Since the log was too large for me to post into the message, I removed the middle, which I was pretty sure didn't make a real impact on the log. In the end, it was 572312 characters long! It took me 2 hours to complete the whole scan... Any way, I removed the middle part of the deletions in folder <C:\Users\Calvin\!\>, because it had over 2000 entries. The section I removed is indicated by a '...' sign. Hopefully, it didn't make a difference on how the log can be read!
ComboFix 08-05-29.1 - Calvin 2008-05-30 6:41:10.9 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.1944 [GMT -7:00]
Running from: C:\Users\Calvin\Desktop\ComboFix.exe
Command switches used :: C:\Users\Calvin\Desktop\CFScript.txt
* Created a new restore point
* Resident AV is active
FILE ::
C:\Users\Calvin\995.bat
C:\Windows\System32\{23dd81ce-e488-eec4-be5c-ebcffe0a6446}.dll
C:\yo.lnk
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Users\Calvin\!
C:\Users\Calvin\!\'stay out all night'.wma
C:\Users\Calvin\!\-cherish_ft._yung_joc-killa.wma
C:\Users\Calvin\!\-Sunshine.wma
C:\Users\Calvin\!\(Seasons Riddim) Sean Paul- Memories.wma
C:\Users\Calvin\!\(yamad boy) 10Yo Undress His Friend 13Yo Suck And.wma
C:\Users\Calvin\!\@amivest.com.wma
C:\Users\Calvin\!\@cigna.com.wma
C:\Users\Calvin\!\@firstnewengland.com.wma
C:\Users\Calvin\!\@fnegroup.com.wma
C:\Users\Calvin\!\[anabolic]the gang bang girl #22[full].wma
C:\Users\Calvin\!\[DivX-ITA] Il Divo.wma
C:\Users\Calvin\!\[DivX-ITA] The Snatch.wma
C:\Users\Calvin\!\[Divx - ITA - DVDRip] moulin rouge.wma
C:\Users\Calvin\!\[Divx - ITA ] Moulin Rouge.wma
C:\Users\Calvin\!\[sharethefiles.com].wma
C:\Users\Calvin\!\œmieszne.wma
C:\Users\Calvin\!\
000 b c.wma
C:\Users\Calvin\!\
000 B.C..wma
C:\Users\Calvin\!\
000 Plays And Views 4..wma
C:\Users\Calvin\!\
000.wma
C:\Users\Calvin\!\
00002qxkxcr jpg.wma
C:\Users\Calvin\!\
0004728 jpg.wma
C:\Users\Calvin\!\
001 aaron carter.wma
C:\Users\Calvin\!\
01 duffy mercy new mp 3.wma
C:\Users\Calvin\!\
01 michael buble thats how it.wma
C:\Users\Calvin\!\
01 thomas godoj love is you mp 3.wma
C:\Users\Calvin\!\
01 Track 1.wma
C:\Users\Calvin\!\
014a lsfan.wma
C:\Users\Calvin\!\
02 Equinox of the Gods.wma
C:\Users\Calvin\!\
02 Restless and Wild.wma
C:\Users\Calvin\!\
02 Strani Amori.m4a.wma
C:\Users\Calvin\!\
02 Track 2.wma
C:\Users\Calvin\!\
02 va mellomania.wma
C:\Users\Calvin\!\
0211-0110-8.wma
C:\Users\Calvin\!\
03 t i superstar.wma
C:\Users\Calvin\!\
03 Track 3.wma
C:\Users\Calvin\!\
03 Until The Hellhounds Sleep Again.wma
C:\Users\Calvin\!\
0311-0086-9.wma
C:\Users\Calvin\!\
04 - All Of A Sudden.wma
C:\Users\Calvin\!\
04 Communication Breakdown.wma
C:\Users\Calvin\!\
04 fur dich.wma
C:\Users\Calvin\!\
04 James Bond 007.wma
C:\Users\Calvin\!\
04 till it happens to you.wma
C:\Users\Calvin\!\
04 Will They Come.wma
C:\Users\Calvin\!\
05 - It's A New Day.wma
C:\Users\Calvin\!\
05 Elvis Presley - In Concert 1977.wma
C:\Users\Calvin\!\
05 jay sean maybe.wma
C:\Users\Calvin\!\
05 Track 5.wma
C:\Users\Calvin\!\
05. Snow Patrol - Dazoo At Night Remix 2008.wma
C:\Users\Calvin\!\
0540-0122-0.wma
C:\Users\Calvin\!\
06 neil diamond forgotten.wma
C:\Users\Calvin\!\
06 Summertime is Gone.wma
C:\Users\Calvin\!\
06 Track 6.wma
C:\Users\Calvin\!\
0620-0008-0.wma
C:\Users\Calvin\!\
0630-0002-1.wma
C:\Users\Calvin\!\
0631-0751-3.wma
C:\Users\Calvin\!\
06until when.wma
C:\Users\Calvin\!\
07 - Get It Together.wma
C:\Users\Calvin\!\
07 dime lo.wma
C:\Users\Calvin\!\
07 Katarraktis Apo Aima.wma
C:\Users\Calvin\!\
07 The Concert.wma
C:\Users\Calvin\!\
07 Track 7.wma
C:\Users\Calvin\!\
09 4 the 1.wma
C:\Users\Calvin\!\
09 Misantropolis.wma
C:\Users\Calvin\!\
09 neil diamond no.wma
C:\Users\Calvin\!\
0908 avi mst3k of satan the touch.wma
C:\Users\Calvin\!\1-800-554-8969.wma
C:\Users\Calvin\!\1 39454 514087.wma
C:\Users\Calvin\!\1 against 5 hmm.wma
C:\Users\Calvin\!\1 churchill place.wma
C:\Users\Calvin\!\1 gen little boy 10 yo mpg.wma
C:\Users\Calvin\!\1 Master cedar.wma
C:\Users\Calvin\!\1 stop the travel network.wma
C:\Users\Calvin\!\1.fc köln.wma
C:\Users\Calvin\!\1.wma
C:\Users\Calvin\!\10 - Gimme Shelter.wma
C:\Users\Calvin\!\10 12 69.wma
C:\Users\Calvin\!\10 Rihanna Good Girl.wma
C:\Users\Calvin\!\10 UNCOMMON VALUES.wma
C:\Users\Calvin\!\10 years.wma
C:\Users\Calvin\!\10.wma
C:\Users\Calvin\!\10000 A.C (ita).wma
C:\Users\Calvin\!\10000 BC.wma
C:\Users\Calvin\!\10000.BC.2008.MD.DVDSCR.XviD-DeLuXe.wma
C:\Users\Calvin\!\1021-8928-5.wma
C:\Users\Calvin\!\11-29-06.pdf 10 Canada.wma
C:\Users\Calvin\!\11 12 13.wma
C:\Users\Calvin\!\11 14 lektor.wma
C:\Users\Calvin\!\11 Meliae.wma
C:\Users\Calvin\!\12 - i'm in love again.wma
C:\Users\Calvin\!\12 ³ez wiœniewska.wma
C:\Users\Calvin\!\12 Stones Lie To Me.wma
C:\Users\Calvin\!\12 Via Dolorosa.wma
C:\Users\Calvin\!\1221-8707-6.wma
C:\Users\Calvin\!\1222- 8717-0.wma
C:\Users\Calvin\!\13-chuck_brown.wma
C:\Users\Calvin\!\13 - summer side of life.wma
C:\Users\Calvin\!\13 Circles.wma
C:\Users\Calvin\!\13 jahre.wma
C:\Users\Calvin\!\13 yung la stupid.wma
C:\Users\Calvin\!\13. BITWA.wma
C:\Users\Calvin\!\13yo avi christina teen webcam.wma
C:\Users\Calvin\!\13yo boy girl fuck.wma
C:\Users\Calvin\!\14 djtinmanhhh babyboi come.wma
C:\Users\Calvin\!\14cunt.jpg.wma
C:\Users\Calvin\!\15 gucci mane feat.wma
C:\Users\Calvin\!\15 Minutes.wma
C:\Users\Calvin\!\15 Thirst Snake.wma
C:\Users\Calvin\!\15 years.wma
C:\Users\Calvin\!\16 AT WAR.wma
C:\Users\Calvin\!\16 drop (low.wma
C:\Users\Calvin\!\16 going on 17.wma
C:\Users\Calvin\!\16 love in this club usher.wma
C:\Users\Calvin\!\16yo samantha stripping down.wma
C:\Users\Calvin\!\17-04-07.wma
C:\Users\Calvin\!\17à 21 avi cd5 fois il la une vie était.wma
C:\Users\Calvin\!\18 ç¦ ã‚²ãƒ¼ãƒ .wma
C:\Users\Calvin\!\18 ç¦ ã‚¢ãƒ‹ãƒ¡.wma
C:\Users\Calvin\!\18 year old xxx.wma
C:\Users\Calvin\!\18 young deep throat.wma
C:\Users\Calvin\!\18005548969.wma
C:\Users\Calvin\!\18yearsold.com.wma
C:\Users\Calvin\!\19 city of swang.wma
C:\Users\Calvin\!\1953 amours avi delices et fr golf jerry lewis.wma
C:\Users\Calvin\!\1979 rob thomas.wma
C:\Users\Calvin\!\1981 avi beineix cd2 diva divx jacques jean.wma
C:\Users\Calvin\!\1996 avi monday nitro wcw.wma
C:\Users\Calvin\!\1a and hanna jackie wmv.wma
C:\Users\Calvin\!\1albert hammond down by river.wma
C:\Users\Calvin\!\2 days in paris.wma
C:\Users\Calvin\!\2 Pistols ft T Pain.wma
C:\Users\Calvin\!\2 Pistols ft. T-Pain - She Got It.wma
C:\Users\Calvin\!\2 PistolsShe Got It.wma
C:\Users\Calvin\!\2 too many boys.wma
C:\Users\Calvin\!\2 Young Boys Gay.wma
C:\Users\Calvin\!\20 all time greatest hits.wma
C:\Users\Calvin\!\2003 avi dvd film fr horreur nouveaute soulkeeper.wma
C:\Users\Calvin\!\2003 best.wma
C:\Users\Calvin\!\2003 greatest hits lonestar rar us.wma
C:\Users\Calvin\!\2004 auto jpg paris salon.wma
C:\Users\Calvin\!\2004 deluxe iso money ms.wma
C:\Users\Calvin\!\2004 fleret pumkanonem.wma
C:\Users\Calvin\!\2005 2cd 613u euro express rar sc va.wma
C:\Users\Calvin\!\2006 cd delain lucidity.wma
C:\Users\Calvin\!\2006 karneval megamix studio.wma
C:\Users\Calvin\!\2006 woman.wma
C:\Users\Calvin\!\2006 xxx.wma
C:\Users\Calvin\!\2007 -ita.wma
C:\Users\Calvin\!\2007 æ˜ ç”».wma
C:\Users\Calvin\!\2007 2cd 728u euro express rar sc va.wma
C:\Users\Calvin\!\2007 avi dvdrip em org peerweb shoot up wide xvid.wma
C:\Users\Calvin\!\2007 avi dvdrip m14ch0 they wait xvid.wma
C:\Users\Calvin\!\2007 avi dvdrip rec xvid.wma
C:\Users\Calvin\!\2007 bartz days live richard sputnik turntable.wma
C:\Users\Calvin\!\2008 æ˜ ç”».wma
C:\Users\Calvin\!\2008 advisors choicepoint.wma
C:\Users\Calvin\!\2008 avi cleaner dvdrip.wma
C:\Users\Calvin\!\2008 avi dance sexy.wma
C:\Users\Calvin\!\2008 avi dvdrip eng hill hq mvs one s05e13 tree.wma
C:\Users\Calvin\!\2008 avi dvdrip mad money rus.wma
C:\Users\Calvin\!\2008 commercial.wma
C:\Users\Calvin\!\2008 crack football manager pc.wma
C:\Users\Calvin\!\2008 dvd eng.wma
C:\Users\Calvin\!\2008 eurovision russia.wma
C:\Users\Calvin\!\2008 iso routenplaner.wma
C:\Users\Calvin\!\2008 new movies.wma
C:\Users\Calvin\!\2008 Slow Songs.wma
C:\Users\Calvin\!\2008 sub nl.wma
C:\Users\Calvin\!\2008 tmd.wma
C:\Users\Calvin\!\2008 yeni.wma
C:\Users\Calvin\!\21 deutsch.wma
C:\Users\Calvin\!\21 questions.wma
C:\Users\Calvin\!\21 sextury.wma
C:\Users\Calvin\!\21 soundtrack.wma
C:\Users\Calvin\!\213 snoop.wma
C:\Users\Calvin\!\213 the hard way instrumental.wma
C:\Users\Calvin\!\21529ae2 kat tun èµ¤è¥¿ä» care.wma
C:\Users\Calvin\!\21st a dj god is pink.wma
C:\Users\Calvin\!\230507 ana bangbus bing carmella victoria wmv.wma
C:\Users\Calvin\!\24 uur verliefd.wma
C:\Users\Calvin\!\27 Dresses.wma
C:\Users\Calvin\!\27 sukien.wma
C:\Users\Calvin\!\27th ave.wma
C:\Users\Calvin\!\28 days later.wma
C:\Users\Calvin\!\2nd ccnp certification cisco cit exam guide press.wma
C:\Users\Calvin\!\2pac biggy smalls running.wma
C:\Users\Calvin\!\2pac this life i lead.wma
C:\Users\Calvin\!\2pac to live die in la.wma
C:\Users\Calvin\!\2raumwohnung.wma
C:\Users\Calvin\!\2x11 all family in man mpg street the.wma
C:\Users\Calvin\!\2x11 avi bones l épouvantail.wma
C:\Users\Calvin\!\3 月 9 日.wma
C:\Users\Calvin\!\3 days grace.wma
C:\Users\Calvin\!\3 deep mixtape.wma
C:\Users\Calvin\!\3 DOORS DOWN Kryptonite.wma
C:\Users\Calvin\!\3 Lil' Wayne - Lolipop Dirty.wma
C:\Users\Calvin\!\3 miracle.wma
C:\Users\Calvin\!\3 Ninjas.wma
C:\Users\Calvin\!\3.Men.and.a.Baby.1987.PL.wma
C:\Users\Calvin\!\30 mars attack.wma
C:\Users\Calvin\!\30 rock season 2.wma
C:\Users\Calvin\!\30 second to mars.wma
C:\Users\Calvin\!\30 Something.wma
C:\Users\Calvin\!\300 soundtrack.wma
C:\Users\Calvin\!\300 spartan.wma
C:\Users\Calvin\!\31 records.wma
C:\Users\Calvin\!\311 You Wouldn't Believe.wma
C:\Users\Calvin\!\355 COHF Skating.wma
C:\Users\Calvin\!\39 i pol.wma
C:\Users\Calvin\!\39454 GT448.wma
C:\Users\Calvin\!\39636 Gary.wma
C:\Users\Calvin\!\übers meer.wma
C:\Users\Calvin\!\3gp converter.wma
C:\Users\Calvin\!\3gp francesca mms spompina video.wma
C:\Users\Calvin\!\3gp fuck mms sex.wma
C:\Users\Calvin\!\3lw feelin you.wma
C:\Users\Calvin\!\3x17 avi das family guy schwalbennest.wma
C:\Users\Calvin\!\4 letter word.wma
C:\Users\Calvin\!\4 minutes madonna.wma
C:\Users\Calvin\!\4 minutes to live.wma
C:\Users\Calvin\!\4 minutes.wma
C:\Users\Calvin\!\4 Rise of the Silver Surfer.wma
C:\Users\Calvin\!\4 strings take me away mix.wma
C:\Users\Calvin\!\40 greatest metal.wma
C:\Users\Calvin\!\4yo girl.wma
C:\Users\Calvin\!\5 in morning pretty ricky.wma
C:\Users\Calvin\!\50 cent- if i cant do it.wma
C:\Users\Calvin\!\50 Cent Amusement Park.wma
C:\Users\Calvin\!\50 cent.wma
C:\Users\Calvin\!\5000 Ones.wma
C:\Users\Calvin\!\50s rock n roll.wma
C:\Users\Calvin\!\54 lombard street.wma
C:\Users\Calvin\!\5x05 avi deed good no reba.wma
C:\Users\Calvin\!\6 cold day in sun.wma
C:\Users\Calvin\!\6151 chevy chase.wma
C:\Users\Calvin\!\666-bomba.wma
C:\Users\Calvin\!\6Cyclemind.wma
C:\Users\Calvin\!\6x02 avi combat du gilmore girls le masque.wma
C:\Users\Calvin\!\7 things i hate about you.wma
C:\Users\Calvin\!\7 year bitch.wma
C:\Users\Calvin\!\702 where girls my at.wma
C:\Users\Calvin\!\70s 80s slow jams earth wind.wma
C:\Users\Calvin\!\70s diana ross im comin out.wma
C:\Users\Calvin\!\70s disco.wma
C:\Users\Calvin\!\70s porn.wma
C:\Users\Calvin\!\75 BRAZIL STREET.wma
C:\Users\Calvin\!\7501 wisconsin.wma
C:\Users\Calvin\!\7926 jones branch.wma
C:\Users\Calvin\!\7yo avi black dreams g girl hard little pthc.wma
C:\Users\Calvin\!\8 second ride.wma
C:\Users\Calvin\!\800-987-bank rape.wma
C:\Users\Calvin\!\800-987-bank.wma
C:\Users\Calvin\!\80s country kenny rogers.wma
C:\Users\Calvin\!\80s it must have been love top.wma
C:\Users\Calvin\!\84753lady full hi.wma
C:\Users\Calvin\!\928-783-8881.wma
C:\Users\Calvin\!\98 cherish you do i.wma
C:\Users\Calvin\!\98 hardest thing the.wma
C:\Users\Calvin\!\A-lusion – Just Ask.wma
C:\Users\Calvin\!\A-Town Legend-pastor troy.wma
C:\Users\Calvin\!\A adiafa cooperativa da mula.wma
C:\Users\Calvin\!\A amarcout avi bussola by dourada legptbr.wma
C:\Users\Calvin\!\A avi b desire named trans.wma
C:\Users\Calvin\!\A avi dvdrip eng light shine.wma
C:\Users\Calvin\!\A avi dvdrip light shine.wma
C:\Users\Calvin\!\A cause des garcon yelle.wma
C:\Users\Calvin\!\A chance to love.wma
C:\Users\Calvin\!\A cinderella story soundtrack.wma
C:\Users\Calvin\!\A day in paradise.wma
C:\Users\Calvin\!\A dream is a wish your heart makes.wma
C:\Users\Calvin\!\A Good Year - cd1.wma
C:\Users\Calvin\!\A KTO TU JEST SZCZÊŒLIWY NA TEJ UKRAINIE.wma
C:\Users\Calvin\!\A la concierge services.wma
C:\Users\Calvin\!\A Limitid Time.wma
C:\Users\Calvin\!\A mainframe.wma
C:\Users\Calvin\!\A millie.wma
C:\Users\Calvin\!\A state of trance 3.wma
C:\Users\Calvin\!\A teraz ³apy w góre.wma
C:\Users\Calvin\!\A thin line between lovehate.wma
C:\Users\Calvin\!\A Tribe Called Quest.wma
C:\Users\Calvin\!\A. Paul Math.wma
C:\Users\Calvin\!\A. Paul Offline.wma
C:\Users\Calvin\!\A. Paul Underlying.wma
C:\Users\Calvin\!\A. systems Resource.wma
C:\Users\Calvin\!\A1-vorwerk.wma
C:\Users\Calvin\!\A108109xy9 devil.wma
C:\Users\Calvin\!\A108109xy9.wma
C:\Users\Calvin\!\Aab sang.wma
C:\Users\Calvin\!\Aab slagsang.wma
C:\Users\Calvin\!\AAIssues.wma
C:\Users\Calvin\!\Aaron A. Walton.wma
C:\Users\Calvin\!\Aaron beautiful scar.wma
C:\Users\Calvin\!\Aaron carter nude.wma
C:\Users\Calvin\!\Aaron neville in your eyes.wma
C:\Users\Calvin\!\Aaron tippin honky tonk.wma
C:\Users\Calvin\!\ABBAThe Day Before You Came.wma
C:\Users\Calvin\!\Abbey brooks.wma
C:\Users\Calvin\!\Abc consultants.wma
C:\Users\Calvin\!\Abc family.wma
C:\Users\Calvin\!\Abi consulting.wma
C:\Users\Calvin\!\Able Woolwich.wma
C:\Users\Calvin\!\Abn amro.wma
C:\Users\Calvin\!\About girl nirvana mtv in new.wma
C:\Users\Calvin\!\About me sweet.wma
C:\Users\Calvin\!\Abs invest.wma
C:\Users\Calvin\!\Ac black dc back in.wma
C:\Users\Calvin\!\Ac milan.wma
C:\Users\Calvin\!\Aca lukas 2008.wma
C:\Users\Calvin\!\Academy at canyon creek.wma
C:\Users\Calvin\!\Acall of cthulhu blood vol.wma
C:\Users\Calvin\!\Accelerate.wma
C:\Users\Calvin\!\Accenture.wma
C:\Users\Calvin\!\Accepted.wma
C:\Users\Calvin\!\Access fifty checking.wma
C:\Users\Calvin\!\Accident report services.wma
C:\Users\Calvin\!\Accidental heroes forgotten worlds.wma
C:\Users\Calvin\!\Accommodo.wma
C:\Users\Calvin\!\Accounting.wma
C:\Users\Calvin\!\Accubasis.wma
C:\Users\Calvin\!\Accucast.wma
C:\Users\Calvin\!\Acdc - workit.wma
C:\Users\Calvin\!\ACDC Hells Bells.wma
C:\Users\Calvin\!\ACDC Highway To Hell.wma
C:\Users\Calvin\!\ACDC You Shook Me All Night Long.wma
C:\Users\Calvin\!\ACE CANON.wma
C:\Users\Calvin\!\Ace hood lollipop remix.wma
C:\Users\Calvin\!\Ace of base.wma
C:\Users\Calvin\!\Ace offe base - cruel summer.wma
C:\Users\Calvin\!\Acetone peroxide.wma
C:\Users\Calvin\!\Acf consultants.wma
C:\Users\Calvin\!\Acid black cherry.wma
C:\Users\Calvin\!\Acid Loops Pro Samples.wma
C:\Users\Calvin\!\Aco pejovic.wma
C:\Users\Calvin\!\Acronis image iso true.wma
C:\Users\Calvin\!\Act a fool remix.wma
C:\Users\Calvin\!\Actis technologies.wma
C:\Users\Calvin\!\Activeemployeelist02.wma
C:\Users\Calvin\!\ActiveHealth Management.wma
C:\Users\Calvin\!\ActivWithout You.wma
C:\Users\Calvin\!\Ada gostkowska.wma
C:\Users\Calvin\!\Adam fr sandler.wma
C:\Users\Calvin\!\Adamo dolce paola.wma
C:\Users\Calvin\!\Adams family instrumental.wma
C:\Users\Calvin\!\Adan cuen.wma
C:\Users\Calvin\!\Adarsh-rent-a-car.wma
C:\Users\Calvin\!\Add a genuine licence.wma
C:\Users\Calvin\!\Addicted - stevie.wma
C:\Users\Calvin\!\Addicted.wma
C:\Users\Calvin\!\Addictive so confused.wma
C:\Users\Calvin\!\Addison rose.wma
C:\Users\Calvin\!\Adecco peopleone.wma
C:\Users\Calvin\!\Adelante.wma
C:\Users\Calvin\!\Adele Stephens xxx18.wma
C:\Users\Calvin\!\Ademco from ssn.wma
C:\Users\Calvin\!\Aderenti.wma
C:\Users\Calvin\!\Adiafa as da do meninas ribeira sado.wma
C:\Users\Calvin\!\Adiemus - Adiemus.wma
C:\Users\Calvin\!\Adimpleo.wma
C:\Users\Calvin\!\„DJ.wma
C:\Users\Calvin\!\Adkins matchett.wma
C:\Users\Calvin\!\Administaff.wma
C:\Users\Calvin\!\Admiratio.wma
C:\Users\Calvin\!\Adnan senses unuturum diye.wma
C:\Users\Calvin\!\Adrenaline.wma
C:\Users\Calvin\!\Adrenalynn.wma
C:\Users\Calvin\!\Adrian minune.wma
C:\Users\Calvin\!\Adrian Norwegisch.wma
C:\Users\Calvin\!\Adriano Filippucci Monophonic.wma
C:\Users\Calvin\!\Adrienne - the calling.wma
C:\Users\Calvin\!\Adsuesco.wma
C:\Users\Calvin\!\Adulescentia.wma
C:\Users\Calvin\!\Adult animal.wma
C:\Users\Calvin\!\Adult comics taxi girls rar.wma
C:\Users\Calvin\!\Adult Movies Brianna.wma
C:\Users\Calvin\!\ADULT MOVIES Jill.wma
C:\Users\Calvin\!\Adult movies mini horse fucks.wma
C:\Users\Calvin\!\Adult movies young french girl.wma
C:\Users\Calvin\!\Adult VERY tasty.wma
C:\Users\Calvin\!\Adventures doctor jay mpg sara.wma
C:\Users\Calvin\!\Aea account.wma
C:\Users\Calvin\!\Aea carrers.wma
C:\Users\Calvin\!\Aea confidential.wma
C:\Users\Calvin\!\Aea credit union.wma
C:\Users\Calvin\!\Aea employee.wma
C:\Users\Calvin\!\Aea equity.wma
...
C:\Users\Calvin\!\Z niemen.wma
C:\Users\Calvin\!\Z ・ 刻 ã‚’ 越 ãˆã¦.wma
C:\Users\Calvin\!\Z tob¹ by³bym wiêcej wart.wma
C:\Users\Calvin\!\Z ust do ust.wma
C:\Users\Calvin\!\Za kilka lez.wma
C:\Users\Calvin\!\Za tebe biah.wma
C:\Users\Calvin\!\Zabierzmnie do gwiazd.wma
C:\Users\Calvin\!\Zabiore cie wlasnie tam.wma
C:\Users\Calvin\!\Zabiore cie.wma
C:\Users\Calvin\!\Zabra³eœ serce moje.wma
C:\Users\Calvin\!\Zack e cody.wma
C:\Users\Calvin\!\Zaczarowana.wma
C:\Users\Calvin\!\Zagmatfany.wma
C:\Users\Calvin\!\Zascha angel moktan must have.wma
C:\Users\Calvin\!\Zascha danny moktan don cry t.wma
C:\Users\Calvin\!\Zascha know moktan i.wma
C:\Users\Calvin\!\Zascha like moktan you do.wma
C:\Users\Calvin\!\Zascha need moktan man i a.wma
C:\Users\Calvin\!\Zascha sing moktan song me a.wma
C:\Users\Calvin\!\Zat deluna.wma
C:\Users\Calvin\!\Zazdrosna.wma
C:\Users\Calvin\!\Zbrodnia ferpekcyjna.wma
C:\Users\Calvin\!\Zbrodnia i kara.wma
C:\Users\Calvin\!\Ze geraldo meiga senhorita.wma
C:\Users\Calvin\!\Zebrahead.wma
C:\Users\Calvin\!\Zecchino doro batti cinque.wma
C:\Users\Calvin\!\Zeitgeist.wma
C:\Users\Calvin\!\Zenith management.wma
C:\Users\Calvin\!\Zero assoluto.wma
C:\Users\Calvin\!\Zifiri ruzgar.wma
C:\Users\Calvin\!\Zigeunerjungen.wma
C:\Users\Calvin\!\Zimpala doo you bop.wma
C:\Users\Calvin\!\Zimpala new home.wma
C:\Users\Calvin\!\Zinar sozdar.wma
C:\Users\Calvin\!\Znów mi siê œnisz.wma
C:\Users\Calvin\!\Zoey zane.wma
C:\Users\Calvin\!\Zombie-loan.wma
C:\Users\Calvin\!\Zombie hell house.wma
C:\Users\Calvin\!\Zombie kroovy rob never gonna.wma
C:\Users\Calvin\!\Zombie nation.wma
C:\Users\Calvin\!\Zombie Strippers.wma
C:\Users\Calvin\!\Zombie thunder white kiss.wma
C:\Users\Calvin\!\Zoofills.wma
C:\Users\Calvin\!\Zooskool anal horse girl cums.wma
C:\Users\Calvin\!\Zooskool animal sex dog woman.wma
C:\Users\Calvin\!\Zooskool animal sex.wma
C:\Users\Calvin\!\Zooskool.wma
C:\Users\Calvin\!\Zouk machine.wma
C:\Users\Calvin\!\Zouk princesse lover tu es mon.wma
C:\Users\Calvin\!\Zucchero.wma
C:\Users\Calvin\!\Zulfu livaneli.wma
C:\Users\Calvin\!\ZYP-CODES.wma
C:\Users\Calvin\995.bat
C:\Windows\System32\{23dd81ce-e488-eec4-be5c-ebcffe0a6446}.dll
C:\Windows\System32\CBE
C:\Windows\System32\CBE\frcom37.exe
C:\Windows\System32\cTM
C:\Windows\System32\nZ
C:\Windows\System32\vntiho05
C:\yo.lnk
.
((((((((((((((((((((((((( Files Created from 2008-04-28 to 2008-05-30 )))))))))))))))))))))))))))))))
.
2008-05-29 23:33 . 2008-05-29 23:33 <DIR> d-------- C:\bintheredunthat
2008-05-29 23:29 . 2008-05-29 23:30 <DIR> d-------- C:\BFU
2008-05-28 22:12 . 2008-05-28 22:12 517,120 --a------ C:\Users\Calvin\winlogon.exe
2008-05-28 22:12 . 2008-05-28 22:12 70,656 --a------ C:\Users\Calvin\msconfig.exe
2008-05-28 22:12 . 2008-05-28 22:12 63,909 --a------ C:\Windows\System32\{23dd81ce-e488-eec4-be5c-ebcffe0a6446}.dll-uninst.exe
2008-05-27 16:41 . 2008-03-07 19:08 4,240,384 --a------ C:\Windows\System32\GameUXLegacyGDFs.dll
2008-05-27 16:41 . 2008-03-07 21:21 1,695,744 --a------ C:\Windows\System32\gameux.dll
2008-05-24 15:57 . 2008-05-25 07:44 <DIR> d-------- C:\Program Files\EA GAMES
2008-05-24 15:57 . 2004-08-18 02:17 442,368 -ra------ C:\Windows\System32\vp6vfw.dll
2008-05-24 15:49 . 2008-05-24 15:49 <DIR> d-------- C:\Program Files\DAEMON Tools Lite
2008-05-24 10:38 . 2008-05-24 10:38 717,296 --a------ C:\Windows\System32\drivers\sptd.sys
2008-05-24 10:37 . 2008-05-24 10:37 <DIR> d-a------ C:\Users\Calvin\AppData\Roaming\DAEMON Tools
2008-05-22 19:19 . 2008-05-22 19:19 <DIR> d-------- C:\PerfLogs
2008-05-22 17:18 . 2008-01-19 00:35 9,847,296 --a------ C:\Windows\System32\NlsData000a.dll
2008-05-22 17:17 . 2008-01-19 00:33 8,139,264 --a------ C:\Windows\System32\ssBranded.scr
2008-05-22 17:16 . 2008-01-19 00:36 2,588,160 --a------ C:\Windows\System32\UIHub.dll
2008-05-22 17:15 . 2008-01-19 00:34 6,103,040 --a------ C:\Windows\System32\chtbrkr.dll
2008-05-22 17:14 . 2008-01-18 23:06 8,147,456 --a------ C:\Windows\System32\wmploc.DLL
2008-05-22 17:13 . 2008-01-19 00:33 599,552 --a------ C:\Windows\System32\vsp1cln.exe
2008-05-22 17:13 . 2008-01-05 04:31 145,455 --a------ C:\Windows\System32\perfmon.msc
2008-05-22 17:13 . 2008-01-05 04:31 3 --a------ C:\Windows\System32\drivers\MsftWdf_Kernel_01007_Inbox_Critical.Wdf
2008-05-22 17:12 . 2008-01-19 00:36 704,512 --a------ C:\Windows\System32\SmiEngine.dll
2008-05-22 17:12 . 2008-01-19 00:36 357,888 --a------ C:\Windows\System32\wbemcomn.dll
2008-05-22 17:12 . 2008-01-19 00:34 258,560 --a------ C:\Windows\System32\dpx.dll
2008-05-22 17:12 . 2008-01-19 00:34 246,784 --a------ C:\Windows\System32\drvstore.dll
2008-05-22 17:12 . 2008-01-19 00:36 218,624 --a------ C:\Windows\System32\wdscore.dll
2008-05-22 17:12 . 2008-01-19 00:36 139,264 --a------ C:\Windows\System32\SmiInstaller.dll
2008-05-22 17:12 . 2008-01-19 00:33 130,560 --a------ C:\Windows\System32\PkgMgr.exe
2008-05-22 17:12 . 2008-01-19 00:35 35,328 --a------ C:\Windows\System32\mspatcha.dll
2008-05-22 17:11 . 2008-01-19 00:34 305,152 --a------ C:\Windows\System32\msdelta.dll
2008-05-19 14:53 . 2008-05-19 14:53 <DIR> d-------- C:\Program Files\Hackety Hack
2008-05-18 23:21 . 2008-05-18 23:21 <DIR> d-------- C:\Users\~Administrator~\AppData\Roaming\ZoomBrowser EX
2008-05-18 21:17 . 2008-05-18 21:17 <DIR> d-------- C:\Users\~Administrator~\AppData\Roaming\Nexon
2008-05-18 21:06 . 2008-05-18 21:06 <DIR> d-------- C:\Users\~Administrator~\AppData\Roaming\Macromedia
2008-05-18 21:06 . 2008-05-18 21:06 <DIR> d-------- C:\Users\~Administrator~\AppData\Roaming\Adobe
2008-05-18 18:07 . 2008-05-18 18:07 671 --a------ C:\Windows\System32\newaddies.xtc
2008-05-18 18:05 . 2008-05-18 18:05 <DIR> d-------- C:\Users\~Administrator~\AppData\Roaming\Roxio
2008-05-18 18:04 . 2008-05-18 18:04 <DIR> d--h----- C:\Users\~Administrator~\AppData\Roaming\GTek
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> dr------- C:\Users\~Administrator~\Videos
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> dr------- C:\Users\~Administrator~\Searches
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> dr------- C:\Users\~Administrator~\Saved Games
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> dr------- C:\Users\~Administrator~\Pictures
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> dr------- C:\Users\~Administrator~\Music
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> dr------- C:\Users\~Administrator~\Links
2008-05-18 18:03 . 2008-05-18 18:04 <DIR> dr------- C:\Users\~Administrator~\Favorites
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> dr------- C:\Users\~Administrator~\Downloads
2008-05-18 18:03 . 2008-05-18 20:58 <DIR> dr------- C:\Users\~Administrator~\Documents
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> dr------- C:\Users\~Administrator~\Desktop
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> dr------- C:\Users\~Administrator~\Contacts
2008-05-18 18:03 . 2008-05-18 18:05 <DIR> d---s---- C:\Users\~Administrator~\AppData\Roaming\Microsoft
2008-05-18 18:03 . 2006-11-02 05:37 <DIR> d-------- C:\Users\~Administrator~\AppData\Roaming\Media Center Programs
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> d-------- C:\Users\~Administrator~\AppData\Roaming\Identities
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> d--h----- C:\Users\~Administrator~\AppData
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> d-------- C:\Users\~Administrator~
2008-05-18 18:03 . 2008-05-30 06:04 786,432 --ahs---- C:\Users\~Administrator~\NTUSER.DAT
2008-05-18 11:19 . 2008-05-18 11:37 <DIR> d-------- C:\Program Files\Eusing Free Registry Cleaner
2008-05-17 21:13 . 2008-05-17 21:17 <DIR> d-------- C:\Program Files\GRETECH
2008-05-17 08:03 . 2008-05-17 08:17 <DIR> d-------- C:\Program Files\Windows Live Safety Center
2008-05-16 07:48 . 2008-05-16 07:54 <DIR> d-------- C:\Program Files\ShellExView
2008-05-16 07:48 . 2008-05-16 07:48 39,424 --a------ C:\Windows\zipinst.exe
2008-05-15 18:33 . 2008-05-15 18:45 <DIR> d-------- C:\Program Files\DVDVideoSoft
2008-05-15 17:29 . 2008-05-15 17:29 <DIR> d-------- C:\DVDVideoSoft
2008-05-15 00:16 . 2008-05-15 00:16 <DIR> d-------- C:\Program Files\Common Files\Control Panels
2008-05-14 23:53 . 2006-09-29 06:56 28,248 -ra------ C:\Windows\System32\AdobePDF.dll
2008-05-13 00:07 . 2008-05-13 00:07 524,288 --ahs---- C:\ntuser.dat{c39279b4-208c-11dd-8355-00e034123456}.TMContainer00000000000000000002.regtrans-ms
2008-05-13 00:07 . 2008-05-13 00:07 524,288 --ahs---- C:\ntuser.dat{c39279b4-208c-11dd-8355-00e034123456}.TMContainer00000000000000000001.regtrans-ms
2008-05-13 00:07 . 2008-05-13 00:07 524,288 --ahs---- C:\ntuser.dat{c39279b0-208c-11dd-8355-00e034123456}.TMContainer00000000000000000002.regtrans-ms
2008-05-13 00:07 . 2008-05-13 00:07 524,288 --ahs---- C:\ntuser.dat{c39279b0-208c-11dd-8355-00e034123456}.TMContainer00000000000000000001.regtrans-ms
2008-05-13 00:07 . 2008-05-17 21:29 262,144 --a------ C:\ntuser.dat
2008-05-13 00:07 . 2008-05-13 00:07 65,536 --ahs---- C:\ntuser.dat{c39279b4-208c-11dd-8355-00e034123456}.TM.blf
2008-05-13 00:07 . 2008-05-13 00:07 65,536 --ahs---- C:\ntuser.dat{c39279b0-208c-11dd-8355-00e034123456}.TM.blf
2008-05-13 00:07 . 2008-05-17 21:29 5,120 --ah----- C:\ntuser.dat.LOG1
2008-05-13 00:07 . 2008-05-13 00:07 0 --ah----- C:\ntuser.dat.LOG2
2008-05-11 17:40 . 2008-05-11 17:40 <DIR> d-------- C:\Program Files\ReflexiveArcade
2008-05-11 15:31 . 2008-05-11 15:31 <DIR> d-------- C:\NVIDIA
2008-05-11 12:59 . 2008-05-11 12:59 <DIR> dr------- C:\Windows\System32\config\systemprofile\Documents
2008-05-11 12:55 . 2007-02-20 16:04 2,463,976 --a------ C:\Windows\System32\NPSWF32.dll
2008-05-11 12:55 . 2007-02-20 16:04 190,696 --a------ C:\Windows\System32\NPSWF32_FlashUtil.exe
2008-05-11 09:19 . 2008-05-11 11:53 <DIR> d-------- C:\Users\Calvin\AppData\Roaming\Download Manager
2008-05-11 00:13 . 2008-05-11 00:14 <DIR> d-------- C:\Users\Calvin\AppData\Roaming\Fun Desktop Wallpaper Changer
2008-05-07 21:32 . 2008-05-07 21:32 107,888 --a------ C:\Windows\System32\CmdLineExt.dll
2008-05-06 22:36 . 2008-05-06 22:36 <DIR> d-------- C:\Users\All Users\FLEXnet
2008-05-06 22:36 . 2008-05-06 22:36 <DIR> d-------- C:\ProgramData\FLEXnet
2008-05-06 20:47 . 2008-05-06 20:47 <DIR> d-------- C:\Program Files\Common Files\Macrovision Shared
2008-05-03 20:59 . 2008-05-03 20:59 <DIR> dr-h----- C:\Users\Calvin\AppData\Roaming\SecuROM
2008-05-03 20:42 . 2008-05-03 20:58 <DIR> d-------- C:\Program Files\EA Sports
2008-04-30 19:10 . 2008-04-30 19:10 <DIR> d-a------ C:\Users\Calvin\AppData\Roaming\Crystal Art Software
2008-04-30 18:56 . 2008-04-30 18:56 <DIR> d-------- C:\Windows\MaxSecureBackup
2008-04-30 18:55 . 2007-05-24 16:57 143,360 --a------ C:\Windows\System32\GetHardDiskNo.dll
2008-04-30 18:55 . 2008-04-30 18:55 63 --a------ C:\Windows\system\SYSRegC.dll
2008-04-28 22:27 . 2008-04-28 22:27 <DIR> d-a------ C:\Users\Calvin\AppData\Roaming\Astro Gemini Software
2008-04-28 19:02 . 2008-01-03 10:40 234,536 --a------ C:\psexec.exe
2008-04-27 17:11 . 2008-04-27 17:17 <DIR> d-------- C:\Users\Calvin\AppData\Roaming\Hamachi
2008-04-27 17:10 . 2008-04-27 17:10 25,280 --a------ C:\Windows\System32\drivers\hamachi.sys
2008-04-27 13:09 . 2008-04-27 13:09 <DIR> d-------- C:\Windows\wb
2008-04-27 13:09 . 1996-08-16 06:44 87,552 -ra------ C:\Windows\system\url.dll
2008-04-27 13:09 . 1996-09-30 05:32 9,728 -ra------ C:\Windows\system\rnaph.dll
2008-04-27 13:08 . 2008-04-27 13:08 300 --a------ C:\Windows\EReg072.dat
2008-04-25 05:32 . 2008-04-25 05:32 <DIR> d-------- C:\Program Files\Safari
2008-04-25 05:31 . 2008-04-25 05:31 <DIR> d-------- C:\Program Files\Bonjour
2008-04-21 20:38 . 2008-04-21 20:38 <DIR> d-------- C:\Program Files\Windows Live Toolbar
2008-04-21 20:38 . 2008-04-21 20:38 <DIR> d-------- C:\Program Files\Windows Live Favorites
2008-04-21 20:37 . 2008-04-21 20:37 <DIR> d-------- C:\Program Files\Microsoft SQL Server Compact Edition
2008-04-21 20:20 . 2008-04-21 20:20 <DIR> d-------- C:\Program Files\Apple Software Update
2008-04-20 10:00 . 2008-04-20 10:02 <DIR> d-a------ C:\Users\Calvin\AppData\Roaming\Orbit
2008-04-20 10:00 . 2008-04-20 10:00 <DIR> d-------- C:\Downloads
2008-04-19 16:10 . 2007-10-26 17:46 41,984 --a------ C:\Windows\System32\netfxperf.dll
2008-04-15 22:57 . 2008-04-15 22:57 <DIR> d-------- C:\Program Files\Cloudbrain
2008-04-15 21:15 . 2008-04-15 21:19 <DIR> d-------- C:\Program Files\Common Files\Macromedia Shared
2008-04-15 00:08 . 2008-04-15 21:18 <DIR> d-------- C:\Users\All Users\Macromedia
2008-04-15 00:08 . 2008-05-11 12:47 <DIR> d-------- C:\Program Files\Macromedia
2008-04-15 00:08 . 2008-05-11 12:47 <DIR> d-------- C:\Program Files\Common Files\Macromedia
2008-04-14 20:41 . 2001-09-06 10:00 1,700,352 --a------ C:\Windows\System32\gdiplus.dll
2008-04-14 20:41 . 2007-06-25 14:02 475,136 --a------ C:\Windows\System32\SkinCrafter2.dll
2008-04-14 20:10 . 2008-05-28 22:17 <DIR> d-------- C:\Program Files\LimeWire
2008-04-13 14:59 . 2008-04-13 14:59 <DIR> d-------- C:\Windows\System32\Adobe
2008-04-13 10:07 . 2008-04-13 10:07 0 --a------ C:\Windows\PROTOCOL.INI
2008-04-13 10:02 . 2008-04-22 00:48 <DIR> d-a------ C:\Users\Calvin\AppData\Roaming\Web Page Maker V2
2008-04-12 11:03 . 2008-05-29 23:49 <DIR> d-------- C:\Perl
2008-04-08 20:28 . 2008-04-08 20:28 <DIR> d-------- C:\Users\All Users\Yahoo! Companion
2008-04-08 20:28 . 2008-04-08 20:28 <DIR> d-------- C:\ProgramData\Yahoo! Companion
2008-04-08 19:57 . 2008-04-08 19:57 <DIR> d-------- C:\Users\All Users\PY_Software
2008-04-08 19:57 . 2008-04-08 19:57 <DIR> d-------- C:\ProgramData\PY_Software
2008-04-08 19:57 . 2008-04-22 00:52 <DIR> d-------- C:\Program Files\Actual Drawing
2008-04-08 17:44 . 2008-04-22 00:48 <DIR> d-------- C:\Program Files\Yahoo!
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-30 13:09 --------- d---a-w C:\Users\Calvin\AppData\Roaming\LimeWire
2008-05-29 19:41 --------- d-----w C:\Program Files\McAfee
2008-05-28 06:22 --------- d-----w C:\Program Files\Dl_cats
2008-05-25 04:34 --------- d-----w C:\ProgramData\Roxio
2008-05-23 03:26 --------- d-----w C:\ProgramData\NVIDIA
2008-05-23 02:33 174 --sha-w C:\Program Files\desktop.ini
2008-05-23 02:22 --------- d-----w C:\Program Files\Windows Sidebar
2008-05-23 02:22 --------- d-----w C:\Program Files\Windows Photo Gallery
2008-05-23 02:22 --------- d-----w C:\Program Files\Windows Mail
2008-05-23 02:22 --------- d-----w C:\Program Files\Windows Journal
2008-05-23 02:22 --------- d-----w C:\Program Files\Windows Defender
2008-05-23 02:22 --------- d-----w C:\Program Files\Windows Collaboration
2008-05-23 02:22 --------- d-----w C:\Program Files\Windows Calendar
2008-05-23 01:28 82,432 ----a-w C:\Windows\System32\axaltocm.dll
2008-05-23 01:28 101,888 ----a-w C:\Windows\System32\ifxcardm.dll
2008-05-22 23:45 --------- d-----w C:\Program Files\Nexon
2008-05-15 06:45 --------- d-----w C:\Program Files\Common Files\Adobe
2008-05-15 02:01 --------- d-----w C:\ProgramData\Microsoft Help
2008-05-15 01:13 --------- d-----w C:\Program Files\Java
2008-05-14 00:05 --------- d-----w C:\Program Files\SoundSpectrum
2008-05-11 22:31 --------- d-----w C:\Program Files\Common Files\InstallShield
2008-05-01 02:14 --------- d-----w C:\Program Files\CCleaner
2008-04-30 06:14 --------- d-----w C:\Program Files\Dell DataSafe Online
2008-04-29 02:54 --------- d-----w C:\Program Files\Windows Live
2008-04-29 02:46 --------- d-----w C:\ProgramData\WLInstaller
2008-04-25 12:15 --------- d-----w C:\Program Files\Reference Assemblies
2008-04-22 23:22 --------- d-----w C:\Program Files\7-Zip
2008-04-03 05:30 --------- d-----w C:\Program Files\QuickTime
2008-03-31 18:06 --------- d-----w C:\ProgramData\Spybot - Search & Destroy
2008-03-31 18:05 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-03-31 16:07 --------- d---a-w C:\Users\Calvin\AppData\Roaming\Apple Computer
2008-03-31 05:01 691,545 ----a-w C:\Windows\unins000.exe
2008-03-09 01:45 21,764 ----a-w C:\Windows\System32\CoreAAC-uninstall.exe
2008-03-08 04:19 540,672 ----a-w C:\Windows\AppPatch\AcLayers.dll
2008-03-08 04:19 458,752 ----a-w C:\Windows\AppPatch\AcSpecfc.dll
2008-03-08 04:19 2,153,984 ----a-w C:\Windows\AppPatch\AcGenral.dll
2008-03-08 04:19 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll
2008-03-08 01:58 2,560 ----a-w C:\Windows\AppPatch\AcRes.dll
2007-11-04 16:32 374 ----a-w C:\Users\Calvin\AppData\Roaming\internaldb6334.dat
2007-11-04 14:50 555 ----a-w C:\Users\Calvin\AppData\Roaming\internaldb8467.dat
2007-11-04 14:50 18,432 ----a-w C:\Users\Calvin\AppData\Roaming\internaldb41.dat
.
------- Sigcheck -------
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{dbf274fc-a367-638c-10e6-5d1e81ecc508}]
C:\Windows\system32\{23dd81ce-e488-eec4-be5c-ebcffe0a6446}.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DellSupport"="C:\Program Files\DellSupport\DSAgnt.exe" [2007-03-15 10:09 460784]
"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2008-01-19 00:33 125952]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34 5724184]
"DellSupportCenter"="C:\Program Files\Dell Support Center\bin\sprtcmd.exe" [2007-10-09 19:56 202544]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 11:43 2097488]
"Dell DataSafe Scheduler"="C:\Program Files\Dell DataSafe Online\Bin\DataSafeOnlineScheduler.exe" [2007-12-02 17:30 308464]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-19 00:33 1233920]
"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\daemon.exe" [2008-04-01 02:39 486856]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 00:33 202240]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RtHDVCpl.exe" [2008-01-17 07:22 4907008 C:\Windows\RtHDVCpl.exe]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2006-10-03 09:37 81920]
"RoxWatchTray"="C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2006-11-05 09:22 221184]
"dscactivate"="C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" [2007-10-09 19:57 16384]
"ECenter"="c:\dell\E-Center\EULALauncher.exe" [2007-03-16 03:20 17920]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-03-28 23:37 413696]
"dlcqmon.exe"="C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe" [2007-06-29 08:47 292080]
"MemoryCardManager"="C:\Program Files\Dell Photo AIO Printer 966\memcard.exe" [2007-06-29 08:48 304368]
"MskAgentexe"="C:\Program Files\McAfee\MSK\MskAgent.exe" [2007-01-17 18:30 152144]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 10:36 267048]
"Adobe_ID0EYTHM"="C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE" [2007-03-20 16:40 1884160]
"DellSupportCenter"="C:\Program Files\Dell Support Center\bin\sprtcmd.exe" [2007-10-09 19:56 202544]
"NvSvc"="C:\Windows\system32\nvsvc.dll" [2007-09-17 09:07 86016]
"NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-09-17 09:07 8497696]
"NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-09-17 09:07 81920]
"{7cea24c7-d3e8-c48b-f141-a11cf8a82b1d}"="C:\Windows\system32\{23dd81ce-e488-eec4-be5c-ebcffe0a6446}.dll" [ ]
"combofix"="C:\Windows\system32\CF13146.exe" [2008-01-19 00:33 318976]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 11:34 5724184]
C:\Users\Calvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
LimeWire On Startup.lnk - C:\Program Files\LimeWire\LimeWire.exe [2/8/2008 2:41:35 PM 147456]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [4/23/2008 3:38:16 AM 29696]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"LogonHoursAction"= 2 (0x2)
"DontDisplayLogonHoursWarnings"= 1 (0x1)
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\system]
"LogonHoursAction"= 2 (0x2)
"DontDisplayLogonHoursWarnings"= 1 (0x1)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.IV41"= ir41_32.dll
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Dell DataSafe Scheduler"="C:\Program Files\Dell DataSafe Online\Bin\DataSafeOnlineScheduler.exe"
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001
"InternetSettingsDisableNotify"=dword:00000001
"AutoUpdateDisableNotify"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{C40A1CDE-3524-47EB-AB86-D043632CF06D}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{95A5E1FA-64AB-4ADB-AC4D-3DF2E0B735B6}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{9164ED87-D1FE-4206-8496-29DEC6BBB6D0}"= UDP:C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe:McAfee Network Agent
"{204B31F1-64E0-4F04-B55D-73DE3A458B3F}"= UDP:C:\Program Files\LimeWire\LimeWire.exe:LimeWire
"{189B5808-CF71-49AB-94CA-02B985EA3914}"= TCP:C:\Program Files\LimeWire\LimeWire.exe:LimeWire
"TCP Query User{E162012F-98CF-4888-8A39-00328A767F10}C:\\program files\\nexon\\maplestory\\maplestory.exe"= UDP:C:\program files\nexon\maplestory\maplestory.exe:MapleStory
"UDP Query User{2FB30AAD-97FB-4027-8C8D-3FA7FDCF7BFE}C:\\program files\\nexon\\maplestory\\maplestory.exe"= TCP:C:\program files\nexon\maplestory\maplestory.exe:MapleStory
"TCP Query User{A0186F92-7442-4DC0-9CDF-695C1370EE4F}C:\\users\\calvin\\saved games\\nexon\\maplestory.exe"= UDP:C:\users\calvin\saved games\nexon\maplestory.exe:maplestory.exe
"UDP Query User{FCD1575D-BBD4-4794-AD79-F7C3406AE999}C:\\users\\calvin\\saved games\\nexon\\maplestory.exe"= TCP:C:\users\calvin\saved games\nexon\maplestory.exe:maplestory.exe
"TCP Query User{FF2B4B4D-1D13-48E6-8991-58A7FA801092}C:\\users\\calvin\\saved games\\nexon\\maplestory.exe"= UDP:C:\users\calvin\saved games\nexon\maplestory.exe:maplestory.exe
"UDP Query User{0B2E0060-86A4-484A-AB2C-D90157F44379}C:\\users\\calvin\\saved games\\nexon\\maplestory.exe"= TCP:C:\users\calvin\saved games\nexon\maplestory.exe:maplestory.exe
"TCP Query User{4E10DA99-3C04-4667-9F89-F36A44B45368}C:\\users\\calvin\\saved games\\nexon\\patcher.exe"= UDP:C:\users\calvin\saved games\nexon\patcher.exe:patcher.exe
"UDP Query User{79088905-9F9D-4D68-9C4F-512196042A94}C:\\users\\calvin\\saved games\\nexon\\patcher.exe"= TCP:C:\users\calvin\saved games\nexon\patcher.exe:patcher.exe
"TCP Query User{C5CBBF51-2752-40A6-A2C0-DC8A40B3B8F6}C:\\users\\calvin\\saved games\\nexon\\newpatcher.exe"= UDP:C:\users\calvin\saved games\nexon\newpatcher.exe:newpatcher.exe
"UDP Query User{BFE9CE8F-1C04-4B88-8B32-CAD967AF13DA}C:\\users\\calvin\\saved games\\nexon\\newpatcher.exe"= TCP:C:\users\calvin\saved games\nexon\newpatcher.exe:newpatcher.exe
"TCP Query User{4513D3DC-A943-4252-BE51-253D2AEA4C5F}C:\\users\\calvin\\saved games\\nexon\\patcher.exe"= UDP:C:\users\calvin\saved games\nexon\patcher.exe:patcher.exe
"UDP Query User{D4241B12-00EC-4E4D-A39C-7C2807C78F17}C:\\users\\calvin\\saved games\\nexon\\patcher.exe"= TCP:C:\users\calvin\saved games\nexon\patcher.exe:patcher.exe
"TCP Query User{871E1A48-AEBC-4085-BAED-C787EC6E21F1}C:\\users\\calvin\\appdata\\roaming\\u3\\
0000187b85732e4e\\
0de4f643-c398-46ec-9339-2362f2311932\\exec\\skype.exe"= UDP:C:\users\calvin\appdata\roaming\u3\
0000187b85732e4e\
0de4f643-c398-46ec-9339-2362f2311932\exec\skype.exe:skype.exe
"UDP Query User{326FF41C-497D-4D03-8513-22EBAC3AC34A}C:\\users\\calvin\\appdata\\roaming\\u3\\
0000187b85732e4e\\
0de4f643-c398-46ec-9339-2362f2311932\\exec\\skype.exe"= TCP:C:\users\calvin\appdata\roaming\u3\
0000187b85732e4e\
0de4f643-c398-46ec-9339-2362f2311932\exec\skype.exe:skype.exe
"TCP Query User{37A6A56D-37BC-40E8-9018-8069A4C66930}C:\\program files\\nexon\\maplestory\\maplestory.exe"= UDP:C:\program files\nexon\maplestory\maplestory.exe:MapleStory
"UDP Query User{A5CF2920-5E05-4607-BCEE-DA15A6B8B0A0}C:\\program files\\nexon\\maplestory\\maplestory.exe"= TCP:C:\program files\nexon\maplestory\maplestory.exe:MapleStory
"TCP Query User{82CCA1D9-95CC-4545-8AE2-8C097F9A4A13}C:\\users\\calvin\\appdata\\roaming\\u3\\
0000187b85732e4e\\
0de4f643-c398-46ec-9339-2362f2311932\\exec\\skype.exe"= UDP:C:\users\calvin\appdata\roaming\u3\
0000187b85732e4e\
0de4f643-c398-46ec-9339-2362f2311932\exec\skype.exe:skype.exe
"UDP Query User{2DFC44B5-C6FC-4455-9F08-9713F4536A64}C:\\users\\calvin\\appdata\\roaming\\u3\\
0000187b85732e4e\\
0de4f643-c398-46ec-9339-2362f2311932\\exec\\skype.exe"= TCP:C:\users\calvin\appdata\roaming\u3\
0000187b85732e4e\
0de4f643-c398-46ec-9339-2362f2311932\exec\skype.exe:skype.exe
"TCP Query User{3FE2B734-5BFA-4A80-84A8-87DC826F8C00}C:\\windows\\explorer.exe"= UDP:C:\windows\explorer.exe:Windows Explorer
"UDP Query User{5FD30CFD-6BAB-4702-9497-098A7B9A67B4}C:\\windows\\explorer.exe"= TCP:C:\windows\explorer.exe:Windows Explorer
"{400D87FB-D104-4A48-8208-178B985E4A11}"= UDP:C:\Windows\System32\rlvknlg.exe:rlvknlg.exe
"{EC8BCD7F-E649-4D37-A950-57E4B152804C}"= TCP:C:\Windows\System32\rlvknlg.exe:rlvknlg.exe
"{ECEF8CF6-AFE4-4A65-A2EF-8691D9A93C3E}"= UDP:C:\ProgramData\NexonUS\NGM\NGM.exe:Nexon Game Manager
"{79C9CF6E-0E9A-41AB-861D-8EAE4CF907B2}"= TCP:C:\ProgramData\NexonUS\NGM\NGM.exe:Nexon Game Manager
"TCP Query User{489E40BC-53D2-44A4-A423-82B499B8D9BB}C:\\nexon\\maplestory\\maplestory.exe"= UDP:C:\nexon\maplestory\maplestory.exe:MapleStory
"UDP Query User{0B733464-F515-4AA6-8220-F374B7E1341C}C:\\nexon\\maplestory\\maplestory.exe"= TCP:C:\nexon\maplestory\maplestory.exe:MapleStory
"TCP Query User{80CCF7DE-E26B-40A8-836A-638BA1A87700}C:\\nexon\\maplestory\\maplestory.exe"= UDP:C:\nexon\maplestory\maplestory.exe:MapleStory
"UDP Query User{71B875FE-9E27-418C-A965-496F8303828E}C:\\nexon\\maplestory\\maplestory.exe"= TCP:C:\nexon\maplestory\maplestory.exe:MapleStory
"TCP Query User{D3C1ECFA-5DAD-42A3-8DAA-1896FE6B3BEA}C:\\program files\\limewire\\limewire.exe"= UDP:C:\program files\limewire\limewire.exe:LimeWire
"UDP Query User{E2A310D1-7EB4-4C86-94ED-A1764FE80CA3}C:\\program files\\limewire\\limewire.exe"= TCP:C:\program files\limewire\limewire.exe:LimeWire
"{24BECBA1-8C8C-4B02-9916-4EEB02766C48}"= UDP:C:\Program Files\iTunes\iTunes.exe:iTunes
"{39FBCFD1-2DF2-4251-AF7F-3C3685B06BB7}"= TCP:C:\Program Files\iTunes\iTunes.exe:iTunes
"TCP Query User{34A08745-C53B-4350-BBF6-B3E8C45B0762}C:\\program files\\bitlord2\\bitlord.exe"= UDP:C:\program files\bitlord2\bitlord.exe:
"UDP Query User{4FA8BA5C-B3B3-4BB2-B2CE-DAED6CF66DFD}C:\\program files\\bitlord2\\bitlord.exe"= TCP:C:\program files\bitlord2\bitlord.exe:
"TCP Query User{A3D3605E-AF3F-46B9-9FDE-230A280E9BFF}C:\\program files\\bitlord\\bitlord.exe"= UDP:C:\program files\bitlord\bitlord.exe:BitLord
"UDP Query User{9C1B00E3-FA2A-420B-84D1-86DAE89A54E6}C:\\program files\\bitlord\\bitlord.exe"= TCP:C:\program files\bitlord\bitlord.exe:BitLord
"{341CEB89-AAA7-452B-A8EB-87FBD4C00165}"= UDP:C:\ProgramData\NexonUS\NGM\NGM.exe:Nexon Game Manager
"{C4613266-71ED-4679-8A58-AB4071F27743}"= TCP:C:\ProgramData\NexonUS\NGM\NGM.exe:Nexon Game Manager
"{2F9D8050-BF84-4A47-B80A-5A51F24B62A2}"= UDP:C:\Nexon\KartRider\KartRider.exe:KartRider
"{6CEB6678-3F6B-49DA-A194-2CAD4CC4998E}"= TCP:C:\Nexon\KartRider\KartRider.exe:KartRider
"{CB551BCF-FF61-435D-A80D-803693620C35}"= UDP:C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe:Device Monitor
"{BBD75391-A0DC-47C2-9821-47E61C7E212E}"= TCP:C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe:Device Monitor
"{0AA4CB1A-C026-4777-AB0D-26B0E8C4F83E}"= UDP:C:\Program Files\Dell Photo AIO Printer 966\DLCQaiox.exe:All In One Center
"{F12EB92A-1930-47BF-A3FD-728C657F1501}"= TCP:C:\Program Files\Dell Photo AIO Printer 966\DLCQaiox.exe:All In One Center
"{D4C3A691-D7F9-44A7-8EFD-B572AA6E55BD}"= UDP:C:\Program Files\Dell Photo AIO Printer 966\memcard.exe:Memory Card Manager
"{E91FAA2D-12B0-43F8-B2DC-D06E76678598}"= TCP:C:\Program Files\Dell Photo AIO Printer 966\memcard.exe:Memory Card Manager
"{916FABEE-914F-4826-B5B6-1F8593C95026}"= UDP:C:\Windows\System32\dlcqcoms.exe:Dell Communications System
"{52987BB2-9EE3-490F-905B-6245E9C27E94}"= TCP:C:\Windows\System32\dlcqcoms.exe:Dell Communications System
"TCP Query User{2403A6DE-64D6-49C2-80EE-2D943E9CF91F}C:\\program files\\nexon\\maplestory\\gglessv51.exe"= UDP:C:\program files\nexon\maplestory\gglessv51.exe:MapleStory
"UDP Query User{D758F7CB-2751-4782-913A-F24C56E7ABD7}C:\\program files\\nexon\\maplestory\\gglessv51.exe"= TCP:C:\program files\nexon\maplestory\gglessv51.exe:MapleStory
"{5FE6955F-A5A9-4AAC-B7F5-7417FD787A4D}"= UDP:C:\Windows\System32\dlcqcoms.exe:Dell Communications System
"{A5A26F7F-557D-4D8C-8F09-CCA1084FC6D8}"= TCP:C:\Windows\System32\dlcqcoms.exe:Dell Communications System
"{8DB4D979-8B52-45D7-9B71-D00095952AF3}"= UDP:C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe:Device Monitor
"{CD5E6279-511E-4EFF-A1DD-C2ABE970394B}"= TCP:C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe:Device Monitor
"{57D1B8F0-DC42-498A-AF6A-D23054A5340E}"= UDP:C:\Program Files\Dell Photo AIO Printer 966\DLCQaiox.exe:All In One Center
"{28A1A368-8650-4792-9A26-66373E947820}"= TCP:C:\Program Files\Dell Photo AIO Printer 966\DLCQaiox.exe:All In One Center
"{A64B97B6-82CE-4781-B074-0FCDB62DEF67}"= UDP:C:\Program Files\Dell Photo AIO Printer 966\memcard.exe:Memory Card Manager
"{7933A23F-CCC4-43AC-8854-891062504CD7}"= TCP:C:\Program Files\Dell Photo AIO Printer 966\memcard.exe:Memory Card Manager
"TCP Query User{3094D4F0-4A74-43D8-ADF8-385FDCA2125F}C:\\program files\\mozilla firefox\\firefox.exe"= UDP:C:\program files\mozilla firefox\firefox.exe:Firefox
"UDP Query User{60FEC39C-576F-4CDB-8894-596E013E17D4}C:\\program files\\mozilla firefox\\firefox.exe"= TCP:C:\program files\mozilla firefox\firefox.exe:Firefox
"{D04AA1E0-2354-47A4-B03E-34F8302D4128}"= UDP:C:\Program Files\Grisoft\AVG7\avgcc.exe:AVG Control Center
"{DC2D4B90-FE0D-4508-B2AD-7FCD89315EB7}"= TCP:C:\Program Files\Grisoft\AVG7\avgcc.exe:AVG Control Center
"{60ED4348-1C81-48CC-86E6-9E278D53F6AE}"= UDP:C:\Program Files\Grisoft\AVG7\avgw.exe:AVG Test Center
"{CE4889C6-655B-41E5-9634-A9D4F1D861DF}"= TCP:C:\Program Files\Grisoft\AVG7\avgw.exe:AVG Test Center
"{E7093309-45D0-4BDF-AB60-345CD913DD04}"= UDP:C:\Program Files\Grisoft\AVG7\avgvv.exe:AVG Virus Vault
"{08FA98A6-AD7B-4967-8CC5-1725C7A60C25}"= TCP:C:\Program Files\Grisoft\AVG7\avgvv.exe:AVG Virus Vault
"{77A37B42-5889-4A26-9C5B-D8495F8BB946}"= UDP:C:\Program Files\Avast4\ashAvast.exe:avast! Antivirus
"{3E72381B-CED5-431E-803F-43BB4EC16E40}"= TCP:C:\Program Files\Avast4\ashAvast.exe:avast! Antivirus
"{F493B459-7CCA-4DDD-9A94-BD312D30BA98}"= UDP:C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe:McAfee Network Agent
"{55C74632-22F9-4705-AB7B-2B112956FA2B}"= TCP:C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe:McAfee Network Agent
"{ED28BE93-1FAA-4D8C-A7D1-0257C567F0DD}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"TCP Query User{305C2301-1CC4-4397-93CE-DC6BDF9963D5}C:\\program files\\nexon\\maplestory\\ggless52.exe"= UDP:C:\program files\nexon\maplestory\ggless52.exe:MapleStory
"UDP Query User{308608BB-9CB5-4086-B67C-C9BC9AAEB86F}C:\\program files\\nexon\\maplestory\\ggless52.exe"= TCP:C:\program files\nexon\maplestory\ggless52.exe:MapleStory
"{D2745287-EEDB-4836-AA2F-CCBE52746944}"= UDP:C:\Program Files\iTunes\iTunes.exe:iTunes
"{9242175C-A073-468A-959F-1A20FD1F204E}"= TCP:C:\Program Files\iTunes\iTunes.exe:iTunes
"TCP Query User{435E572C-6B71-4895-AF14-A2319EA2A03C}C:\\program files\\orbitdownloader\\orbitnet.exe"= UDP:C:\program files\orbitdownloader\orbitnet.exe:P2P service of Orbit Downloader
"UDP Query User{E37796CC-BDBE-4B98-BA19-7623E2E52319}C:\\program files\\orbitdownloader\\orbitnet.exe"= TCP:C:\program files\orbitdownloader\orbitnet.exe:P2P service of Orbit Downloader
"{CAE85B28-FC9A-4AC2-860E-99EFB98BEC6B}"= UDP:C:\Program Files\Bonjour\mDNSResponder.exe:Bonjour
"{07C4E20F-9055-41F6-99B7-62625B4681FC}"= TCP:C:\Program Files\Bonjour\mDNSResponder.exe:Bonjour
"{625BF72C-6185-4D8F-B800-F26772BBEA96}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"TCP Query User{D8802660-2B38-4762-B31B-C502D67C1A4D}C:\\program files\\ea sports\\nhl08\\nhl2008.exe"= UDP:C:\program files\ea sports\nhl08\nhl2008.exe:nhl2008
"UDP Query User{1C0EF8FA-9327-4934-A9CF-0A6C401F6D9B}C:\\program files\\ea sports\\nhl08\\nhl2008.exe"= TCP:C:\program files\ea sports\nhl08\nhl2008.exe:nhl2008
"{BB93A364-29CE-4471-8A8D-0427EE503372}"= UDP:C:\Program Files\EA Sports\EA SPORTS online\SportsWrapper.exe:SportsWrapper
"{0E00767A-9216-4BA8-B36B-F552C1591F1B}"= TCP:C:\Program Files\EA Sports\EA SPORTS online\SportsWrapper.exe:SportsWrapper
"{7FDCC7F9-7C63-4F32-A0FD-967282029470}"= UDP:3703:Adobe Version Cue CS3 Server
"{A54138F7-585B-45C2-B398-2708C437E641}"= UDP:3704:Adobe Version Cue CS3 Server
"{88F3E162-3910-4B5C-81C9-26A4EF828D5F}"= UDP:50900:Adobe Version Cue CS3 Server
"{CF41B43C-48BF-45B6-A844-345E7BD558F2}"= UDP:50901:Adobe Version Cue CS3 Server
"{E9035596-E03B-4100-8521-8ACD9A3F79FD}"= UDP:C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe:Adobe Version Cue CS3 Server
"{940BD430-EBCF-4C4B-83D7-C7AF61054A01}"= TCP:C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe:Adobe Version Cue CS3 Server
"TCP Query User{56B436A0-8D6B-47B1-A43B-8253FFB3D7B4}C:\\program files\\safari\\safari.exe"= UDP:C:\program files\safari\safari.exe:Safari Web Browser
"UDP Query User{DE366E98-DB01-4FF2-AEF9-DE26FDD6F8D5}C:\\program files\\safari\\safari.exe"= TCP:C:\program files\safari\safari.exe:Safari Web Browser
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"DoNotAllowExceptions"= 0 (0x0)
R1 DLARTL_M;DLARTL_M;C:\Windows\system32\Drivers\DLARTL_M.SYS [2007-02-08 20:05]
R2 AERTFilters;Andrea RT Filters Service;C:\Windows\system32\AERTSrv.exe [2007-12-05 06:17]
R2 dlcq_device;dlcq_device;C:\Windows\system32\dlcqcoms.exe [2006-12-12 01:22]
R2 SBSDWSCService;SBSD Security Center Service;C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2008-01-28 11:43]
R2 sprtsvc_dellsupportcenter;SupportSoft Sprocket Service (dellsupportcenter);C:\Program Files\Dell Support Center\bin\sprtsvc.exe [2007-10-09 19:56]
S2 0061871212152662mcinstcleanup;McAfee Application Installer Cleanup (0061871212152662);C:\Windows\TEMP\
006187~1.EXE C:\PROGRA~1\COMMON~1\McAfee\INSTAL~1\cleanup.ini []
S3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver;C:\Windows\system32\DRIVERS\bcmwl6.sys [2006-11-02 00:30]
S3 NAL;Nal Service ;C:\Windows\system32\Drivers\iqvw32.sys [2007-03-09 15:04]
S3 R300;R300;C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-02 00:36]
S3 tapvpn;TAP VPN Adapter;C:\Windows\system32\DRIVERS\tapvpn.sys [2008-03-12 19:38]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\K]
\shell\AutoRun\command - K:\LaunchU3.exe -a
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{214b9213-29c4-11dd-b075-00e034123456}]
\shell\AutoRun\command - K:\Autorun.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3d670c13-8f53-11dc-bc1e-001aa090d113}]
\shell\AutoRun\command - K:\LaunchU3.exe -a
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{68df2eb4-5b9f-11dc-aed8-806e6f6e6963}]
\shell\AutoRun\command - F:\Autorun.exe
.
Contents of the 'Scheduled Tasks' folder
"2008-05-15 12:56:06 C:\Windows\Tasks\McDefragTask.job"
- c:\program files\mcafee\mqc\QcConsol.exe
"2008-03-03 16:25:30 C:\Windows\Tasks\McQcTask.job"
- c:\program files\mcafee\mqc\QcConsol.exe
"2008-05-27 03:00:00 C:\Windows\Tasks\Norton Internet Security - Run Full System Scan - Calvin.job"
- C:\Program Files\Norton Internet Security\Norton AntiVirus\Navw32.exeB/TASK:
"2008-05-30 14:25:00 C:\Windows\Tasks\User_Feed_Synchronization-{0FC40BB8-6DE1-4C3A-BFFC-6DC12BF1D332}.job"
- C:\Windows\system32\msfeedssync.exe
"2008-05-30 14:25:24 C:\Windows\Tasks\User_Feed_Synchronization-{893D5EE2-FA10-4615-B039-239B29105AB9}.job"
- C:\Windows\system32\msfeedssync.exe
.
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.netRootkit scan 2008-05-30 07:12:35
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Windows\System32\audiodg.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
C:\PROGRA~1\COMMON~1\McAfee\McProxy\McProxy.exe
C:\PROGRA~1\COMMON~1\McAfee\RedirSvc\RedirSvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\Mcshield.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\PROGRA~1\McAfee\MPS\mps.exe
C:\Program Files\McAfee\MSK\msksrver.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
C:\Program Files\McAfee\MPS\mpsevh.exe
C:\Windows\System32\WUDFHost.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
C:\PROGRA~1\McAfee.com\Agent\mcagent.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\wbem\unsecapp.exe
C:\Windows\System32\rundll32.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Dell DataSafe Online\Bin\DataSafeOnlineTrayIcon.exe
C:\Program Files\Windows Mail\WinMail.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\ehome\mcupdate.exe
.
**************************************************************************
.
Completion time: 2008-05-30 7:26:28 - machine was rebooted
ComboFix-quarantined-files.txt 2008-05-30 14:26:23
ComboFix2.txt 2008-05-29 23:41:08
ComboFix3.txt 2008-05-14 00:47:57
ComboFix4.txt 2008-05-13 01:49:51
ComboFix5.txt 2008-04-26 15:23:27
Pre-Run: 332,017,025,024 bytes free
Post-Run: 331,452,567,552 bytes free
13213 --- E O F --- 2008-05-28 02:47:11
Posted: Thu May 29, 2008 6:19 am