c:\windows\system32\mucltui.dll.mui
2012-06-02 14:18 . 2006-12-20 00:22 214256 —-a-w- c:\windows\system32\muweb.dll
2012-06-02 14:18 . 2006-12-20 00:22 275696 —-a-w- c:\windows\system32\mucltui.dll
2012-05-24 01:40 . 2012-05-24 01:40 28424 —-a-w- c:\windows\system32\drivers\avgmfx86.sys
2012-05-24 00:37 . 2012-05-24 00:37 8072272 —-a-w- c:\documents and settings\All Users\Application Data\Microsoft\BingBar\BBSvc\7.1.382.0oemBingBarSetup-Partner.EXE
2012-05-19 18:50 . 2011-08-18 00:46 97208 —-a-w- c:\program files\mozilla firefox\components\browsercomps.dll
2010-09-01 11:12 . 2008-08-27 13:08 119808 —-a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
2011-04-14 13:01 . 2010-08-21 19:07 24376 —-a-w- c:\program files\mozilla firefox\components\Scriptff.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2012-07-11_02.21.34 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-07-11 02:56 . 2012-07-11 02:56 16384 c:\windows\Temp\Perflib_Perfdata_47c.dat
+ 2012-07-11 02:56 . 2012-07-11 02:56 16384 c:\windows\Temp\Perflib_Perfdata_23c.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DellSupport"="c:\program files\Dell Support\DSAgnt.exe" [2004-07-19 306688]
"kdx"="c:\program files\Kontiki\KHost.exe" [2007-04-23 1032640]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-13 68856]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-09-29 67584]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-12-14 7323648]
"CTHelper"="CTHELPER.EXE" [2005-11-08 16384]
"CTxfiHlp"="CTXFIHLP.EXE" [2006-03-02 18944]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2005-06-17 139264]
"CTDVDDET"="c:\program files\Creative\Sound Blaster X-Fi\DVDAudio\CTDVDDET.EXE" [2003-06-18 45056]
"VolPanel"="c:\program files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe" [2005-10-14 122880]
"AudioDrvEmulator"="c:\program files\Creative\Shared Files\Module Loader\DLLML.exe" [2005-11-04 49152]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2005-06-10 81920]
"AOLDialer"="c:\program files\Common Files\AOL\ACS\AOLDial.exe" [2004-11-09 497240]
"DLA"="c:\windows\System32\DLA\DLACTRLW.EXE" [2005-09-08 122940]
"dlccmon.exe"="c:\program files\Dell Photo AIO Printer 924\dlccmon.exe" [2005-10-21 430080]
"Corel Photo Downloader"="c:\program files\Corel\Corel Photo Album 6\MediaDetect.exe" [2006-02-09 106496]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2010-09-01 30192]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-04-20 58656]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-10-14 49152]
"hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2007-08-22 80896]
"ISUSPM Startup"="c:\program files\Common Files\InstallShield\UpdateService\isuspm.exe" [2005-06-10 249856]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2011-07-05 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-08-19 421736]
"TkBellExe"="c:\program files\real\realplayer\update\realsched.exe" [2011-12-18 296056]
"McAfeeWrapperApplication"="c:\program files\McAfeeMOBK\WrapperTrayIcon.exe" [2010-11-01 453344]
"DLCCCATS"="c:\windows\System32\spool\DRIVERS\W32X86\3\DLCCtime.dll" [2005-09-13 73728]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2011-07-27 434080]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\Dougie\Start Menu\Programs\Startup\
BBC iPlayer Desktop.lnk - c:\program files\BBC iPlayer Desktop\BBC iPlayer Desktop.exe [2011-6-26 142848]
OpenOffice.org 3.1.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2009-8-18 384000]
.
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2008-4-23 29696]
AOL 9.0 Tray Icon.lnk - c:\program files\AOL 9.0\aoltray.exe [2006-4-6 156784]
Audible Download Manager.lnk - c:\program files\Audible\Bin\AudibleDownloadHelper.exe [2009-4-29 1787224]
Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2006-4-6 24576]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-10-14 214360]
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe"=
"c:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe"=
"c:\\Program Files\\AOL 9.0\\waol.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Kontiki\\KService.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\SoulseekNS\\slsk.exe"=
"c:\\Program Files\\Huawei technologies\\Huawei UMTS Data Card\\3 USB Modem.exe"=
"c:\\Program Files\\Intel\\PROSetWired\\NCS\\PROSet\\PROSet.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\AVG\\AVG2012\\avgnsx.exe"=
"c:\\Program Files\\AVG\\AVG2012\\avgdiagex.exe"=
"c:\\Program Files\\AVG\\AVG2012\\avgmfapx.exe"=
"c:\\Program Files\\AVG\\AVG2012\\avgemcx.exe"=
.
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [31/01/2012 04:46 31952]
R1 AvgLdx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [22/02/2012 05:25 235216]
R1 AvgTdiX;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [19/03/2012 05:17 301248]
R1 mfetdi2k;McAfee Inc. mfetdi2k;c:\windows\system32\drivers\mfetdi2k.sys [13/03/2012 17:42 89792]
R2 avg9wd;AVG Free WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [24/05/2012 02:39 285392]
R2 BBSvc;BingBar Service;c:\program files\Microsoft\BingBar\7.1.382.0\BBSvc.EXE [16/04/2012 17:49 193616]
R2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [18/09/2011 23:25 151880]
R3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [13/03/2012 17:42 340920]
R3 xpsec;IPSEC driver;c:\windows\system32\drivers\xpsec.sys –> c:\windows\system32\drivers\xpsec.sys [?]
S0 pfdewi;pfdewi;c:\windows\system32\drivers\cnrn.sys –> c:\windows\system32\drivers\cnrn.sys [?]
S2 gupdate1cac295ec48ec54;Google Update Service (gupdate1cac295ec48ec54);c:\program files\Google\Update\GoogleUpdate.exe [13/03/2010 11:14 133104]
S3 1syqo.sys;1syqo.sys;\??\c:\windows\system32\drivers\1syqo.sys –> c:\windows\system32\drivers\1syqo.sys [?]
S3 BBUpdate;BBUpdate;c:\program files\Microsoft\BingBar\7.1.382.0\SeaPort.EXE [16/04/2012 17:49 240208]
S3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [13/03/2012 17:42 57600]
S3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\drivers\ewusbnet.sys [07/11/2010 18:52 112640]
S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [21/04/2006 19:47 30192]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [13/03/2010 11:14 133104]
S3 mfendisk;McAfee Core NDIS Intermediate Filter;c:\windows\system32\drivers\mfendisk.sys [13/03/2012 17:42 83856]
S3 mfendiskmp;mfendiskmp;c:\windows\system32\drivers\mfendisk.sys [13/03/2012 17:42 83856]
S3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [13/03/2012 17:42 87656]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [19/05/2012 19:51 129976]
.
— Other Services/Drivers In Memory —
.
*Deregistered* - xcpip
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Contents of the 'Scheduled Tasks' folder
.
2012-04-10 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 11:34]
.
2012-07-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-03-13 10:13]
.
2012-07-10 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-03-13 10:13]
.
2012-07-11 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-1038292835-2904995092-2848636223-1005.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-11-29 16:02]
.
2012-07-11 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-1038292835-2904995092-2848636223-1007.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-11-29 16:02]
.
2012-05-21 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-1038292835-2904995092-2848636223-1005.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-11-29 16:02]
.
2012-05-24 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-1038292835-2904995092-2848636223-1007.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-11-29 16:02]
.
2012-07-11 c:\windows\Tasks\RegCure Program Check.job
- c:\program files\RegCure\RegCure.exe [2008-04-21 21:21]
.
2012-05-24 c:\windows\Tasks\RegCure.job
- c:\program files\RegCure\RegCure.exe [2008-04-21 21:21]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.google.co.uk/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://uk.search.yahoo.com/search?fr=mcafee&p=%s
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\Dougie\Application Data\Mozilla\Firefox\Profiles\pmio7n0d.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - www.google.com
FF - prefs.js: keyword.URL - hxxp://uk.search.yahoo.com/search?fr=mcafee&p=
FF - prefs.js: network.proxy.type - 4
FF - user.js: extensions.funmoods_i.hmpg - true
FF - user.js: extensions.funmoods_i.hmpgUrl - hxxp://start.funmoods.com/?f=1&a=bf4
FF - user.js: extensions.funmoods_i.dfltSrch - true
FF - user.js: extensions.funmoods_i.srchPrvdr - Search
FF - user.js: extensions.funmoods_i.dnsErr - true
FF - user.js: extensions.funmoods_i.newTab - true
FF - user.js: extensions.funmoods_i.newTabUrl - hxxp://start.funmoods.com/?f=2&a=bf4
FF - user.js: extensions.funmoods_i.tlbrSrchUrl - hxxp://start.funmoods.com/results.php?f=3&a=bf4&q=
FF - user.js: extensions.funmoods_i.id - e0387ce20000000000000014a589c33a
FF - user.js: extensions.funmoods_i.instlDay - 15440
FF - user.js: extensions.funmoods_i.vrsn - [removed]
FF - user.js: extensions.funmoods_i.vrsni - [removed]
FF - user.js: extensions.funmoods_i.vrsnTs - [removed]:55
FF - user.js: extensions.funmoods_i.prtnrId - funmoods
FF - user.js: extensions.funmoods_i.prdct - funmoods
FF - user.js: extensions.funmoods_i.aflt - bf4
FF - user.js: extensions.funmoods_i.smplGrp - none
FF - user.js: extensions.funmoods_i.tlbrId - base
FF - user.js: extensions.funmoods_i.instlRef -
FF - user.js: extensions.funmoods_i.dfltLng -
FF - user.js: extensions.funmoods_i.excTlbr - false
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2012-07-11 03:58
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes …
.
scanning hidden autostart entries …
.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
CTHelper = CTHELPER.EXE?
CTxfiHlp = CTXFIHLP.EXE?
DLCCCATS = rundll32 c:\windows\System32\spool\DRIVERS\W32X86\3\DLCCtime.dll,RunDLLEntry???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????
.
scanning hidden files …
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet002\Services\irtqbvfwosecigi]
"imagepath"="\??\c:\windows\TEMP\58.tmp"
.
——————— DLLs Loaded Under Running Processes ———————
.
- - - - - - - > 'explorer.exe'(1688)
c:\windows\system32\WININET.dll
c:\progra~1\WINDOW~3\wmpband.dll
c:\windows\system32\ieframe.dll
c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\MSVCR80.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
———————— Other Running Processes ————————
.
c:\program files\Common Files\AOL\ACS\AOLAcsd.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\windows\system32\CTsvcCDA.exe
c:\windows\eHome\ehRecvr.exe
c:\windows\eHome\ehSched.exe
c:\program files\Intel\Intel Matrix Storage Manager\iaantmon.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Kontiki\KService.exe
c:\windows\system32\nvsvc32.exe
c:\windows\ehome\mcrdsvc.exe
c:\windows\SYSTEM32\CTXFISPI.EXE
c:\program files\OpenOffice.org 3\program\soffice.exe
c:\program files\OpenOffice.org 3\program\soffice.bin
c:\windows\system32\dllhost.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\dlcccoms.exe
c:\program files\iPod\bin\iPodService.exe
c:\program files\HP\Digital Imaging\bin\hpqSTE08.exe
c:\program files\HP\Digital Imaging\bin\hpqbam08.exe
c:\program files\HP\Digital Imaging\bin\hpqgpc01.exe
c:\windows\eHome\ehmsas.exe
.
**************************************************************************
.
Completion time: 2012-07-11 04:03:05 - machine was rebooted
ComboFix-quarantined-files.txt 2012-07-11 03:03
ComboFix2.txt 2012-07-11 02:27
.
Pre-Run: 85,262,409,728 bytes free
Post-Run: 85,096,763,392 bytes free
.
- - End Of File - - 0A6CAC5F9AAFE5277E9F6435E1D40511
I havent been able to run the OTL and aswMBR programs as the Administrator as it keeps telling me that the password is invalid (have tried everything I can think of!). I've ran them as the person who I'm assuming must be the administrator though. Unfortunately once the OTL scan has finished, I'm only getting two Notepad pop-up messages:
'Cannot find the C:\Documents and Settings\Dougie\Desktop\OTL(or Extras).Txt file.
Do you want to create a new file?' - YES/NO/CANCEL
Have had more success with the MBR scan though. Here's the log:
aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software
Run date: 2012-07-13 12:32:27
—————————–
12:32:27.812 OS Version: Windows 5.1.2600 Service Pack 3
12:32:27.812 Number of processors: 2 586 0x602
12:32:27.812 ComputerName: INNIT UserName:
12:32:28.984 Initialize success
12:44:02.028 AVAST engine defs: 12071300
12:45:25.559 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0
12:45:25.559 Disk 0 Vendor: Intel___ 1.0. Size: 476832MB BusType: 3
12:45:25.559 Disk 0 MBR read successfully
12:45:25.559 Disk 0 MBR scan
12:45:25.621 Disk 0 unknown MBR code
12:45:25.637 Disk 0 Partition 1 00 DE Dell Utility Dell 8.0 47 MB offset 63
12:45:25.653 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 471925 MB offset 96390
12:45:25.684 Disk 0 Partition 3 00 DB CP/M / CTOS Dell 8.0 4855 MB offset 966598920
12:45:25.684 Disk 0 scanning sectors +976543155
12:45:25.778 Disk 0 scanning C:\WINDOWS\system32\drivers
12:45:41.715 Service scanning
12:46:03.059 Modules scanning
12:46:21.918 Module: C:\WINDOWS\System32\DLA\DLADResN.SYS **SUSPICIOUS**
12:46:22.574 Disk 0 trace - called modules:
12:46:22.590 ntkrnlpa.exe CLASSPNP.SYS disk.sys >>UNKNOWN [0x881dbda8]<<
12:46:22.590 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8ad4aab8]
12:46:22.606 3 CLASSPNP.SYS[ba0e8fd7] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-0[0x8accc030]
12:46:23.574 AVAST engine scan C:\WINDOWS
12:46:48.418 AVAST engine scan C:\WINDOWS\system32
12:50:55.824 AVAST engine scan C:\WINDOWS\system32\drivers
12:51:32.074 AVAST engine scan C:\Documents and Settings\Dougie
13:12:46.996 AVAST engine scan C:\Documents and Settings\All Users
13:14:32.731 Scan finished successfully
13:16:03.809 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Dougie\Desktop\MBR.dat"
13:16:03.824 The log file has been saved successfully to "C:\Documents and Settings\Dougie\Desktop\aswMBR.txtyupyup.txt"
Thanks again.
Jen.
My name is