ComboFix 07-10-07.2 - DAVID 2007-10-09 9:20:14.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.603 [GMT 1:00]
Running from: C:\Documents and Settings\DAVID\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\DAVID\CFScript.txt
* Created a new restore point
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Program Files\PopCap Games
C:\Program Files\PopCap Games\Bookworm Deluxe\bass.dll
C:\Program Files\PopCap Games\Bookworm Deluxe\bonus_word_dictionary.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\Bookworm.exe
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\drm.xml
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\drm.xml.sig
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\fonts\_Arial10.png
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\fonts\_Arial10Bold.png
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\fonts\_Arial12Bold.png
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\fonts\_Arial9.png
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\fonts\_Arial9Bold.png
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\fonts\Arial10.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\fonts\Arial10Bold.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\fonts\Arial12Bold.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\fonts\Arial9.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\fonts\Arial9Bold.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\help.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\bbb.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_buynow.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_buynow2.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_cancel.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_cancel2.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_close.PNG
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_close2.PNG
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_continue.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_continue2.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_finish.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_finish2.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_help.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_help_main.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_help_main2.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_help2.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_mask.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_play.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_play2.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_play3.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_privacy.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_privacy_main.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_privacy_main2.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_privacy2.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_register.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_register2.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_retry.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_retry2.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_security.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_security_main.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_security_main2.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_security2.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_sendreceipt.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\btn_sendreceipt2.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\buyitnowfor.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\buyitnowfor_.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\ecomm_wrapper_background.jpg
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\ecomm_wrapper_background_centered.jpg
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\icon_complete.jpg
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\icon_connected.jpg
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\icon_connecting.jpg
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\ssframe.png
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\images\textlet.png
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\privacy.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\scripts\Bullets.luc
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\scripts\ClassLink.luc
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\scripts\Common.luc
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\scripts\Consts.luc
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\scripts\Default.luc
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\scripts\DProps.luc
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\scripts\DRMApp.luc
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\scripts\DRMButtonWidget.luc
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\scripts\Game.luc
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\scripts\Layout.luc
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\scripts\LuaApp.luc
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\scripts\LuaCommonWidgets.luc
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\scripts\LuaWidget.luc
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\scripts\main.luc
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\scripts\Screen.luc
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\scripts\TextletWidget.luc
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\common\security.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\custom\drm.xml
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\custom\drm.xml.sig
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\custom\images\bullet1.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\custom\images\bullet2.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\custom\images\bullet3.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\esrb.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\game.jpg
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\game_.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\logo.jpg
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\logo_.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\price.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drm\price_.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\drmss.jpg
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\_CourierFinalDraft20Bold.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\_GoldScore.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\_GoldScoreHeated.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\_LegacySerifMdSCITCTT12.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\_Lockergnome14Outline.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\_Lockergnome18.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\_Lockergnome24.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\_LockergnomeSmallColor.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\_MyriadCondensedWeb11.png
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\_MyriadWeb10.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\_MyriadWeb12Bold.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\_ScrippsCollegeOS13Bold.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\_ScrippsCollegeOS15Bold.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\_ScrippsCollegeOS18Bold.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\_Verdana10Bold.png
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\_Verdana12Bold.png
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\_Verdana14Bold.png
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\_Verdana18Bold.png
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\_Verdana18BoldColor.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\CourierFinalDraft20Bold.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\CourierFinalDraft20Bold.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\GoldScore.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\GoldScore.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\GoldScoreHeated.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\GoldScoreHeated.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\LegacySerifMdSCITCTT12.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\Lockergnome14Outline.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\Lockergnome14Outline.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\Lockergnome18.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\Lockergnome24.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\LockergnomeSmallColor.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\LockergnomeSmallColor.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\MyriadCondensedWeb11.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\MyriadWeb10.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\MyriadWeb12Bold.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\ScrippsCollegeOS13Bold.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\ScrippsCollegeOS15Bold.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\ScrippsCollegeOS18Bold.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\Verdana10Bold.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\Verdana12Bold.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\Verdana14Bold.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\Verdana18Bold.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\Verdana18BoldColor.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\fonts\Verdana18BoldColor.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_arrows.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_backdrop_bonus.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_backdrop_help_box.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_backdrop_register.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_backdrop_title_loadmeter.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_backdrop_wb_speech.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_backdrop_wb_text.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_backdrop_wb_thought.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_bar_footer_continue.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_bar_footer_scroll.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_bar_gameover_header.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_bar_levelup_header.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_bonusarrow_left.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_bonusarrow_right.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_bonusarrow_top.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_button_fame_continue.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_button_goto_fame.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_button_goto_ihs.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_button_help_continue.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_button_help_topic.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_button_help_topic_hilite.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_button_reg_cancel.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_button_reg_regcode.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_button_reg_register.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_button_submit_ihs.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_button_submit_ihs_hilite.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_clouds.jpg
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_cursor_dragging.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_cursor_hand.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_cursor_pointer.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_cursor_text.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_dialog.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_dialog_levelup.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_dialogbutton.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_font_tile_digits.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_font_tile_letters.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_fx_ashflake.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_fx_ember_lrg.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_fx_ember_med.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_fx_ember_sm.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_fx_ember_smoke_lrg.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_fx_ember_smoke_med.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_fx_ember_smoke_sm.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_fx_fireline.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_fx_lex_sweat_seq.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_fx_lex_sweat_trickle.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_fx_particle_lrg.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_fx_particle_med.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_fx_particle_sm.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_fx_smoke_sm.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_gameselect_action.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_gameselect_action_over.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_gameselect_bubble.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_gameselect_classic.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_gameselect_classic_over.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_gameselect_hall.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_gameselect_hall_over.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_gameselect_quit.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_gameselect_quit_over.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_ihs_tab_indicator.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_ihs_tab_names.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_ihs_tab_names_hilite.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_level_up_star.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lex_burnt.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lex_burnt_blink.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lex_eating.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lex_giggle_1.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lex_giggle_2.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lex_glow_idle.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lex_headless.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lex_shadow.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lex_slurp_1.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lex_smile_blink.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lex_smile_idle.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lex_speak_ah.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lex_speak_ee.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lex_speak_oh.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lex_speak_pb.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lex_sweat.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lex_sweat_facing.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lex_wow_1.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lex_wow_2.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lex_wow_3.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lex_wow_4.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lex_wow_5.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lex_wow_6.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lex_wow_7.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lexbig_speak_ah.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lexbig_speak_ee.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lexbig_speak_mm.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lexbig_speak_oo.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_lexbig_speak_pb.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_logo_title.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_progress_burnt.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_progress_green.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_progress_lavender.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_progress_lime.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_progress_magenta.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_progress_multi.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_progress_navy.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_progress_orange.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_progress_purple.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_progress_red.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_progress_tan.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_progress_teal.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_progress_yellow.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_sliderthumb.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_tile.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_tile_charred.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_tile_diamond.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_tile_diamond_hilite.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_tile_fire.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_tile_fire_hilite.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_tile_gold.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_tile_gold_hilite.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_tile_green.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_tile_green_hilite.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_tile_hilite.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_tile_sapphire.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_tile_sapphire_hilite.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_tile_x.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_title_loadmeter.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_title_stamp_registered.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_title_stamp_trial.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_wb_text_shout_tail.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_wb_text_talk_tail.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\_wb_text_think_tail.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\arrows.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\backdrop_board.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\backdrop_board_scorched.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\backdrop_bonus.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\backdrop_fame.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\backdrop_help.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\backdrop_help_box.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\backdrop_ihs.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\backdrop_menu.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\backdrop_register.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\backdrop_title.jpg
C:\Program Files\PopCap Games\Bookworm Deluxe\images\backdrop_title_loadmeter.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\backdrop_wb_speech.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\backdrop_wb_text.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\backdrop_wb_thought.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\bar_footer_continue.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\bar_footer_scroll.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\bar_gameover_header.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\bar_levelup_header.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\bonusarrow_left.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\bonusarrow_right.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\bonusarrow_top.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\button_fame_continue.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\button_goto_fame.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\button_goto_ihs.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\button_help_continue.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\button_help_topic.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\button_help_topic_hilite.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\button_reg_cancel.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\button_reg_regcode.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\button_reg_register.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\button_submit_ihs.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\button_submit_ihs_hilite.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\checkboxes.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\checkboxes_help.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\cursor_dragging.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\cursor_hand.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\cursor_pointer.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\cursor_text.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\dialog.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\dialog_levelup.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\dialogbutton.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\dialogbutton_plain.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\editbox.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\font_tile_digits.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\fx_ashflake.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\fx_ember_lrg.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\fx_ember_med.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\fx_ember_sm.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\fx_ember_smoke_lrg.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\fx_ember_smoke_med.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\fx_ember_smoke_sm.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\fx_fireline.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\fx_flame_lrg.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\fx_lex_sweat_seq.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\fx_lex_sweat_trickle.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\fx_particle_lrg.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\fx_particle_med.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\fx_particle_sm.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\fx_spark_lrg.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\fx_spark_med.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\fx_spark_sm.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\gameselect_action.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\gameselect_action_over.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\gameselect_bubble.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\gameselect_classic.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\gameselect_classic_over.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\gameselect_hall.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\gameselect_hall_over.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\gameselect_quit.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\gameselect_quit_over.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\ihs_alias_warning.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\ihs_tab_indicator.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\ihs_tab_names.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\ihs_tab_names_hilite.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\level_up_star.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\lex_burnt.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\lex_burnt_blink.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\lex_eating.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\lex_giggle_1.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\lex_giggle_2.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\lex_glow_idle.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\lex_headless.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\lex_slurp_1.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\lex_smile_blink.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\lex_smile_idle.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\lex_speak_ah.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\lex_speak_ee.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\lex_speak_oh.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\lex_speak_pb.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\lex_sweat.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\lex_sweat_facing.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\lex_wow_1.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\lex_wow_2.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\lex_wow_3.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\lex_wow_4.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\lex_wow_5.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\lex_wow_6.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\lex_wow_7.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\lexbig_speak_ah.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\lexbig_speak_ee.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\lexbig_speak_mm.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\lexbig_speak_oo.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\lexbig_speak_pb.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\logo_title.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\progress_burnt.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\progress_green.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\progress_lavender.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\progress_lime.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\progress_magenta.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\progress_multi.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\progress_navy.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\progress_orange.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\progress_purple.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\progress_red.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\progress_tan.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\progress_teal.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\progress_yellow.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\rankframe.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\rankstrip.jpg
C:\Program Files\PopCap Games\Bookworm Deluxe\images\sliderthumb.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\slidertrack.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\sparkle.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\sparkle_large.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\Thumbs.db
C:\Program Files\PopCap Games\Bookworm Deluxe\images\tile.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\tile_charred.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\tile_diamond.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\tile_diamond_hilite.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\tile_fire.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\tile_fire_fx1.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\tile_fire_fx2.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\tile_fire_glow.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\tile_fire_hilite.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\tile_gemhilite.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\tile_gold.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\tile_gold_glow.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\tile_gold_hilite.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\tile_green.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\tile_green_glow.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\tile_green_hilite.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\tile_hilite.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\tile_sapphire.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\tile_sapphire_hilite.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\tile_spin_fx.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\tile_x.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\title_loadmeter.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\title_stamp_registered.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\title_stamp_trial.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\waitbar.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\wb_text_shout_tail.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\wb_text_talk_tail.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\images\wb_text_think_tail.gif
C:\Program Files\PopCap Games\Bookworm Deluxe\Install.log
C:\Program Files\PopCap Games\Bookworm Deluxe\Install_props.xml
C:\Program Files\PopCap Games\Bookworm Deluxe\license.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\music\Bookworm1.mo3
C:\Program Files\PopCap Games\Bookworm Deluxe\popdefs.txt
C:\Program Files\PopCap Games\Bookworm Deluxe\PopUninstall.exe
C:\Program Files\PopCap Games\Bookworm Deluxe\properties\partner.xml
C:\Program Files\PopCap Games\Bookworm Deluxe\properties\partner.xml.sig
C:\Program Files\PopCap Games\Bookworm Deluxe\readme.html
C:\Program Files\PopCap Games\Bookworm Deluxe\register.tpl
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\appear2.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\bad.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\blank.au
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\bonuscomplete.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\bonusword.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\buttonclick.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\buzzer.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\chomp.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\flametile.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\gameovertone.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\goldtile.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\lex_astonishing.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\lex_awesome.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\lex_burp.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\lex_careful.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\lex_danger.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\lex_excellent.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\lex_fantastic.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\lex_getready.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\lex_go.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\lex_incredible.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\lex_letsgo.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\lex_levelup.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\lex_lookout.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\lex_scramble.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\lex_unbelievable.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\lex_verygood.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\lex_watchout.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\lex_welcome.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\nextselect.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\piece_hit.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\redtilecleared.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\screenburngameover.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\spinsuperbonus.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\tileburn.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\up1.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\up2.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\up3.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\up4.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\up5.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\up6.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\up7.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\up8.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\up9.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\warning.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\sounds\wordcomplete.ogg
C:\Program Files\PopCap Games\Bookworm Deluxe\wordlist.txt
C:\Program Files\PopCap Games\moregames.ico
.
((((((((((((((((((((((((( Files Created from 2007-09-09 to 2007-10-09 )))))))))))))))))))))))))))))))
.
2007-10-08 23:04 51,200 --a------ C:\WINDOWS\NirCmd.exe
2007-10-05 17:58 <DIR> d-------- C:\Documents and Settings\Harry\Application Data\Sunbelt Software
2007-10-04 21:46 <DIR> d-------- C:\Program Files\iWin
2007-10-04 19:18 <DIR> d-------- C:\Program Files\RegSeeker
2007-10-04 07:53 <DIR> d-------- C:\Documents and Settings\MICHELLE\Application Data\Sunbelt Software
2007-10-03 23:25 0 --a------ C:\WINDOWS\system32\SBRC.dat
2007-10-03 23:25 0 --a------ C:\WINDOWS\system32\SBFC.dat
2007-10-03 23:10 <DIR> d-------- C:\Documents and Settings\DAVID\Application Data\Sunbelt Software
2007-10-03 23:10 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Sunbelt Software
2007-10-03 23:09 <DIR> d-------- C:\Program Files\Sunbelt Software
2007-10-03 22:41 664 --a------ C:\WINDOWS\system32\d3d9caps.dat
2007-10-03 22:36 552 --a------ C:\WINDOWS\system32\d3d8caps.dat
2007-10-03 20:31 <DIR> d-------- C:\WINDOWS\system32\ActiveScan
2007-10-03 14:44 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\SUPERAntiSpyware.com
2007-10-03 14:25 <DIR> d-------- C:\Program Files\SUPERAntiSpyware
2007-10-03 14:25 <DIR> d-------- C:\Documents and Settings\DAVID\Application Data\SUPERAntiSpyware.com
2007-10-03 14:25 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2007-09-30 15:58 737,280 --a------ C:\WINDOWS\iun6002.exe
2007-09-30 15:58 <DIR> d-------- C:\Program Files\WinPcap
2007-09-30 15:57 <DIR> d-------- C:\Program Files\Replay AV 8
2007-09-28 00:10 <DIR> d-------- C:\Program Files\CCleaner
2007-09-27 22:28 <DIR> d-------- C:\Program Files\QuickPar
2007-09-27 16:40 <DIR> d-------- C:\Program Files\Online TV Player 4
2007-09-27 16:40 <DIR> d-------- C:\Documents and Settings\DAVID\Application Data\OTVREG
2007-09-26 11:02 <DIR> d-------- C:\Program Files\iTunes
2007-09-22 15:07 <DIR> d-------- C:\Documents and Settings\Harry\Application Data\InstallShield
2007-09-20 19:16 <DIR> d-------- C:\Program Files\DivX
2007-09-12 16:34 40,960 --a------ C:\WINDOWS\system32\F5D9050.dll
2007-09-12 16:34 245,248 --a------ C:\WINDOWS\system32\drivers\rt73.sys
2007-09-12 16:34 20,747 --a------ C:\WINDOWS\system32\drivers\AegisP.sys
2007-09-12 16:34 196,608 --a------ C:\WINDOWS\system32\UpdateDriver.exe
2007-09-12 16:34 19,968 --a------ C:\WINDOWS\system32\drivers\ss.sys
2007-09-12 16:34 <DIR> d-------- C:\Program Files\Belkin
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-10-08 21:35 22328 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys
2007-10-08 16:19 --------- d-------- C:\Documents and Settings\Harry\Application Data\teamspeak2
2007-10-05 21:47 --------- d-------- C:\Program Files\WarRock
2007-10-05 18:01 --------- d---s---- C:\Program Files\Xfire
2007-10-05 10:41 --------- d-------- C:\Program Files\Picasa2
2007-10-04 07:55 --------- d-------- C:\Program Files\Common Files\Command Software
2007-10-03 22:42 --------- d-------- C:\Documents and Settings\Harry\Application Data\Xfire
2007-10-03 22:40 --------- d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-10-03 14:25 --------- d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-10-02 19:40 --------- d-------- C:\Program Files\Common Files\PestPatrol
2007-09-30 23:34 --------- d-------- C:\Program Files\Microsoft ActiveSync
2007-09-30 16:05 --------- d-------- C:\Program Files\iPod
2007-09-27 23:09 --------- d-------- C:\Documents and Settings\DAVID\Application Data\GrabIt
2007-09-26 10:57 --------- d-------- C:\Program Files\Apple Software Update
2007-09-20 11:17 --------- d-------- C:\Documents and Settings\MICHELLE\Application Data\Sonic
2007-09-19 19:35 --------- d-------- C:\Documents and Settings\DAVID\Application Data\teamspeak2
2007-09-19 19:26 --------- d-------- C:\Documents and Settings\DAVID\Application Data\Xfire
2007-09-09 13:37 --------- d-------- C:\Program Files\MSN Messenger
2007-09-06 01:08 --------- d-------- C:\Documents and Settings\All Users\Application Data\1Click DVD Copy
2007-09-04 22:12 --------- d-------- C:\Program Files\GrabIt
2007-08-27 21:24 --------- d-------- C:\Program Files\BookWorm Deluxe
2007-08-15 17:05 --------- d-------- C:\Program Files\MSXML 6.0
2007-08-14 11:56 --------- d-------- C:\Documents and Settings\NetworkService\Application Data\Xfire
2007-08-14 11:56 --------- d-------- C:\Documents and Settings\NetworkService\Application Data\Xfire
2007-08-14 11:56 --------- d-------- C:\Documents and Settings\NetworkService\Application Data\Xfire
2007-05-22 15:39 87608 --a------ C:\Documents and Settings\DAVID\Application Data\ezpinst.exe
2007-05-22 15:39 47360 --a------ C:\Documents and Settings\DAVID\Application Data\pcouffin.sys
2001-03-16 13:24 936 --a------ C:\Documents and Settings\DAVID\Cute.bin
1998-07-07 12:41 136704 --a------ C:\Documents and Settings\DAVID\Shutdown (setup).exe
1998-07-07 12:41 136704 --a------ C:\Documents and Settings\DAVID\setup.exe
2005-07-14 18:31:20 27,648 --sha-w C:\WINDOWS\system32\AVSredirect.dll
.
((((((((((((((((((((((((((((( snapshot@2007-10-08_23.13.10.25 )))))))))))))))))))))))))))))))))))))))))
.
----atw 16,384 2007-10-09 08:26:52 C:\WINDOWS\Temp\Perflib_Perfdata_79c.dat
----atw 16,384 2007-10-09 08:26:52 C:\WINDOWS\Temp\Perflib_Perfdata_7f4.dat
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ALi5289"="C:\Program Files\ULI5289\ALi5289.exe" [2004-09-16 10:49]
"SoundMan"="SOUNDMAN.EXE" [2004-12-22 10:09 C:\WINDOWS\SOUNDMAN.EXE]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-08-11 22:43]
"PCguardadvisor.exe"="C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe" [2006-04-28 15:27]
"PCguard"="C:\Program Files\blueyonder\PCguard\Rps.exe" [2006-05-01 13:43]
"nwiz"="nwiz.exe" [2006-08-11 22:43 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="NvMCTray.dll" [2006-08-11 21:43 C:\WINDOWS\system32\nvmctray.dll]
"NVIDIA nTune"="C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" [2007-01-22 18:22]
"WireLessKeyboard"="C:\Program Files\DS-3200 Wireless Optical Slimline Deskset\PS2USBKbdDrv.exe" [2005-08-30 10:51]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2007-06-29 06:24]
"F5D9050"="C:\Program Files\Belkin\F5D9050\Belkinwcui.exe" [2006-07-20 06:55]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-09-26 14:42]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11]
"SBCSTray"="C:\Program Files\Sunbelt Software\CounterSpy\SBCSTray.exe" [2007-08-27 12:09]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:56]
"Sonic RecordNow! Deluxe"="" []
"H/PC Connection Agent"="C:\Program Files\Microsoft ActiveSync\Wcescomm.exe" [2006-11-13 13:39]
"SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2007-06-21 14:06]
[HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce]
"RunNarrator"=Narrator.exe
[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"MySpaceIM"=C:\Program Files\MySpace\IM\MySpaceIM.exe
"Picasa Media Detector"=C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Documents and Settings\Harry\Start Menu\Programs\Startup\
Xfire.lnk - C:\Program Files\Xfire\xfire.exe [2007-09-12 23:25:18]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 13:55 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=WIKI.DLL
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]
backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Works Calendar Reminders.lnk]
backup=C:\WINDOWS\pss\Microsoft Works Calendar Reminders.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^MyWebSearch Email Plugin.lnk]
backup=C:\WINDOWS\pss\MyWebSearch Email Plugin.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^WinZip Quick Pick.lnk]
backup=C:\WINDOWS\pss\WinZip Quick Pick.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AnyDVD]
C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eBayToolbar]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Eraser]
C:\Program Files\Eraser\eraser.exe -hide
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\googletalk]
C:\Program Files\Google\Google Talk\googletalk.exe /autostart
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IncrediMail]
C:\Program Files\IncrediMail\bin\IncMail.exe /c
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
"C:\Program Files\iTunes\iTunesHelper.exe"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MCAgentExe]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MCUpdateExe]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Works Portfolio]
C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Works Update Detection]
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSKAGENTEXE]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSKDetectorExe]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
"C:\Program Files\Messenger\msmsgs.exe" /background
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
"C:\Program Files\MSN Messenger\msnmsgr.exe" /background
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MySpaceIM]
C:\Program Files\MySpace\IM\MySpaceIM.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBJ]
"C:\PROGRA~1\Ahead\NEROBA~1\NBJ.exe"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\WINDOWS\system32\NeroCheck.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
nwiz.exe /install
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Picasa Media Detector]
C:\Program Files\Picasa2\PicasaMediaDetector.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
"C:\Program Files\QuickTime\qttask.exe" -atboottime
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
"C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoboForm]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sonic RecordNow! Deluxe]
"C:\PROGRA~1\Ahead\NEROBA~1\NBJ.exe"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\tcactive]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\tcmonitor]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WireLessMouse]
C:\Program Files\DS-3200 Wireless Optical Slimline Deskset\MouseDrv.exe
R0 m5289;m5289;C:\WINDOWS\system32\drivers\m5289.sys
R0 uliagpkx;ULi AGP Bus Filter Driver;C:\WINDOWS\system32\DRIVERS\agpkx.sys
R3 StreamSurge;StreamSurge Driver (miniport);C:\WINDOWS\system32\DRIVERS\ss.sys
S0 NVStrap;NVStrap;C:\WINDOWS\system32\drivers\NVStrap.sys
S3 APLMp50;APLMp50 NDIS Protocol Driver;C:\WINDOWS\system32\Drivers\APLMp50.sys
S3 cdiskdun;cdiskdun;\??\C:\DOCUME~1\DAVID\LOCALS~1\Temp\cdiskdun.sys
S3 CrystalCpuInfo;CrystalCpuInfo;\??\C:\DOCUME~1\DAVID\LOCALS~1\Temp\CpuInfo.sys
S3 DKbFltr;Dritek HotKey Keyboard Filter Driver;C:\WINDOWS\system32\Drivers\DKbFltr.sys
S3 moufiltr;Chic Tech Mouse Filter Driver;C:\WINDOWS\system32\DRIVERS\moufiltr.sys
S3 NPF;NetGroup Packet Filter Driver;C:\WINDOWS\system32\drivers\npf.sys
S3 RivaTuner32;RivaTuner32;\??\C:\Program Files\RivaTuner v2.0 RC 15.8\RivaTuner32.sys
S3 ULI5261;ULi Based Ethernet NT Driver;C:\WINDOWS\system32\DRIVERS\ULILAN.SYS
.
Contents of the 'Scheduled Tasks' folder
"2007-10-05 21:52:03 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
"2007-10-09 07:54:00 C:\WINDOWS\Tasks\Check Updates for Windows Live Toolbar.job"
.
**************************************************************************
catchme 0.3.1169 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2007-10-09 09:27:11
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2007-10-09 9:29:10 - machine was rebooted
C:\ComboFix-quarantined-files.txt ... 2007-10-09 09:28
C:\ComboFix2.txt ... 2007-10-08 23:14
.
--- E O F ---