Trojan Detected, Spammed by Spybot S&D, etc.

[cc481613]

Recently, I installed a video codec, and now strange things are happening to my computer. PLease check this HiJack This log... before it gets any worse... please...
Thanks a a lot:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:14:57 PM, on 28/05/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe
C:\Program Files\Dell Photo AIO Printer 966\memcard.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Dell DataSafe Online\Bin\DataSafeOnlineScheduler.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Dell DataSafe Online\Bin\DataSafeOnlineTrayIcon.exe
C:\Program Files\Windows Mail\WinMail.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\McAfee\MPS\mpsevh.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Windows\system32\vntiho05\vntiho051080.exe
C:\Windows\system32\rundll32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Users\Calvin\winlogon.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\cmd.exe
C:\Windows\17PHolmes1188.exe
C:\Windows\17PHolmes1000106.exe
C:\Users\Calvin\Desktop\HiJackThis.exe
c:\PROGRA~1\mcafee\VIRUSS~1\mcvsshld.exe
C:\Program Files\Windows Media Player\wmplayer.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://sympatico.msn.ca/?lang=en-CA
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\PROGRA~1\mcafee\VIRUSS~1\scriptcl.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O2 - BHO: targetedbanner browser optimizer - {dbf274fc-a367-638c-10e6-5d1e81ecc508} - C:\Windows\system32\{23dd81ce-e488-eec4-be5c-ebcffe0a6446}.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [ECenter] c:\dell\E-Center\EULALauncher.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [dlcqmon.exe] "C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe"
O4 - HKLM\..\Run: [MemoryCardManager] "C:\Program Files\Dell Photo AIO Printer 966\memcard.exe"
O4 - HKLM\..\Run: [MskAgentexe] C:\Program Files\McAfee\MSK\MskAgent.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [MSServer] rundll32.exe C:\Windows\system32\ljJButRK.dll,#1
O4 - HKLM\..\Run: [{7cea24c7-d3e8-c48b-f141-a11cf8a82b1d}] C:\Windows\System32\Rundll32.exe "C:\Windows\system32\{23dd81ce-e488-eec4-be5c-ebcffe0a6446}.dll" DllStart
O4 - HKLM\..\Run: [runner1] C:\Windows\mrofinu1000106.exe 61A847B5BBF72813329B385772FF01F0B3E35B6638993F4661AA4EBD86D67C56389B284534F310
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Dell DataSafe Scheduler] "C:\Program Files\Dell DataSafe Online\Bin\DataSafeOnlineScheduler.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Host Process] C:\Users\Calvin\svchost.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files\Bonjour\ExplorerPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O15 - ESC Trusted Zone: http://*.update.microsoft.com
O16 - DPF: {3860DD98-0549-4D50-AA72-5D17D200EE10} (Windows Live OneCare safety scanner control) - http://cdn.scan.onecare.live.com/resour ... cctrl2.cab
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/v ... .2.3.5.cab
O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} (WMI Class) - https://support.dell.com/systemprofiler/SysProExe.CAB
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/So ... b56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-CA/a-U ... E_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b56907.cab
O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Windows\system32\AERTSrv.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: dlcq_device - - C:\Windows\system32\dlcqcoms.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

--
End of file - 12451 bytes

[Gecko]

cc481613,

Please download to your desktop.

Double click combofix.exe and follow the prompts.

Do not exit Combofix while it is running you my loose all your personal settings!
Important Note - Do not mouseclick combofix's window while it's running, that may cause it to stall.

When it's done running it will produce a log for you. Please post that log in your next reply.

[cc481613]

Here it is...

ComboFix 08-05-29.1 - Calvin 2008-05-29 16:33:18.8 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.2060 [GMT -7:00]
Running from: C:\Users\Calvin\Desktop\ComboFix.exe
* Created a new restore point
* Resident AV is active

.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Temp\1cb
C:\Temp\1cb\syscheck.log
C:\Windows\system32\ljJButRK.dll
C:\Windows\system32\MSINET.oca
C:\Windows\system32\pac.txt

.
((((((((((((((((((((((((( Files Created from 2008-04-28 to 2008-05-29 )))))))))))))))))))))))))))))))
.

2008-05-28 22:13 . 2008-05-28 22:13 528 --a------ C:\Users\Calvin\995.bat
2008-05-28 22:12 . 2008-05-28 22:58 <DIR> d-------- C:\Windows\System32\vntiho05
2008-05-28 22:12 . 2008-05-28 22:12 <DIR> d-------- C:\Windows\System32\nZ
2008-05-28 22:12 . 2008-05-28 22:12 <DIR> d-------- C:\Windows\System32\cTM
2008-05-28 22:12 . 2008-05-28 22:12 <DIR> d-------- C:\Windows\System32\CBE
2008-05-28 22:12 . 2008-05-28 22:19 <DIR> d-ahs---- C:\Users\Calvin\!
2008-05-28 22:12 . 2008-05-28 22:12 <DIR> d-------- C:\Temp\vtmp2
2008-05-28 22:12 . 2008-05-29 16:33 <DIR> d-------- C:\Temp
2008-05-28 22:12 . 2008-05-28 22:12 517,120 --a------ C:\Users\Calvin\winlogon.exe
2008-05-28 22:12 . 2008-05-28 22:12 70,656 --a------ C:\Users\Calvin\msconfig.exe
2008-05-28 22:12 . 2008-05-28 22:12 63,909 --a------ C:\Windows\System32\{23dd81ce-e488-eec4-be5c-ebcffe0a6446}.dll-uninst.exe
2008-05-27 16:41 . 2008-03-07 19:08 4,240,384 --a------ C:\Windows\System32\GameUXLegacyGDFs.dll
2008-05-27 16:41 . 2008-03-07 21:21 1,695,744 --a------ C:\Windows\System32\gameux.dll
2008-05-26 16:32 . 2008-05-25 12:49 2,024 --a------ C:\yo.lnk
2008-05-26 08:54 . 2008-05-26 08:54 364,544 --a------ C:\Windows\System32\{23dd81ce-e488-eec4-be5c-ebcffe0a6446}.dll
2008-05-24 15:57 . 2008-05-25 07:44 <DIR> d-------- C:\Program Files\EA GAMES
2008-05-24 15:57 . 2004-08-18 02:17 442,368 -ra------ C:\Windows\System32\vp6vfw.dll
2008-05-24 15:49 . 2008-05-24 15:49 <DIR> d-------- C:\Program Files\DAEMON Tools Lite
2008-05-24 10:38 . 2008-05-24 10:38 717,296 --a------ C:\Windows\System32\drivers\sptd.sys
2008-05-24 10:37 . 2008-05-24 10:37 <DIR> d-a------ C:\Users\Calvin\AppData\Roaming\DAEMON Tools
2008-05-22 19:19 . 2008-05-22 19:19 <DIR> d-------- C:\PerfLogs
2008-05-22 17:18 . 2008-01-19 00:35 9,847,296 --a------ C:\Windows\System32\NlsData000a.dll
2008-05-22 17:17 . 2008-01-19 00:33 8,139,264 --a------ C:\Windows\System32\ssBranded.scr
2008-05-22 17:16 . 2008-01-19 00:36 2,588,160 --a------ C:\Windows\System32\UIHub.dll
2008-05-22 17:15 . 2008-01-19 00:34 6,103,040 --a------ C:\Windows\System32\chtbrkr.dll
2008-05-22 17:14 . 2008-01-18 23:06 8,147,456 --a------ C:\Windows\System32\wmploc.DLL
2008-05-22 17:13 . 2008-01-19 00:33 599,552 --a------ C:\Windows\System32\vsp1cln.exe
2008-05-22 17:13 . 2008-01-05 04:31 145,455 --a------ C:\Windows\System32\perfmon.msc
2008-05-22 17:13 . 2008-01-05 04:31 3 --a------ C:\Windows\System32\drivers\MsftWdf_Kernel_01007_Inbox_Critical.Wdf
2008-05-22 17:12 . 2008-01-19 00:36 704,512 --a------ C:\Windows\System32\SmiEngine.dll
2008-05-22 17:12 . 2008-01-19 00:36 357,888 --a------ C:\Windows\System32\wbemcomn.dll
2008-05-22 17:12 . 2008-01-19 00:34 258,560 --a------ C:\Windows\System32\dpx.dll
2008-05-22 17:12 . 2008-01-19 00:34 246,784 --a------ C:\Windows\System32\drvstore.dll
2008-05-22 17:12 . 2008-01-19 00:36 218,624 --a------ C:\Windows\System32\wdscore.dll
2008-05-22 17:12 . 2008-01-19 00:36 139,264 --a------ C:\Windows\System32\SmiInstaller.dll
2008-05-22 17:12 . 2008-01-19 00:33 130,560 --a------ C:\Windows\System32\PkgMgr.exe
2008-05-22 17:12 . 2008-01-19 00:35 35,328 --a------ C:\Windows\System32\mspatcha.dll
2008-05-22 17:11 . 2008-01-19 00:34 305,152 --a------ C:\Windows\System32\msdelta.dll
2008-05-19 14:53 . 2008-05-19 14:53 <DIR> d-------- C:\Program Files\Hackety Hack
2008-05-18 23:21 . 2008-05-18 23:21 <DIR> d-------- C:\Users\~Administrator~\AppData\Roaming\ZoomBrowser EX
2008-05-18 21:17 . 2008-05-18 21:17 <DIR> d-------- C:\Users\~Administrator~\AppData\Roaming\Nexon
2008-05-18 21:06 . 2008-05-18 21:06 <DIR> d-------- C:\Users\~Administrator~\AppData\Roaming\Macromedia
2008-05-18 21:06 . 2008-05-18 21:06 <DIR> d-------- C:\Users\~Administrator~\AppData\Roaming\Adobe
2008-05-18 18:07 . 2008-05-18 18:07 671 --a------ C:\Windows\System32\newaddies.xtc
2008-05-18 18:05 . 2008-05-18 18:05 <DIR> d-------- C:\Users\~Administrator~\AppData\Roaming\Roxio
2008-05-18 18:04 . 2008-05-18 18:04 <DIR> d--h----- C:\Users\~Administrator~\AppData\Roaming\GTek
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> dr------- C:\Users\~Administrator~\Videos
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> dr------- C:\Users\~Administrator~\Searches
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> dr------- C:\Users\~Administrator~\Saved Games
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> dr------- C:\Users\~Administrator~\Pictures
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> dr------- C:\Users\~Administrator~\Music
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> dr------- C:\Users\~Administrator~\Links
2008-05-18 18:03 . 2008-05-18 18:04 <DIR> dr------- C:\Users\~Administrator~\Favorites
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> dr------- C:\Users\~Administrator~\Downloads
2008-05-18 18:03 . 2008-05-18 20:58 <DIR> dr------- C:\Users\~Administrator~\Documents
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> dr------- C:\Users\~Administrator~\Desktop
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> dr------- C:\Users\~Administrator~\Contacts
2008-05-18 18:03 . 2008-05-18 18:05 <DIR> d---s---- C:\Users\~Administrator~\AppData\Roaming\Microsoft
2008-05-18 18:03 . 2006-11-02 05:37 <DIR> d-------- C:\Users\~Administrator~\AppData\Roaming\Media Center Programs
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> d-------- C:\Users\~Administrator~\AppData\Roaming\Identities
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> d--h----- C:\Users\~Administrator~\AppData
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> d-------- C:\Users\~Administrator~
2008-05-18 18:03 . 2008-05-29 16:33 786,432 --ahs---- C:\Users\~Administrator~\NTUSER.DAT
2008-05-18 11:19 . 2008-05-18 11:37 <DIR> d-------- C:\Program Files\Eusing Free Registry Cleaner
2008-05-17 21:13 . 2008-05-17 21:17 <DIR> d-------- C:\Program Files\GRETECH
2008-05-17 08:03 . 2008-05-17 08:17 <DIR> d-------- C:\Program Files\Windows Live Safety Center
2008-05-16 07:48 . 2008-05-16 07:54 <DIR> d-------- C:\Program Files\ShellExView
2008-05-16 07:48 . 2008-05-16 07:48 39,424 --a------ C:\Windows\zipinst.exe
2008-05-15 18:33 . 2008-05-15 18:45 <DIR> d-------- C:\Program Files\DVDVideoSoft
2008-05-15 17:29 . 2008-05-15 17:29 <DIR> d-------- C:\DVDVideoSoft
2008-05-15 00:16 . 2008-05-15 00:16 <DIR> d-------- C:\Program Files\Common Files\Control Panels
2008-05-14 23:53 . 2006-09-29 06:56 28,248 -ra------ C:\Windows\System32\AdobePDF.dll
2008-05-13 00:07 . 2008-05-13 00:07 524,288 --ahs---- C:\ntuser.dat{c39279b4-208c-11dd-8355-00e034123456}.TMContainer00000000000000000002.regtrans-ms
2008-05-13 00:07 . 2008-05-13 00:07 524,288 --ahs---- C:\ntuser.dat{c39279b4-208c-11dd-8355-00e034123456}.TMContainer00000000000000000001.regtrans-ms
2008-05-13 00:07 . 2008-05-13 00:07 524,288 --ahs---- C:\ntuser.dat{c39279b0-208c-11dd-8355-00e034123456}.TMContainer00000000000000000002.regtrans-ms
2008-05-13 00:07 . 2008-05-13 00:07 524,288 --ahs---- C:\ntuser.dat{c39279b0-208c-11dd-8355-00e034123456}.TMContainer00000000000000000001.regtrans-ms
2008-05-13 00:07 . 2008-05-17 21:29 262,144 --a------ C:\ntuser.dat
2008-05-13 00:07 . 2008-05-13 00:07 65,536 --ahs---- C:\ntuser.dat{c39279b4-208c-11dd-8355-00e034123456}.TM.blf
2008-05-13 00:07 . 2008-05-13 00:07 65,536 --ahs---- C:\ntuser.dat{c39279b0-208c-11dd-8355-00e034123456}.TM.blf
2008-05-13 00:07 . 2008-05-17 21:29 5,120 --ah----- C:\ntuser.dat.LOG1
2008-05-13 00:07 . 2008-05-13 00:07 0 --ah----- C:\ntuser.dat.LOG2
2008-05-11 17:40 . 2008-05-11 17:40 <DIR> d-------- C:\Program Files\ReflexiveArcade
2008-05-11 15:31 . 2008-05-11 15:31 <DIR> d-------- C:\NVIDIA
2008-05-11 12:59 . 2008-05-11 12:59 <DIR> dr------- C:\Windows\System32\config\systemprofile\Documents
2008-05-11 12:55 . 2007-02-20 16:04 2,463,976 --a------ C:\Windows\System32\NPSWF32.dll
2008-05-11 12:55 . 2007-02-20 16:04 190,696 --a------ C:\Windows\System32\NPSWF32_FlashUtil.exe
2008-05-11 09:19 . 2008-05-11 11:53 <DIR> d-------- C:\Users\Calvin\AppData\Roaming\Download Manager
2008-05-11 00:13 . 2008-05-11 00:14 <DIR> d-------- C:\Users\Calvin\AppData\Roaming\Fun Desktop Wallpaper Changer
2008-05-07 21:32 . 2008-05-07 21:32 107,888 --a------ C:\Windows\System32\CmdLineExt.dll
2008-05-06 22:36 . 2008-05-06 22:36 <DIR> d-------- C:\Users\All Users\FLEXnet
2008-05-06 22:36 . 2008-05-06 22:36 <DIR> d-------- C:\ProgramData\FLEXnet
2008-05-06 20:47 . 2008-05-06 20:47 <DIR> d-------- C:\Program Files\Common Files\Macrovision Shared
2008-05-03 20:59 . 2008-05-03 20:59 <DIR> dr-h----- C:\Users\Calvin\AppData\Roaming\SecuROM
2008-05-03 20:42 . 2008-05-03 20:58 <DIR> d-------- C:\Program Files\EA Sports
2008-04-30 19:10 . 2008-04-30 19:10 <DIR> d-a------ C:\Users\Calvin\AppData\Roaming\Crystal Art Software
2008-04-30 18:56 . 2008-04-30 18:56 <DIR> d-------- C:\Windows\MaxSecureBackup
2008-04-30 18:55 . 2007-05-24 16:57 143,360 --a------ C:\Windows\System32\GetHardDiskNo.dll
2008-04-30 18:55 . 2008-04-30 18:55 63 --a------ C:\Windows\system\SYSRegC.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-29 23:28 --------- d---a-w C:\Users\Calvin\AppData\Roaming\LimeWire
2008-05-29 19:41 --------- d-----w C:\Program Files\McAfee
2008-05-29 05:17 --------- d-----w C:\Program Files\LimeWire
2008-05-28 06:22 --------- d-----w C:\Program Files\Dl_cats
2008-05-25 04:34 --------- d-----w C:\ProgramData\Roxio
2008-05-23 03:26 --------- d-----w C:\ProgramData\NVIDIA
2008-05-23 02:33 174 --sha-w C:\Program Files\desktop.ini
2008-05-23 02:22 --------- d-----w C:\Program Files\Windows Sidebar
2008-05-23 02:22 --------- d-----w C:\Program Files\Windows Photo Gallery
2008-05-23 02:22 --------- d-----w C:\Program Files\Windows Mail
2008-05-23 02:22 --------- d-----w C:\Program Files\Windows Journal
2008-05-23 02:22 --------- d-----w C:\Program Files\Windows Defender
2008-05-23 02:22 --------- d-----w C:\Program Files\Windows Collaboration
2008-05-23 02:22 --------- d-----w C:\Program Files\Windows Calendar
2008-05-23 01:28 82,432 ----a-w C:\Windows\System32\axaltocm.dll
2008-05-23 01:28 101,888 ----a-w C:\Windows\System32\ifxcardm.dll
2008-05-22 23:45 --------- d-----w C:\Program Files\Nexon
2008-05-15 06:45 --------- d-----w C:\Program Files\Common Files\Adobe
2008-05-15 02:01 --------- d-----w C:\ProgramData\Microsoft Help
2008-05-15 01:13 --------- d-----w C:\Program Files\Java
2008-05-14 00:05 --------- d-----w C:\Program Files\SoundSpectrum
2008-05-11 22:31 --------- d-----w C:\Program Files\Common Files\InstallShield
2008-05-11 19:47 --------- d-----w C:\Program Files\Macromedia
2008-05-11 19:47 --------- d-----w C:\Program Files\Common Files\Macromedia
2008-05-02 01:49 --------- d-----w C:\Program Files\Microsoft Silverlight
2008-05-01 02:14 --------- d-----w C:\Program Files\CCleaner
2008-04-30 06:14 --------- d-----w C:\Program Files\Dell DataSafe Online
2008-04-29 05:27 --------- d---a-w C:\Users\Calvin\AppData\Roaming\Astro Gemini Software
2008-04-29 02:54 --------- d-----w C:\Program Files\Windows Live
2008-04-29 02:46 --------- d-----w C:\ProgramData\WLInstaller
2008-04-28 00:17 --------- d-----w C:\Users\Calvin\AppData\Roaming\Hamachi
2008-04-28 00:10 25,280 ----a-w C:\Windows\system32\drivers\hamachi.sys
2008-04-25 12:32 --------- d-----w C:\Program Files\Safari
2008-04-25 12:31 --------- d-----w C:\Program Files\Bonjour
2008-04-25 12:15 --------- d-----w C:\Program Files\Reference Assemblies
2008-04-22 23:22 --------- d-----w C:\Program Files\7-Zip
2008-04-22 07:52 --------- d-----w C:\Program Files\Actual Drawing
2008-04-22 07:48 --------- d---a-w C:\Users\Calvin\AppData\Roaming\Web Page Maker V2
2008-04-22 07:48 --------- d-----w C:\Program Files\Yahoo!
2008-04-22 03:38 --------- d-----w C:\Program Files\Windows Live Toolbar
2008-04-22 03:38 --------- d-----w C:\Program Files\Windows Live Favorites
2008-04-22 03:37 --------- d-----w C:\Program Files\Microsoft SQL Server Compact Edition
2008-04-22 03:20 --------- d-----w C:\Program Files\Apple Software Update
2008-04-20 17:02 --------- d---a-w C:\Users\Calvin\AppData\Roaming\Orbit
2008-04-16 05:57 --------- d-----w C:\Program Files\Cloudbrain
2008-04-16 04:19 --------- d-----w C:\Program Files\Common Files\Macromedia Shared
2008-04-09 03:28 --------- d-----w C:\ProgramData\Yahoo! Companion
2008-04-09 02:57 --------- d-----w C:\ProgramData\PY_Software
2008-04-03 05:31 --------- d-----w C:\Program Files\iTunes
2008-04-03 05:31 --------- d-----w C:\Program Files\iPod
2008-04-03 05:30 --------- d-----w C:\Program Files\QuickTime
2008-03-31 18:06 --------- d-----w C:\ProgramData\Spybot - Search & Destroy
2008-03-31 18:05 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-03-31 16:07 --------- d---a-w C:\Users\Calvin\AppData\Roaming\Apple Computer
2008-03-31 05:01 691,545 ----a-w C:\Windows\unins000.exe
2008-03-09 01:45 21,764 ----a-w C:\Windows\System32\CoreAAC-uninstall.exe
2008-03-08 04:19 540,672 ----a-w C:\Windows\AppPatch\AcLayers.dll
2008-03-08 04:19 458,752 ----a-w C:\Windows\AppPatch\AcSpecfc.dll
2008-03-08 04:19 2,153,984 ----a-w C:\Windows\AppPatch\AcGenral.dll
2008-03-08 04:19 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll
2008-03-08 01:58 2,560 ----a-w C:\Windows\AppPatch\AcRes.dll
2008-02-29 07:14 19,000 ----a-w C:\Windows\System32\kd1394.dll
2008-02-29 07:11 988,216 ----a-w C:\Windows\System32\winload.exe
2008-02-29 07:11 927,288 ----a-w C:\Windows\System32\winresume.exe
2008-02-29 06:53 46,592 ----a-w C:\Windows\System32\setbcdlocale.dll
2008-02-29 06:53 40,960 ----a-w C:\Windows\System32\srclient.dll
2008-02-29 06:53 378,368 ----a-w C:\Windows\System32\srcore.dll
2008-02-29 06:35 6,656 ----a-w C:\Windows\System32\kbd106n.dll
2008-02-29 04:21 2,032,128 ----a-w C:\Windows\System32\win32k.sys
2008-02-29 04:12 318,464 ----a-w C:\Windows\System32\rstrui.exe
2008-02-29 04:12 14,848 ----a-w C:\Windows\System32\srdelayed.exe
2007-11-04 16:32 374 ----a-w C:\Users\Calvin\AppData\Roaming\internaldb6334.dat
2007-11-04 14:50 555 ----a-w C:\Users\Calvin\AppData\Roaming\internaldb8467.dat
2007-11-04 14:50 18,432 ----a-w C:\Users\Calvin\AppData\Roaming\internaldb41.dat
.

------- Sigcheck -------

.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{dbf274fc-a367-638c-10e6-5d1e81ecc508}]
2008-05-26 08:54 364544 --a------ C:\Windows\system32\{23dd81ce-e488-eec4-be5c-ebcffe0a6446}.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DellSupport"="C:\Program Files\DellSupport\DSAgnt.exe" [2007-03-15 10:09 460784]
"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2008-01-19 00:33 125952]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34 5724184]
"DellSupportCenter"="C:\Program Files\Dell Support Center\bin\sprtcmd.exe" [2007-10-09 19:56 202544]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 11:43 2097488]
"Dell DataSafe Scheduler"="C:\Program Files\Dell DataSafe Online\Bin\DataSafeOnlineScheduler.exe" [2007-12-02 17:30 308464]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-19 00:33 1233920]
"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\daemon.exe" [2008-04-01 02:39 486856]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 00:33 202240]
"Host Process"="C:\Users\Calvin\svchost.exe" [ ]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2008-01-19 00:38 1008184]
"RtHDVCpl"="RtHDVCpl.exe" [2008-01-17 07:22 4907008 C:\Windows\RtHDVCpl.exe]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2006-10-03 09:37 81920]
"RoxWatchTray"="C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2006-11-05 09:22 221184]
"dscactivate"="C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" [2007-10-09 19:57 16384]
"ECenter"="c:\dell\E-Center\EULALauncher.exe" [2007-03-16 03:20 17920]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-03-28 23:37 413696]
"dlcqmon.exe"="C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe" [2007-06-29 08:47 292080]
"MemoryCardManager"="C:\Program Files\Dell Photo AIO Printer 966\memcard.exe" [2007-06-29 08:48 304368]
"MskAgentexe"="C:\Program Files\McAfee\MSK\MskAgent.exe" [2007-01-17 18:30 152144]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 10:36 267048]
"Adobe_ID0EYTHM"="C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE" [2007-03-20 16:40 1884160]
"DellSupportCenter"="C:\Program Files\Dell Support Center\bin\sprtcmd.exe" [2007-10-09 19:56 202544]
"NvSvc"="C:\Windows\system32\nvsvc.dll" [2007-09-17 09:07 86016]
"NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-09-17 09:07 8497696]
"NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-09-17 09:07 81920]
"MSServer"="C:\Windows\system32\ljJButRK.dll" [ ]
"{7cea24c7-d3e8-c48b-f141-a11cf8a82b1d}"="C:\Windows\system32\{23dd81ce-e488-eec4-be5c-ebcffe0a6446}.dll" [2008-05-26 08:54 364544]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 11:34 5724184]

C:\Users\Calvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
LimeWire On Startup.lnk - C:\Program Files\LimeWire\LimeWire.exe [2/8/2008 2:41:35 PM 147456]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [4/23/2008 3:38:16 AM 29696]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"RunStartupScriptSync"= 1 (0x1)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"LogonHoursAction"= 2 (0x2)
"DontDisplayLogonHoursWarnings"= 1 (0x1)

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\system]
"LogonHoursAction"= 2 (0x2)
"DontDisplayLogonHoursWarnings"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.IV41"= ir41_32.dll

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Dell DataSafe Scheduler"="C:\Program Files\Dell DataSafe Online\Bin\DataSafeOnlineScheduler.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001
"InternetSettingsDisableNotify"=dword:00000001
"AutoUpdateDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{C40A1CDE-3524-47EB-AB86-D043632CF06D}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{95A5E1FA-64AB-4ADB-AC4D-3DF2E0B735B6}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{9164ED87-D1FE-4206-8496-29DEC6BBB6D0}"= UDP:C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe:McAfee Network Agent
"{204B31F1-64E0-4F04-B55D-73DE3A458B3F}"= UDP:C:\Program Files\LimeWire\LimeWire.exe:LimeWire
"{189B5808-CF71-49AB-94CA-02B985EA3914}"= TCP:C:\Program Files\LimeWire\LimeWire.exe:LimeWire
"TCP Query User{E162012F-98CF-4888-8A39-00328A767F10}C:\\program files\\nexon\\maplestory\\maplestory.exe"= UDP:C:\program files\nexon\maplestory\maplestory.exe:MapleStory
"UDP Query User{2FB30AAD-97FB-4027-8C8D-3FA7FDCF7BFE}C:\\program files\\nexon\\maplestory\\maplestory.exe"= TCP:C:\program files\nexon\maplestory\maplestory.exe:MapleStory
"TCP Query User{A0186F92-7442-4DC0-9CDF-695C1370EE4F}C:\\users\\calvin\\saved games\\nexon\\maplestory.exe"= UDP:C:\users\calvin\saved games\nexon\maplestory.exe:maplestory.exe
"UDP Query User{FCD1575D-BBD4-4794-AD79-F7C3406AE999}C:\\users\\calvin\\saved games\\nexon\\maplestory.exe"= TCP:C:\users\calvin\saved games\nexon\maplestory.exe:maplestory.exe
"TCP Query User{FF2B4B4D-1D13-48E6-8991-58A7FA801092}C:\\users\\calvin\\saved games\\nexon\\maplestory.exe"= UDP:C:\users\calvin\saved games\nexon\maplestory.exe:maplestory.exe
"UDP Query User{0B2E0060-86A4-484A-AB2C-D90157F44379}C:\\users\\calvin\\saved games\\nexon\\maplestory.exe"= TCP:C:\users\calvin\saved games\nexon\maplestory.exe:maplestory.exe
"TCP Query User{4E10DA99-3C04-4667-9F89-F36A44B45368}C:\\users\\calvin\\saved games\\nexon\\patcher.exe"= UDP:C:\users\calvin\saved games\nexon\patcher.exe:patcher.exe
"UDP Query User{79088905-9F9D-4D68-9C4F-512196042A94}C:\\users\\calvin\\saved games\\nexon\\patcher.exe"= TCP:C:\users\calvin\saved games\nexon\patcher.exe:patcher.exe
"TCP Query User{C5CBBF51-2752-40A6-A2C0-DC8A40B3B8F6}C:\\users\\calvin\\saved games\\nexon\\newpatcher.exe"= UDP:C:\users\calvin\saved games\nexon\newpatcher.exe:newpatcher.exe
"UDP Query User{BFE9CE8F-1C04-4B88-8B32-CAD967AF13DA}C:\\users\\calvin\\saved games\\nexon\\newpatcher.exe"= TCP:C:\users\calvin\saved games\nexon\newpatcher.exe:newpatcher.exe
"TCP Query User{4513D3DC-A943-4252-BE51-253D2AEA4C5F}C:\\users\\calvin\\saved games\\nexon\\patcher.exe"= UDP:C:\users\calvin\saved games\nexon\patcher.exe:patcher.exe
"UDP Query User{D4241B12-00EC-4E4D-A39C-7C2807C78F17}C:\\users\\calvin\\saved games\\nexon\\patcher.exe"= TCP:C:\users\calvin\saved games\nexon\patcher.exe:patcher.exe
"TCP Query User{871E1A48-AEBC-4085-BAED-C787EC6E21F1}C:\\users\\calvin\\appdata\\roaming\\u3\\0000187b85732e4e\\0de4f643-c398-46ec-9339-2362f2311932\\exec\\skype.exe"= UDP:C:\users\calvin\appdata\roaming\u3\0000187b85732e4e\0de4f643-c398-46ec-9339-2362f2311932\exec\skype.exe:skype.exe
"UDP Query User{326FF41C-497D-4D03-8513-22EBAC3AC34A}C:\\users\\calvin\\appdata\\roaming\\u3\\0000187b85732e4e\\0de4f643-c398-46ec-9339-2362f2311932\\exec\\skype.exe"= TCP:C:\users\calvin\appdata\roaming\u3\0000187b85732e4e\0de4f643-c398-46ec-9339-2362f2311932\exec\skype.exe:skype.exe
"TCP Query User{37A6A56D-37BC-40E8-9018-8069A4C66930}C:\\program files\\nexon\\maplestory\\maplestory.exe"= UDP:C:\program files\nexon\maplestory\maplestory.exe:MapleStory
"UDP Query User{A5CF2920-5E05-4607-BCEE-DA15A6B8B0A0}C:\\program files\\nexon\\maplestory\\maplestory.exe"= TCP:C:\program files\nexon\maplestory\maplestory.exe:MapleStory
"TCP Query User{82CCA1D9-95CC-4545-8AE2-8C097F9A4A13}C:\\users\\calvin\\appdata\\roaming\\u3\\0000187b85732e4e\\0de4f643-c398-46ec-9339-2362f2311932\\exec\\skype.exe"= UDP:C:\users\calvin\appdata\roaming\u3\0000187b85732e4e\0de4f643-c398-46ec-9339-2362f2311932\exec\skype.exe:skype.exe
"UDP Query User{2DFC44B5-C6FC-4455-9F08-9713F4536A64}C:\\users\\calvin\\appdata\\roaming\\u3\\0000187b85732e4e\\0de4f643-c398-46ec-9339-2362f2311932\\exec\\skype.exe"= TCP:C:\users\calvin\appdata\roaming\u3\0000187b85732e4e\0de4f643-c398-46ec-9339-2362f2311932\exec\skype.exe:skype.exe
"TCP Query User{3FE2B734-5BFA-4A80-84A8-87DC826F8C00}C:\\windows\\explorer.exe"= UDP:C:\windows\explorer.exe:Windows Explorer
"UDP Query User{5FD30CFD-6BAB-4702-9497-098A7B9A67B4}C:\\windows\\explorer.exe"= TCP:C:\windows\explorer.exe:Windows Explorer
"{400D87FB-D104-4A48-8208-178B985E4A11}"= UDP:C:\Windows\System32\rlvknlg.exe:rlvknlg.exe
"{EC8BCD7F-E649-4D37-A950-57E4B152804C}"= TCP:C:\Windows\System32\rlvknlg.exe:rlvknlg.exe
"{ECEF8CF6-AFE4-4A65-A2EF-8691D9A93C3E}"= UDP:C:\ProgramData\NexonUS\NGM\NGM.exe:Nexon Game Manager
"{79C9CF6E-0E9A-41AB-861D-8EAE4CF907B2}"= TCP:C:\ProgramData\NexonUS\NGM\NGM.exe:Nexon Game Manager
"TCP Query User{489E40BC-53D2-44A4-A423-82B499B8D9BB}C:\\nexon\\maplestory\\maplestory.exe"= UDP:C:\nexon\maplestory\maplestory.exe:MapleStory
"UDP Query User{0B733464-F515-4AA6-8220-F374B7E1341C}C:\\nexon\\maplestory\\maplestory.exe"= TCP:C:\nexon\maplestory\maplestory.exe:MapleStory
"TCP Query User{80CCF7DE-E26B-40A8-836A-638BA1A87700}C:\\nexon\\maplestory\\maplestory.exe"= UDP:C:\nexon\maplestory\maplestory.exe:MapleStory
"UDP Query User{71B875FE-9E27-418C-A965-496F8303828E}C:\\nexon\\maplestory\\maplestory.exe"= TCP:C:\nexon\maplestory\maplestory.exe:MapleStory
"TCP Query User{D3C1ECFA-5DAD-42A3-8DAA-1896FE6B3BEA}C:\\program files\\limewire\\limewire.exe"= UDP:C:\program files\limewire\limewire.exe:LimeWire
"UDP Query User{E2A310D1-7EB4-4C86-94ED-A1764FE80CA3}C:\\program files\\limewire\\limewire.exe"= TCP:C:\program files\limewire\limewire.exe:LimeWire
"{24BECBA1-8C8C-4B02-9916-4EEB02766C48}"= UDP:C:\Program Files\iTunes\iTunes.exe:iTunes
"{39FBCFD1-2DF2-4251-AF7F-3C3685B06BB7}"= TCP:C:\Program Files\iTunes\iTunes.exe:iTunes
"TCP Query User{34A08745-C53B-4350-BBF6-B3E8C45B0762}C:\\program files\\bitlord2\\bitlord.exe"= UDP:C:\program files\bitlord2\bitlord.exe:
"UDP Query User{4FA8BA5C-B3B3-4BB2-B2CE-DAED6CF66DFD}C:\\program files\\bitlord2\\bitlord.exe"= TCP:C:\program files\bitlord2\bitlord.exe:
"TCP Query User{A3D3605E-AF3F-46B9-9FDE-230A280E9BFF}C:\\program files\\bitlord\\bitlord.exe"= UDP:C:\program files\bitlord\bitlord.exe:BitLord
"UDP Query User{9C1B00E3-FA2A-420B-84D1-86DAE89A54E6}C:\\program files\\bitlord\\bitlord.exe"= TCP:C:\program files\bitlord\bitlord.exe:BitLord
"{341CEB89-AAA7-452B-A8EB-87FBD4C00165}"= UDP:C:\ProgramData\NexonUS\NGM\NGM.exe:Nexon Game Manager
"{C4613266-71ED-4679-8A58-AB4071F27743}"= TCP:C:\ProgramData\NexonUS\NGM\NGM.exe:Nexon Game Manager
"{2F9D8050-BF84-4A47-B80A-5A51F24B62A2}"= UDP:C:\Nexon\KartRider\KartRider.exe:KartRider
"{6CEB6678-3F6B-49DA-A194-2CAD4CC4998E}"= TCP:C:\Nexon\KartRider\KartRider.exe:KartRider
"{CB551BCF-FF61-435D-A80D-803693620C35}"= UDP:C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe:Device Monitor
"{BBD75391-A0DC-47C2-9821-47E61C7E212E}"= TCP:C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe:Device Monitor
"{0AA4CB1A-C026-4777-AB0D-26B0E8C4F83E}"= UDP:C:\Program Files\Dell Photo AIO Printer 966\DLCQaiox.exe:All In One Center
"{F12EB92A-1930-47BF-A3FD-728C657F1501}"= TCP:C:\Program Files\Dell Photo AIO Printer 966\DLCQaiox.exe:All In One Center
"{D4C3A691-D7F9-44A7-8EFD-B572AA6E55BD}"= UDP:C:\Program Files\Dell Photo AIO Printer 966\memcard.exe:Memory Card Manager
"{E91FAA2D-12B0-43F8-B2DC-D06E76678598}"= TCP:C:\Program Files\Dell Photo AIO Printer 966\memcard.exe:Memory Card Manager
"{916FABEE-914F-4826-B5B6-1F8593C95026}"= UDP:C:\Windows\System32\dlcqcoms.exe:Dell Communications System
"{52987BB2-9EE3-490F-905B-6245E9C27E94}"= TCP:C:\Windows\System32\dlcqcoms.exe:Dell Communications System
"TCP Query User{2403A6DE-64D6-49C2-80EE-2D943E9CF91F}C:\\program files\\nexon\\maplestory\\gglessv51.exe"= UDP:C:\program files\nexon\maplestory\gglessv51.exe:MapleStory
"UDP Query User{D758F7CB-2751-4782-913A-F24C56E7ABD7}C:\\program files\\nexon\\maplestory\\gglessv51.exe"= TCP:C:\program files\nexon\maplestory\gglessv51.exe:MapleStory
"{5FE6955F-A5A9-4AAC-B7F5-7417FD787A4D}"= UDP:C:\Windows\System32\dlcqcoms.exe:Dell Communications System
"{A5A26F7F-557D-4D8C-8F09-CCA1084FC6D8}"= TCP:C:\Windows\System32\dlcqcoms.exe:Dell Communications System
"{8DB4D979-8B52-45D7-9B71-D00095952AF3}"= UDP:C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe:Device Monitor
"{CD5E6279-511E-4EFF-A1DD-C2ABE970394B}"= TCP:C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe:Device Monitor
"{57D1B8F0-DC42-498A-AF6A-D23054A5340E}"= UDP:C:\Program Files\Dell Photo AIO Printer 966\DLCQaiox.exe:All In One Center
"{28A1A368-8650-4792-9A26-66373E947820}"= TCP:C:\Program Files\Dell Photo AIO Printer 966\DLCQaiox.exe:All In One Center
"{A64B97B6-82CE-4781-B074-0FCDB62DEF67}"= UDP:C:\Program Files\Dell Photo AIO Printer 966\memcard.exe:Memory Card Manager
"{7933A23F-CCC4-43AC-8854-891062504CD7}"= TCP:C:\Program Files\Dell Photo AIO Printer 966\memcard.exe:Memory Card Manager
"TCP Query User{3094D4F0-4A74-43D8-ADF8-385FDCA2125F}C:\\program files\\mozilla firefox\\firefox.exe"= UDP:C:\program files\mozilla firefox\firefox.exe:Firefox
"UDP Query User{60FEC39C-576F-4CDB-8894-596E013E17D4}C:\\program files\\mozilla firefox\\firefox.exe"= TCP:C:\program files\mozilla firefox\firefox.exe:Firefox
"{D04AA1E0-2354-47A4-B03E-34F8302D4128}"= UDP:C:\Program Files\Grisoft\AVG7\avgcc.exe:AVG Control Center
"{DC2D4B90-FE0D-4508-B2AD-7FCD89315EB7}"= TCP:C:\Program Files\Grisoft\AVG7\avgcc.exe:AVG Control Center
"{60ED4348-1C81-48CC-86E6-9E278D53F6AE}"= UDP:C:\Program Files\Grisoft\AVG7\avgw.exe:AVG Test Center
"{CE4889C6-655B-41E5-9634-A9D4F1D861DF}"= TCP:C:\Program Files\Grisoft\AVG7\avgw.exe:AVG Test Center
"{E7093309-45D0-4BDF-AB60-345CD913DD04}"= UDP:C:\Program Files\Grisoft\AVG7\avgvv.exe:AVG Virus Vault
"{08FA98A6-AD7B-4967-8CC5-1725C7A60C25}"= TCP:C:\Program Files\Grisoft\AVG7\avgvv.exe:AVG Virus Vault
"{77A37B42-5889-4A26-9C5B-D8495F8BB946}"= UDP:C:\Program Files\Avast4\ashAvast.exe:avast! Antivirus
"{3E72381B-CED5-431E-803F-43BB4EC16E40}"= TCP:C:\Program Files\Avast4\ashAvast.exe:avast! Antivirus
"{F493B459-7CCA-4DDD-9A94-BD312D30BA98}"= UDP:C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe:McAfee Network Agent
"{55C74632-22F9-4705-AB7B-2B112956FA2B}"= TCP:C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe:McAfee Network Agent
"{ED28BE93-1FAA-4D8C-A7D1-0257C567F0DD}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"TCP Query User{305C2301-1CC4-4397-93CE-DC6BDF9963D5}C:\\program files\\nexon\\maplestory\\ggless52.exe"= UDP:C:\program files\nexon\maplestory\ggless52.exe:MapleStory
"UDP Query User{308608BB-9CB5-4086-B67C-C9BC9AAEB86F}C:\\program files\\nexon\\maplestory\\ggless52.exe"= TCP:C:\program files\nexon\maplestory\ggless52.exe:MapleStory
"{D2745287-EEDB-4836-AA2F-CCBE52746944}"= UDP:C:\Program Files\iTunes\iTunes.exe:iTunes
"{9242175C-A073-468A-959F-1A20FD1F204E}"= TCP:C:\Program Files\iTunes\iTunes.exe:iTunes
"TCP Query User{435E572C-6B71-4895-AF14-A2319EA2A03C}C:\\program files\\orbitdownloader\\orbitnet.exe"= UDP:C:\program files\orbitdownloader\orbitnet.exe:P2P service of Orbit Downloader
"UDP Query User{E37796CC-BDBE-4B98-BA19-7623E2E52319}C:\\program files\\orbitdownloader\\orbitnet.exe"= TCP:C:\program files\orbitdownloader\orbitnet.exe:P2P service of Orbit Downloader
"{CAE85B28-FC9A-4AC2-860E-99EFB98BEC6B}"= UDP:C:\Program Files\Bonjour\mDNSResponder.exe:Bonjour
"{07C4E20F-9055-41F6-99B7-62625B4681FC}"= TCP:C:\Program Files\Bonjour\mDNSResponder.exe:Bonjour
"{625BF72C-6185-4D8F-B800-F26772BBEA96}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"TCP Query User{D8802660-2B38-4762-B31B-C502D67C1A4D}C:\\program files\\ea sports\\nhl08\\nhl2008.exe"= UDP:C:\program files\ea sports\nhl08\nhl2008.exe:nhl2008
"UDP Query User{1C0EF8FA-9327-4934-A9CF-0A6C401F6D9B}C:\\program files\\ea sports\\nhl08\\nhl2008.exe"= TCP:C:\program files\ea sports\nhl08\nhl2008.exe:nhl2008
"{BB93A364-29CE-4471-8A8D-0427EE503372}"= UDP:C:\Program Files\EA Sports\EA SPORTS online\SportsWrapper.exe:SportsWrapper
"{0E00767A-9216-4BA8-B36B-F552C1591F1B}"= TCP:C:\Program Files\EA Sports\EA SPORTS online\SportsWrapper.exe:SportsWrapper
"{7FDCC7F9-7C63-4F32-A0FD-967282029470}"= UDP:3703:Adobe Version Cue CS3 Server
"{A54138F7-585B-45C2-B398-2708C437E641}"= UDP:3704:Adobe Version Cue CS3 Server
"{88F3E162-3910-4B5C-81C9-26A4EF828D5F}"= UDP:50900:Adobe Version Cue CS3 Server
"{CF41B43C-48BF-45B6-A844-345E7BD558F2}"= UDP:50901:Adobe Version Cue CS3 Server
"{E9035596-E03B-4100-8521-8ACD9A3F79FD}"= UDP:C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe:Adobe Version Cue CS3 Server
"{940BD430-EBCF-4C4B-83D7-C7AF61054A01}"= TCP:C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe:Adobe Version Cue CS3 Server
"TCP Query User{56B436A0-8D6B-47B1-A43B-8253FFB3D7B4}C:\\program files\\safari\\safari.exe"= UDP:C:\program files\safari\safari.exe:Safari Web Browser
"UDP Query User{DE366E98-DB01-4FF2-AEF9-DE26FDD6F8D5}C:\\program files\\safari\\safari.exe"= TCP:C:\program files\safari\safari.exe:Safari Web Browser

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"DoNotAllowExceptions"= 0 (0x0)

R1 DLARTL_M;DLARTL_M;C:\Windows\system32\Drivers\DLARTL_M.SYS [2007-02-08 20:05]
R2 AERTFilters;Andrea RT Filters Service;C:\Windows\system32\AERTSrv.exe [2007-12-05 06:17]
R2 dlcq_device;dlcq_device;C:\Windows\system32\dlcqcoms.exe [2006-12-12 01:22]
R2 SBSDWSCService;SBSD Security Center Service;C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2008-01-28 11:43]
R2 sprtsvc_dellsupportcenter;SupportSoft Sprocket Service (dellsupportcenter);C:\Program Files\Dell Support Center\bin\sprtsvc.exe [2007-10-09 19:56]
S2 0312461212090095mcinstcleanup;McAfee Application Installer Cleanup (0312461212090095);C:\Windows\TEMP\031246~1.EXE C:\PROGRA~1\COMMON~1\McAfee\INSTAL~1\cleanup.ini []
S3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver;C:\Windows\system32\DRIVERS\bcmwl6.sys [2006-11-02 00:30]
S3 NAL;Nal Service ;C:\Windows\system32\Drivers\iqvw32.sys [2007-03-09 15:04]
S3 R300;R300;C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-02 00:36]
S3 tapvpn;TAP VPN Adapter;C:\Windows\system32\DRIVERS\tapvpn.sys [2008-03-12 19:38]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\K]
\shell\AutoRun\command - K:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{214b9213-29c4-11dd-b075-00e034123456}]
\shell\AutoRun\command - K:\Autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3d670c13-8f53-11dc-bc1e-001aa090d113}]
\shell\AutoRun\command - K:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{68df2eb4-5b9f-11dc-aed8-806e6f6e6963}]
\shell\AutoRun\command - F:\Autorun.exe

.
Contents of the 'Scheduled Tasks' folder
"2008-05-15 12:56:06 C:\Windows\Tasks\McDefragTask.job"
- c:\program files\mcafee\mqc\QcConsol.exe
"2008-03-03 16:25:30 C:\Windows\Tasks\McQcTask.job"
- c:\program files\mcafee\mqc\QcConsol.exe
"2008-05-27 03:00:00 C:\Windows\Tasks\Norton Internet Security - Run Full System Scan - Calvin.job"
- C:\Program Files\Norton Internet Security\Norton AntiVirus\Navw32.exeB/TASK:
"2008-05-29 23:40:00 C:\Windows\Tasks\User_Feed_Synchronization-{0FC40BB8-6DE1-4C3A-BFFC-6DC12BF1D332}.job"
- C:\Windows\system32\msfeedssync.exe
"2008-05-29 23:39:59 C:\Windows\Tasks\User_Feed_Synchronization-{893D5EE2-FA10-4615-B039-239B29105AB9}.job"
- C:\Windows\system32\msfeedssync.exe
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-29 16:37:19
Windows 6.0.6001 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...


**************************************************************************
.
Completion time: 2008-05-29 16:41:08
ComboFix-quarantined-files.txt 2008-05-29 23:40:04
ComboFix2.txt 2008-05-14 00:47:57
ComboFix3.txt 2008-05-13 01:49:51
ComboFix4.txt 2008-04-26 15:23:27
ComboFix5.txt 2008-04-25 12:16:47

Pre-Run: 337,587,937,280 bytes free
Post-Run: 337,599,475,712 bytes free

413 --- E O F --- 2008-05-28 02:47:11

[Gecko]

[cc481613]

Since the log was too large for me to post into the message, I removed the middle, which I was pretty sure didn't make a real impact on the log. In the end, it was 572312 characters long! It took me 2 hours to complete the whole scan... Any way, I removed the middle part of the deletions in folder <C:\Users\Calvin\!\>, because it had over 2000 entries. The section I removed is indicated by a '...' sign. Hopefully, it didn't make a difference on how the log can be read!

ComboFix 08-05-29.1 - Calvin 2008-05-30 6:41:10.9 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.1944 [GMT -7:00]
Running from: C:\Users\Calvin\Desktop\ComboFix.exe
Command switches used :: C:\Users\Calvin\Desktop\CFScript.txt
* Created a new restore point
* Resident AV is active


FILE ::
C:\Users\Calvin\995.bat
C:\Windows\System32\{23dd81ce-e488-eec4-be5c-ebcffe0a6446}.dll
C:\yo.lnk
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Users\Calvin\!
C:\Users\Calvin\!\'stay out all night'.wma
C:\Users\Calvin\!\-cherish_ft._yung_joc-killa.wma
C:\Users\Calvin\!\-Sunshine.wma
C:\Users\Calvin\!\(Seasons Riddim) Sean Paul- Memories.wma
C:\Users\Calvin\!\(yamad boy) 10Yo Undress His Friend 13Yo Suck And.wma
C:\Users\Calvin\!\@amivest.com.wma
C:\Users\Calvin\!\@cigna.com.wma
C:\Users\Calvin\!\@firstnewengland.com.wma
C:\Users\Calvin\!\@fnegroup.com.wma
C:\Users\Calvin\!\[anabolic]the gang bang girl #22[full].wma
C:\Users\Calvin\!\[DivX-ITA] Il Divo.wma
C:\Users\Calvin\!\[DivX-ITA] The Snatch.wma
C:\Users\Calvin\!\[Divx - ITA - DVDRip] moulin rouge.wma
C:\Users\Calvin\!\[Divx - ITA ] Moulin Rouge.wma
C:\Users\Calvin\!\[sharethefiles.com].wma
C:\Users\Calvin\!\œmieszne.wma
C:\Users\Calvin\!\000 b c.wma
C:\Users\Calvin\!\000 B.C..wma
C:\Users\Calvin\!\000 Plays And Views 4..wma
C:\Users\Calvin\!\000.wma
C:\Users\Calvin\!\00002qxkxcr jpg.wma
C:\Users\Calvin\!\0004728 jpg.wma
C:\Users\Calvin\!\001 aaron carter.wma
C:\Users\Calvin\!\01 duffy mercy new mp 3.wma
C:\Users\Calvin\!\01 michael buble thats how it.wma
C:\Users\Calvin\!\01 thomas godoj love is you mp 3.wma
C:\Users\Calvin\!\01 Track 1.wma
C:\Users\Calvin\!\014a lsfan.wma
C:\Users\Calvin\!\02 Equinox of the Gods.wma
C:\Users\Calvin\!\02 Restless and Wild.wma
C:\Users\Calvin\!\02 Strani Amori.m4a.wma
C:\Users\Calvin\!\02 Track 2.wma
C:\Users\Calvin\!\02 va mellomania.wma
C:\Users\Calvin\!\0211-0110-8.wma
C:\Users\Calvin\!\03 t i superstar.wma
C:\Users\Calvin\!\03 Track 3.wma
C:\Users\Calvin\!\03 Until The Hellhounds Sleep Again.wma
C:\Users\Calvin\!\0311-0086-9.wma
C:\Users\Calvin\!\04 - All Of A Sudden.wma
C:\Users\Calvin\!\04 Communication Breakdown.wma
C:\Users\Calvin\!\04 fur dich.wma
C:\Users\Calvin\!\04 James Bond 007.wma
C:\Users\Calvin\!\04 till it happens to you.wma
C:\Users\Calvin\!\04 Will They Come.wma
C:\Users\Calvin\!\05 - It's A New Day.wma
C:\Users\Calvin\!\05 Elvis Presley - In Concert 1977.wma
C:\Users\Calvin\!\05 jay sean maybe.wma
C:\Users\Calvin\!\05 Track 5.wma
C:\Users\Calvin\!\05. Snow Patrol - Dazoo At Night Remix 2008.wma
C:\Users\Calvin\!\0540-0122-0.wma
C:\Users\Calvin\!\06 neil diamond forgotten.wma
C:\Users\Calvin\!\06 Summertime is Gone.wma
C:\Users\Calvin\!\06 Track 6.wma
C:\Users\Calvin\!\0620-0008-0.wma
C:\Users\Calvin\!\0630-0002-1.wma
C:\Users\Calvin\!\0631-0751-3.wma
C:\Users\Calvin\!\06until when.wma
C:\Users\Calvin\!\07 - Get It Together.wma
C:\Users\Calvin\!\07 dime lo.wma
C:\Users\Calvin\!\07 Katarraktis Apo Aima.wma
C:\Users\Calvin\!\07 The Concert.wma
C:\Users\Calvin\!\07 Track 7.wma
C:\Users\Calvin\!\09 4 the 1.wma
C:\Users\Calvin\!\09 Misantropolis.wma
C:\Users\Calvin\!\09 neil diamond no.wma
C:\Users\Calvin\!\0908 avi mst3k of satan the touch.wma
C:\Users\Calvin\!\1-800-554-8969.wma
C:\Users\Calvin\!\1 39454 514087.wma
C:\Users\Calvin\!\1 against 5 hmm.wma
C:\Users\Calvin\!\1 churchill place.wma
C:\Users\Calvin\!\1 gen little boy 10 yo mpg.wma
C:\Users\Calvin\!\1 Master cedar.wma
C:\Users\Calvin\!\1 stop the travel network.wma
C:\Users\Calvin\!\1.fc köln.wma
C:\Users\Calvin\!\1.wma
C:\Users\Calvin\!\10 - Gimme Shelter.wma
C:\Users\Calvin\!\10 12 69.wma
C:\Users\Calvin\!\10 Rihanna Good Girl.wma
C:\Users\Calvin\!\10 UNCOMMON VALUES.wma
C:\Users\Calvin\!\10 years.wma
C:\Users\Calvin\!\10.wma
C:\Users\Calvin\!\10000 A.C (ita).wma
C:\Users\Calvin\!\10000 BC.wma
C:\Users\Calvin\!\10000.BC.2008.MD.DVDSCR.XviD-DeLuXe.wma
C:\Users\Calvin\!\1021-8928-5.wma
C:\Users\Calvin\!\11-29-06.pdf 10 Canada.wma
C:\Users\Calvin\!\11 12 13.wma
C:\Users\Calvin\!\11 14 lektor.wma
C:\Users\Calvin\!\11 Meliae.wma
C:\Users\Calvin\!\12 - i'm in love again.wma
C:\Users\Calvin\!\12 ³ez wiœniewska.wma
C:\Users\Calvin\!\12 Stones Lie To Me.wma
C:\Users\Calvin\!\12 Via Dolorosa.wma
C:\Users\Calvin\!\1221-8707-6.wma
C:\Users\Calvin\!\1222- 8717-0.wma
C:\Users\Calvin\!\13-chuck_brown.wma
C:\Users\Calvin\!\13 - summer side of life.wma
C:\Users\Calvin\!\13 Circles.wma
C:\Users\Calvin\!\13 jahre.wma
C:\Users\Calvin\!\13 yung la stupid.wma
C:\Users\Calvin\!\13. BITWA.wma
C:\Users\Calvin\!\13yo avi christina teen webcam.wma
C:\Users\Calvin\!\13yo boy girl fuck.wma
C:\Users\Calvin\!\14 djtinmanhhh babyboi come.wma
C:\Users\Calvin\!\14cunt.jpg.wma
C:\Users\Calvin\!\15 gucci mane feat.wma
C:\Users\Calvin\!\15 Minutes.wma
C:\Users\Calvin\!\15 Thirst Snake.wma
C:\Users\Calvin\!\15 years.wma
C:\Users\Calvin\!\16 AT WAR.wma
C:\Users\Calvin\!\16 drop (low.wma
C:\Users\Calvin\!\16 going on 17.wma
C:\Users\Calvin\!\16 love in this club usher.wma
C:\Users\Calvin\!\16yo samantha stripping down.wma
C:\Users\Calvin\!\17-04-07.wma
C:\Users\Calvin\!\17à21 avi cd5 fois il la une vie était.wma
C:\Users\Calvin\!\18 禁 ゲーム.wma
C:\Users\Calvin\!\18 禁 アニメ.wma
C:\Users\Calvin\!\18 year old xxx.wma
C:\Users\Calvin\!\18 young deep throat.wma
C:\Users\Calvin\!\18005548969.wma
C:\Users\Calvin\!\18yearsold.com.wma
C:\Users\Calvin\!\19 city of swang.wma
C:\Users\Calvin\!\1953 amours avi delices et fr golf jerry lewis.wma
C:\Users\Calvin\!\1979 rob thomas.wma
C:\Users\Calvin\!\1981 avi beineix cd2 diva divx jacques jean.wma
C:\Users\Calvin\!\1996 avi monday nitro wcw.wma
C:\Users\Calvin\!\1a and hanna jackie wmv.wma
C:\Users\Calvin\!\1albert hammond down by river.wma
C:\Users\Calvin\!\2 days in paris.wma
C:\Users\Calvin\!\2 Pistols ft T Pain.wma
C:\Users\Calvin\!\2 Pistols ft. T-Pain - She Got It.wma
C:\Users\Calvin\!\2 PistolsShe Got It.wma
C:\Users\Calvin\!\2 too many boys.wma
C:\Users\Calvin\!\2 Young Boys Gay.wma
C:\Users\Calvin\!\20 all time greatest hits.wma
C:\Users\Calvin\!\2003 avi dvd film fr horreur nouveaute soulkeeper.wma
C:\Users\Calvin\!\2003 best.wma
C:\Users\Calvin\!\2003 greatest hits lonestar rar us.wma
C:\Users\Calvin\!\2004 auto jpg paris salon.wma
C:\Users\Calvin\!\2004 deluxe iso money ms.wma
C:\Users\Calvin\!\2004 fleret pumkanonem.wma
C:\Users\Calvin\!\2005 2cd 613u euro express rar sc va.wma
C:\Users\Calvin\!\2006 cd delain lucidity.wma
C:\Users\Calvin\!\2006 karneval megamix studio.wma
C:\Users\Calvin\!\2006 woman.wma
C:\Users\Calvin\!\2006 xxx.wma
C:\Users\Calvin\!\2007 -ita.wma
C:\Users\Calvin\!\2007 映画.wma
C:\Users\Calvin\!\2007 2cd 728u euro express rar sc va.wma
C:\Users\Calvin\!\2007 avi dvdrip em org peerweb shoot up wide xvid.wma
C:\Users\Calvin\!\2007 avi dvdrip m14ch0 they wait xvid.wma
C:\Users\Calvin\!\2007 avi dvdrip rec xvid.wma
C:\Users\Calvin\!\2007 bartz days live richard sputnik turntable.wma
C:\Users\Calvin\!\2008 映画.wma
C:\Users\Calvin\!\2008 advisors choicepoint.wma
C:\Users\Calvin\!\2008 avi cleaner dvdrip.wma
C:\Users\Calvin\!\2008 avi dance sexy.wma
C:\Users\Calvin\!\2008 avi dvdrip eng hill hq mvs one s05e13 tree.wma
C:\Users\Calvin\!\2008 avi dvdrip mad money rus.wma
C:\Users\Calvin\!\2008 commercial.wma
C:\Users\Calvin\!\2008 crack football manager pc.wma
C:\Users\Calvin\!\2008 dvd eng.wma
C:\Users\Calvin\!\2008 eurovision russia.wma
C:\Users\Calvin\!\2008 iso routenplaner.wma
C:\Users\Calvin\!\2008 new movies.wma
C:\Users\Calvin\!\2008 Slow Songs.wma
C:\Users\Calvin\!\2008 sub nl.wma
C:\Users\Calvin\!\2008 tmd.wma
C:\Users\Calvin\!\2008 yeni.wma
C:\Users\Calvin\!\21 deutsch.wma
C:\Users\Calvin\!\21 questions.wma
C:\Users\Calvin\!\21 sextury.wma
C:\Users\Calvin\!\21 soundtrack.wma
C:\Users\Calvin\!\213 snoop.wma
C:\Users\Calvin\!\213 the hard way instrumental.wma
C:\Users\Calvin\!\21529ae2 kat tun 赤西仁 care.wma
C:\Users\Calvin\!\21st a dj god is pink.wma
C:\Users\Calvin\!\230507 ana bangbus bing carmella victoria wmv.wma
C:\Users\Calvin\!\24 uur verliefd.wma
C:\Users\Calvin\!\27 Dresses.wma
C:\Users\Calvin\!\27 sukien.wma
C:\Users\Calvin\!\27th ave.wma
C:\Users\Calvin\!\28 days later.wma
C:\Users\Calvin\!\2nd ccnp certification cisco cit exam guide press.wma
C:\Users\Calvin\!\2pac biggy smalls running.wma
C:\Users\Calvin\!\2pac this life i lead.wma
C:\Users\Calvin\!\2pac to live die in la.wma
C:\Users\Calvin\!\2raumwohnung.wma
C:\Users\Calvin\!\2x11 all family in man mpg street the.wma
C:\Users\Calvin\!\2x11 avi bones l épouvantail.wma
C:\Users\Calvin\!\3 月 9 日.wma
C:\Users\Calvin\!\3 days grace.wma
C:\Users\Calvin\!\3 deep mixtape.wma
C:\Users\Calvin\!\3 DOORS DOWN Kryptonite.wma
C:\Users\Calvin\!\3 Lil' Wayne - Lolipop Dirty.wma
C:\Users\Calvin\!\3 miracle.wma
C:\Users\Calvin\!\3 Ninjas.wma
C:\Users\Calvin\!\3.Men.and.a.Baby.1987.PL.wma
C:\Users\Calvin\!\30 mars attack.wma
C:\Users\Calvin\!\30 rock season 2.wma
C:\Users\Calvin\!\30 second to mars.wma
C:\Users\Calvin\!\30 Something.wma
C:\Users\Calvin\!\300 soundtrack.wma
C:\Users\Calvin\!\300 spartan.wma
C:\Users\Calvin\!\31 records.wma
C:\Users\Calvin\!\311 You Wouldn't Believe.wma
C:\Users\Calvin\!\355 COHF Skating.wma
C:\Users\Calvin\!\39 i pol.wma
C:\Users\Calvin\!\39454 GT448.wma
C:\Users\Calvin\!\39636 Gary.wma
C:\Users\Calvin\!\übers meer.wma
C:\Users\Calvin\!\3gp converter.wma
C:\Users\Calvin\!\3gp francesca mms spompina video.wma
C:\Users\Calvin\!\3gp fuck mms sex.wma
C:\Users\Calvin\!\3lw feelin you.wma
C:\Users\Calvin\!\3x17 avi das family guy schwalbennest.wma
C:\Users\Calvin\!\4 letter word.wma
C:\Users\Calvin\!\4 minutes madonna.wma
C:\Users\Calvin\!\4 minutes to live.wma
C:\Users\Calvin\!\4 minutes.wma
C:\Users\Calvin\!\4 Rise of the Silver Surfer.wma
C:\Users\Calvin\!\4 strings take me away mix.wma
C:\Users\Calvin\!\40 greatest metal.wma
C:\Users\Calvin\!\4yo girl.wma
C:\Users\Calvin\!\5 in morning pretty ricky.wma
C:\Users\Calvin\!\50 cent- if i cant do it.wma
C:\Users\Calvin\!\50 Cent Amusement Park.wma
C:\Users\Calvin\!\50 cent.wma
C:\Users\Calvin\!\5000 Ones.wma
C:\Users\Calvin\!\50s rock n roll.wma
C:\Users\Calvin\!\54 lombard street.wma
C:\Users\Calvin\!\5x05 avi deed good no reba.wma
C:\Users\Calvin\!\6 cold day in sun.wma
C:\Users\Calvin\!\6151 chevy chase.wma
C:\Users\Calvin\!\666-bomba.wma
C:\Users\Calvin\!\6Cyclemind.wma
C:\Users\Calvin\!\6x02 avi combat du gilmore girls le masque.wma
C:\Users\Calvin\!\7 things i hate about you.wma
C:\Users\Calvin\!\7 year bitch.wma
C:\Users\Calvin\!\702 where girls my at.wma
C:\Users\Calvin\!\70s 80s slow jams earth wind.wma
C:\Users\Calvin\!\70s diana ross im comin out.wma
C:\Users\Calvin\!\70s disco.wma
C:\Users\Calvin\!\70s porn.wma
C:\Users\Calvin\!\75 BRAZIL STREET.wma
C:\Users\Calvin\!\7501 wisconsin.wma
C:\Users\Calvin\!\7926 jones branch.wma
C:\Users\Calvin\!\7yo avi black dreams g girl hard little pthc.wma
C:\Users\Calvin\!\8 second ride.wma
C:\Users\Calvin\!\800-987-bank rape.wma
C:\Users\Calvin\!\800-987-bank.wma
C:\Users\Calvin\!\80s country kenny rogers.wma
C:\Users\Calvin\!\80s it must have been love top.wma
C:\Users\Calvin\!\84753lady full hi.wma
C:\Users\Calvin\!\928-783-8881.wma
C:\Users\Calvin\!\98 cherish you do i.wma
C:\Users\Calvin\!\98 hardest thing the.wma
C:\Users\Calvin\!\A-lusion – Just Ask.wma
C:\Users\Calvin\!\A-Town Legend-pastor troy.wma
C:\Users\Calvin\!\A adiafa cooperativa da mula.wma
C:\Users\Calvin\!\A amarcout avi bussola by dourada legptbr.wma
C:\Users\Calvin\!\A avi b desire named trans.wma
C:\Users\Calvin\!\A avi dvdrip eng light shine.wma
C:\Users\Calvin\!\A avi dvdrip light shine.wma
C:\Users\Calvin\!\A cause des garcon yelle.wma
C:\Users\Calvin\!\A chance to love.wma
C:\Users\Calvin\!\A cinderella story soundtrack.wma
C:\Users\Calvin\!\A day in paradise.wma
C:\Users\Calvin\!\A dream is a wish your heart makes.wma
C:\Users\Calvin\!\A Good Year - cd1.wma
C:\Users\Calvin\!\A KTO TU JEST SZCZÊŒLIWY NA TEJ UKRAINIE.wma
C:\Users\Calvin\!\A la concierge services.wma
C:\Users\Calvin\!\A Limitid Time.wma
C:\Users\Calvin\!\A mainframe.wma
C:\Users\Calvin\!\A millie.wma
C:\Users\Calvin\!\A state of trance 3.wma
C:\Users\Calvin\!\A teraz ³apy w góre.wma
C:\Users\Calvin\!\A thin line between lovehate.wma
C:\Users\Calvin\!\A Tribe Called Quest.wma
C:\Users\Calvin\!\A. Paul Math.wma
C:\Users\Calvin\!\A. Paul Offline.wma
C:\Users\Calvin\!\A. Paul Underlying.wma
C:\Users\Calvin\!\A. systems Resource.wma
C:\Users\Calvin\!\A1-vorwerk.wma
C:\Users\Calvin\!\A108109xy9 devil.wma
C:\Users\Calvin\!\A108109xy9.wma
C:\Users\Calvin\!\Aab sang.wma
C:\Users\Calvin\!\Aab slagsang.wma
C:\Users\Calvin\!\AAIssues.wma
C:\Users\Calvin\!\Aaron A. Walton.wma
C:\Users\Calvin\!\Aaron beautiful scar.wma
C:\Users\Calvin\!\Aaron carter nude.wma
C:\Users\Calvin\!\Aaron neville in your eyes.wma
C:\Users\Calvin\!\Aaron tippin honky tonk.wma
C:\Users\Calvin\!\ABBAThe Day Before You Came.wma
C:\Users\Calvin\!\Abbey brooks.wma
C:\Users\Calvin\!\Abc consultants.wma
C:\Users\Calvin\!\Abc family.wma
C:\Users\Calvin\!\Abi consulting.wma
C:\Users\Calvin\!\Able Woolwich.wma
C:\Users\Calvin\!\Abn amro.wma
C:\Users\Calvin\!\About girl nirvana mtv in new.wma
C:\Users\Calvin\!\About me sweet.wma
C:\Users\Calvin\!\Abs invest.wma
C:\Users\Calvin\!\Ac black dc back in.wma
C:\Users\Calvin\!\Ac milan.wma
C:\Users\Calvin\!\Aca lukas 2008.wma
C:\Users\Calvin\!\Academy at canyon creek.wma
C:\Users\Calvin\!\Acall of cthulhu blood vol.wma
C:\Users\Calvin\!\Accelerate.wma
C:\Users\Calvin\!\Accenture.wma
C:\Users\Calvin\!\Accepted.wma
C:\Users\Calvin\!\Access fifty checking.wma
C:\Users\Calvin\!\Accident report services.wma
C:\Users\Calvin\!\Accidental heroes forgotten worlds.wma
C:\Users\Calvin\!\Accommodo.wma
C:\Users\Calvin\!\Accounting.wma
C:\Users\Calvin\!\Accubasis.wma
C:\Users\Calvin\!\Accucast.wma
C:\Users\Calvin\!\Acdc - workit.wma
C:\Users\Calvin\!\ACDC Hells Bells.wma
C:\Users\Calvin\!\ACDC Highway To Hell.wma
C:\Users\Calvin\!\ACDC You Shook Me All Night Long.wma
C:\Users\Calvin\!\ACE CANON.wma
C:\Users\Calvin\!\Ace hood lollipop remix.wma
C:\Users\Calvin\!\Ace of base.wma
C:\Users\Calvin\!\Ace offe base - cruel summer.wma
C:\Users\Calvin\!\Acetone peroxide.wma
C:\Users\Calvin\!\Acf consultants.wma
C:\Users\Calvin\!\Acid black cherry.wma
C:\Users\Calvin\!\Acid Loops Pro Samples.wma
C:\Users\Calvin\!\Aco pejovic.wma
C:\Users\Calvin\!\Acronis image iso true.wma
C:\Users\Calvin\!\Act a fool remix.wma
C:\Users\Calvin\!\Actis technologies.wma
C:\Users\Calvin\!\Activeemployeelist02.wma
C:\Users\Calvin\!\ActiveHealth Management.wma
C:\Users\Calvin\!\ActivWithout You.wma
C:\Users\Calvin\!\Ada gostkowska.wma
C:\Users\Calvin\!\Adam fr sandler.wma
C:\Users\Calvin\!\Adamo dolce paola.wma
C:\Users\Calvin\!\Adams family instrumental.wma
C:\Users\Calvin\!\Adan cuen.wma
C:\Users\Calvin\!\Adarsh-rent-a-car.wma
C:\Users\Calvin\!\Add a genuine licence.wma
C:\Users\Calvin\!\Addicted - stevie.wma
C:\Users\Calvin\!\Addicted.wma
C:\Users\Calvin\!\Addictive so confused.wma
C:\Users\Calvin\!\Addison rose.wma
C:\Users\Calvin\!\Adecco peopleone.wma
C:\Users\Calvin\!\Adelante.wma
C:\Users\Calvin\!\Adele Stephens xxx18.wma
C:\Users\Calvin\!\Ademco from ssn.wma
C:\Users\Calvin\!\Aderenti.wma
C:\Users\Calvin\!\Adiafa as da do meninas ribeira sado.wma
C:\Users\Calvin\!\Adiemus - Adiemus.wma
C:\Users\Calvin\!\Adimpleo.wma
C:\Users\Calvin\!\„DJ.wma
C:\Users\Calvin\!\Adkins matchett.wma
C:\Users\Calvin\!\Administaff.wma
C:\Users\Calvin\!\Admiratio.wma
C:\Users\Calvin\!\Adnan senses unuturum diye.wma
C:\Users\Calvin\!\Adrenaline.wma
C:\Users\Calvin\!\Adrenalynn.wma
C:\Users\Calvin\!\Adrian minune.wma
C:\Users\Calvin\!\Adrian Norwegisch.wma
C:\Users\Calvin\!\Adriano Filippucci Monophonic.wma
C:\Users\Calvin\!\Adrienne - the calling.wma
C:\Users\Calvin\!\Adsuesco.wma
C:\Users\Calvin\!\Adulescentia.wma
C:\Users\Calvin\!\Adult animal.wma
C:\Users\Calvin\!\Adult comics taxi girls rar.wma
C:\Users\Calvin\!\Adult Movies Brianna.wma
C:\Users\Calvin\!\ADULT MOVIES Jill.wma
C:\Users\Calvin\!\Adult movies mini horse fucks.wma
C:\Users\Calvin\!\Adult movies young french girl.wma
C:\Users\Calvin\!\Adult VERY tasty.wma
C:\Users\Calvin\!\Adventures doctor jay mpg sara.wma
C:\Users\Calvin\!\Aea account.wma
C:\Users\Calvin\!\Aea carrers.wma
C:\Users\Calvin\!\Aea confidential.wma
C:\Users\Calvin\!\Aea credit union.wma
C:\Users\Calvin\!\Aea employee.wma
C:\Users\Calvin\!\Aea equity.wma
...
C:\Users\Calvin\!\Z niemen.wma
C:\Users\Calvin\!\Z ・ 刻 を 越 えて.wma
C:\Users\Calvin\!\Z tob¹ by³bym wiêcej wart.wma
C:\Users\Calvin\!\Z ust do ust.wma
C:\Users\Calvin\!\Za kilka lez.wma
C:\Users\Calvin\!\Za tebe biah.wma
C:\Users\Calvin\!\Zabierzmnie do gwiazd.wma
C:\Users\Calvin\!\Zabiore cie wlasnie tam.wma
C:\Users\Calvin\!\Zabiore cie.wma
C:\Users\Calvin\!\Zabra³eœ serce moje.wma
C:\Users\Calvin\!\Zack e cody.wma
C:\Users\Calvin\!\Zaczarowana.wma
C:\Users\Calvin\!\Zagmatfany.wma
C:\Users\Calvin\!\Zascha angel moktan must have.wma
C:\Users\Calvin\!\Zascha danny moktan don cry t.wma
C:\Users\Calvin\!\Zascha know moktan i.wma
C:\Users\Calvin\!\Zascha like moktan you do.wma
C:\Users\Calvin\!\Zascha need moktan man i a.wma
C:\Users\Calvin\!\Zascha sing moktan song me a.wma
C:\Users\Calvin\!\Zat deluna.wma
C:\Users\Calvin\!\Zazdrosna.wma
C:\Users\Calvin\!\Zbrodnia ferpekcyjna.wma
C:\Users\Calvin\!\Zbrodnia i kara.wma
C:\Users\Calvin\!\Ze geraldo meiga senhorita.wma
C:\Users\Calvin\!\Zebrahead.wma
C:\Users\Calvin\!\Zecchino doro batti cinque.wma
C:\Users\Calvin\!\Zeitgeist.wma
C:\Users\Calvin\!\Zenith management.wma
C:\Users\Calvin\!\Zero assoluto.wma
C:\Users\Calvin\!\Zifiri ruzgar.wma
C:\Users\Calvin\!\Zigeunerjungen.wma
C:\Users\Calvin\!\Zimpala doo you bop.wma
C:\Users\Calvin\!\Zimpala new home.wma
C:\Users\Calvin\!\Zinar sozdar.wma
C:\Users\Calvin\!\Znów mi siê œnisz.wma
C:\Users\Calvin\!\Zoey zane.wma
C:\Users\Calvin\!\Zombie-loan.wma
C:\Users\Calvin\!\Zombie hell house.wma
C:\Users\Calvin\!\Zombie kroovy rob never gonna.wma
C:\Users\Calvin\!\Zombie nation.wma
C:\Users\Calvin\!\Zombie Strippers.wma
C:\Users\Calvin\!\Zombie thunder white kiss.wma
C:\Users\Calvin\!\Zoofills.wma
C:\Users\Calvin\!\Zooskool anal horse girl cums.wma
C:\Users\Calvin\!\Zooskool animal sex dog woman.wma
C:\Users\Calvin\!\Zooskool animal sex.wma
C:\Users\Calvin\!\Zooskool.wma
C:\Users\Calvin\!\Zouk machine.wma
C:\Users\Calvin\!\Zouk princesse lover tu es mon.wma
C:\Users\Calvin\!\Zucchero.wma
C:\Users\Calvin\!\Zulfu livaneli.wma
C:\Users\Calvin\!\ZYP-CODES.wma
C:\Users\Calvin\995.bat
C:\Windows\System32\{23dd81ce-e488-eec4-be5c-ebcffe0a6446}.dll
C:\Windows\System32\CBE
C:\Windows\System32\CBE\frcom37.exe
C:\Windows\System32\cTM
C:\Windows\System32\nZ
C:\Windows\System32\vntiho05
C:\yo.lnk

.
((((((((((((((((((((((((( Files Created from 2008-04-28 to 2008-05-30 )))))))))))))))))))))))))))))))
.

2008-05-29 23:33 . 2008-05-29 23:33 <DIR> d-------- C:\bintheredunthat
2008-05-29 23:29 . 2008-05-29 23:30 <DIR> d-------- C:\BFU
2008-05-28 22:12 . 2008-05-28 22:12 517,120 --a------ C:\Users\Calvin\winlogon.exe
2008-05-28 22:12 . 2008-05-28 22:12 70,656 --a------ C:\Users\Calvin\msconfig.exe
2008-05-28 22:12 . 2008-05-28 22:12 63,909 --a------ C:\Windows\System32\{23dd81ce-e488-eec4-be5c-ebcffe0a6446}.dll-uninst.exe
2008-05-27 16:41 . 2008-03-07 19:08 4,240,384 --a------ C:\Windows\System32\GameUXLegacyGDFs.dll
2008-05-27 16:41 . 2008-03-07 21:21 1,695,744 --a------ C:\Windows\System32\gameux.dll
2008-05-24 15:57 . 2008-05-25 07:44 <DIR> d-------- C:\Program Files\EA GAMES
2008-05-24 15:57 . 2004-08-18 02:17 442,368 -ra------ C:\Windows\System32\vp6vfw.dll
2008-05-24 15:49 . 2008-05-24 15:49 <DIR> d-------- C:\Program Files\DAEMON Tools Lite
2008-05-24 10:38 . 2008-05-24 10:38 717,296 --a------ C:\Windows\System32\drivers\sptd.sys
2008-05-24 10:37 . 2008-05-24 10:37 <DIR> d-a------ C:\Users\Calvin\AppData\Roaming\DAEMON Tools
2008-05-22 19:19 . 2008-05-22 19:19 <DIR> d-------- C:\PerfLogs
2008-05-22 17:18 . 2008-01-19 00:35 9,847,296 --a------ C:\Windows\System32\NlsData000a.dll
2008-05-22 17:17 . 2008-01-19 00:33 8,139,264 --a------ C:\Windows\System32\ssBranded.scr
2008-05-22 17:16 . 2008-01-19 00:36 2,588,160 --a------ C:\Windows\System32\UIHub.dll
2008-05-22 17:15 . 2008-01-19 00:34 6,103,040 --a------ C:\Windows\System32\chtbrkr.dll
2008-05-22 17:14 . 2008-01-18 23:06 8,147,456 --a------ C:\Windows\System32\wmploc.DLL
2008-05-22 17:13 . 2008-01-19 00:33 599,552 --a------ C:\Windows\System32\vsp1cln.exe
2008-05-22 17:13 . 2008-01-05 04:31 145,455 --a------ C:\Windows\System32\perfmon.msc
2008-05-22 17:13 . 2008-01-05 04:31 3 --a------ C:\Windows\System32\drivers\MsftWdf_Kernel_01007_Inbox_Critical.Wdf
2008-05-22 17:12 . 2008-01-19 00:36 704,512 --a------ C:\Windows\System32\SmiEngine.dll
2008-05-22 17:12 . 2008-01-19 00:36 357,888 --a------ C:\Windows\System32\wbemcomn.dll
2008-05-22 17:12 . 2008-01-19 00:34 258,560 --a------ C:\Windows\System32\dpx.dll
2008-05-22 17:12 . 2008-01-19 00:34 246,784 --a------ C:\Windows\System32\drvstore.dll
2008-05-22 17:12 . 2008-01-19 00:36 218,624 --a------ C:\Windows\System32\wdscore.dll
2008-05-22 17:12 . 2008-01-19 00:36 139,264 --a------ C:\Windows\System32\SmiInstaller.dll
2008-05-22 17:12 . 2008-01-19 00:33 130,560 --a------ C:\Windows\System32\PkgMgr.exe
2008-05-22 17:12 . 2008-01-19 00:35 35,328 --a------ C:\Windows\System32\mspatcha.dll
2008-05-22 17:11 . 2008-01-19 00:34 305,152 --a------ C:\Windows\System32\msdelta.dll
2008-05-19 14:53 . 2008-05-19 14:53 <DIR> d-------- C:\Program Files\Hackety Hack
2008-05-18 23:21 . 2008-05-18 23:21 <DIR> d-------- C:\Users\~Administrator~\AppData\Roaming\ZoomBrowser EX
2008-05-18 21:17 . 2008-05-18 21:17 <DIR> d-------- C:\Users\~Administrator~\AppData\Roaming\Nexon
2008-05-18 21:06 . 2008-05-18 21:06 <DIR> d-------- C:\Users\~Administrator~\AppData\Roaming\Macromedia
2008-05-18 21:06 . 2008-05-18 21:06 <DIR> d-------- C:\Users\~Administrator~\AppData\Roaming\Adobe
2008-05-18 18:07 . 2008-05-18 18:07 671 --a------ C:\Windows\System32\newaddies.xtc
2008-05-18 18:05 . 2008-05-18 18:05 <DIR> d-------- C:\Users\~Administrator~\AppData\Roaming\Roxio
2008-05-18 18:04 . 2008-05-18 18:04 <DIR> d--h----- C:\Users\~Administrator~\AppData\Roaming\GTek
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> dr------- C:\Users\~Administrator~\Videos
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> dr------- C:\Users\~Administrator~\Searches
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> dr------- C:\Users\~Administrator~\Saved Games
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> dr------- C:\Users\~Administrator~\Pictures
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> dr------- C:\Users\~Administrator~\Music
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> dr------- C:\Users\~Administrator~\Links
2008-05-18 18:03 . 2008-05-18 18:04 <DIR> dr------- C:\Users\~Administrator~\Favorites
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> dr------- C:\Users\~Administrator~\Downloads
2008-05-18 18:03 . 2008-05-18 20:58 <DIR> dr------- C:\Users\~Administrator~\Documents
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> dr------- C:\Users\~Administrator~\Desktop
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> dr------- C:\Users\~Administrator~\Contacts
2008-05-18 18:03 . 2008-05-18 18:05 <DIR> d---s---- C:\Users\~Administrator~\AppData\Roaming\Microsoft
2008-05-18 18:03 . 2006-11-02 05:37 <DIR> d-------- C:\Users\~Administrator~\AppData\Roaming\Media Center Programs
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> d-------- C:\Users\~Administrator~\AppData\Roaming\Identities
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> d--h----- C:\Users\~Administrator~\AppData
2008-05-18 18:03 . 2008-05-18 18:03 <DIR> d-------- C:\Users\~Administrator~
2008-05-18 18:03 . 2008-05-30 06:04 786,432 --ahs---- C:\Users\~Administrator~\NTUSER.DAT
2008-05-18 11:19 . 2008-05-18 11:37 <DIR> d-------- C:\Program Files\Eusing Free Registry Cleaner
2008-05-17 21:13 . 2008-05-17 21:17 <DIR> d-------- C:\Program Files\GRETECH
2008-05-17 08:03 . 2008-05-17 08:17 <DIR> d-------- C:\Program Files\Windows Live Safety Center
2008-05-16 07:48 . 2008-05-16 07:54 <DIR> d-------- C:\Program Files\ShellExView
2008-05-16 07:48 . 2008-05-16 07:48 39,424 --a------ C:\Windows\zipinst.exe
2008-05-15 18:33 . 2008-05-15 18:45 <DIR> d-------- C:\Program Files\DVDVideoSoft
2008-05-15 17:29 . 2008-05-15 17:29 <DIR> d-------- C:\DVDVideoSoft
2008-05-15 00:16 . 2008-05-15 00:16 <DIR> d-------- C:\Program Files\Common Files\Control Panels
2008-05-14 23:53 . 2006-09-29 06:56 28,248 -ra------ C:\Windows\System32\AdobePDF.dll
2008-05-13 00:07 . 2008-05-13 00:07 524,288 --ahs---- C:\ntuser.dat{c39279b4-208c-11dd-8355-00e034123456}.TMContainer00000000000000000002.regtrans-ms
2008-05-13 00:07 . 2008-05-13 00:07 524,288 --ahs---- C:\ntuser.dat{c39279b4-208c-11dd-8355-00e034123456}.TMContainer00000000000000000001.regtrans-ms
2008-05-13 00:07 . 2008-05-13 00:07 524,288 --ahs---- C:\ntuser.dat{c39279b0-208c-11dd-8355-00e034123456}.TMContainer00000000000000000002.regtrans-ms
2008-05-13 00:07 . 2008-05-13 00:07 524,288 --ahs---- C:\ntuser.dat{c39279b0-208c-11dd-8355-00e034123456}.TMContainer00000000000000000001.regtrans-ms
2008-05-13 00:07 . 2008-05-17 21:29 262,144 --a------ C:\ntuser.dat
2008-05-13 00:07 . 2008-05-13 00:07 65,536 --ahs---- C:\ntuser.dat{c39279b4-208c-11dd-8355-00e034123456}.TM.blf
2008-05-13 00:07 . 2008-05-13 00:07 65,536 --ahs---- C:\ntuser.dat{c39279b0-208c-11dd-8355-00e034123456}.TM.blf
2008-05-13 00:07 . 2008-05-17 21:29 5,120 --ah----- C:\ntuser.dat.LOG1
2008-05-13 00:07 . 2008-05-13 00:07 0 --ah----- C:\ntuser.dat.LOG2
2008-05-11 17:40 . 2008-05-11 17:40 <DIR> d-------- C:\Program Files\ReflexiveArcade
2008-05-11 15:31 . 2008-05-11 15:31 <DIR> d-------- C:\NVIDIA
2008-05-11 12:59 . 2008-05-11 12:59 <DIR> dr------- C:\Windows\System32\config\systemprofile\Documents
2008-05-11 12:55 . 2007-02-20 16:04 2,463,976 --a------ C:\Windows\System32\NPSWF32.dll
2008-05-11 12:55 . 2007-02-20 16:04 190,696 --a------ C:\Windows\System32\NPSWF32_FlashUtil.exe
2008-05-11 09:19 . 2008-05-11 11:53 <DIR> d-------- C:\Users\Calvin\AppData\Roaming\Download Manager
2008-05-11 00:13 . 2008-05-11 00:14 <DIR> d-------- C:\Users\Calvin\AppData\Roaming\Fun Desktop Wallpaper Changer
2008-05-07 21:32 . 2008-05-07 21:32 107,888 --a------ C:\Windows\System32\CmdLineExt.dll
2008-05-06 22:36 . 2008-05-06 22:36 <DIR> d-------- C:\Users\All Users\FLEXnet
2008-05-06 22:36 . 2008-05-06 22:36 <DIR> d-------- C:\ProgramData\FLEXnet
2008-05-06 20:47 . 2008-05-06 20:47 <DIR> d-------- C:\Program Files\Common Files\Macrovision Shared
2008-05-03 20:59 . 2008-05-03 20:59 <DIR> dr-h----- C:\Users\Calvin\AppData\Roaming\SecuROM
2008-05-03 20:42 . 2008-05-03 20:58 <DIR> d-------- C:\Program Files\EA Sports
2008-04-30 19:10 . 2008-04-30 19:10 <DIR> d-a------ C:\Users\Calvin\AppData\Roaming\Crystal Art Software
2008-04-30 18:56 . 2008-04-30 18:56 <DIR> d-------- C:\Windows\MaxSecureBackup
2008-04-30 18:55 . 2007-05-24 16:57 143,360 --a------ C:\Windows\System32\GetHardDiskNo.dll
2008-04-30 18:55 . 2008-04-30 18:55 63 --a------ C:\Windows\system\SYSRegC.dll
2008-04-28 22:27 . 2008-04-28 22:27 <DIR> d-a------ C:\Users\Calvin\AppData\Roaming\Astro Gemini Software
2008-04-28 19:02 . 2008-01-03 10:40 234,536 --a------ C:\psexec.exe
2008-04-27 17:11 . 2008-04-27 17:17 <DIR> d-------- C:\Users\Calvin\AppData\Roaming\Hamachi
2008-04-27 17:10 . 2008-04-27 17:10 25,280 --a------ C:\Windows\System32\drivers\hamachi.sys
2008-04-27 13:09 . 2008-04-27 13:09 <DIR> d-------- C:\Windows\wb
2008-04-27 13:09 . 1996-08-16 06:44 87,552 -ra------ C:\Windows\system\url.dll
2008-04-27 13:09 . 1996-09-30 05:32 9,728 -ra------ C:\Windows\system\rnaph.dll
2008-04-27 13:08 . 2008-04-27 13:08 300 --a------ C:\Windows\EReg072.dat
2008-04-25 05:32 . 2008-04-25 05:32 <DIR> d-------- C:\Program Files\Safari
2008-04-25 05:31 . 2008-04-25 05:31 <DIR> d-------- C:\Program Files\Bonjour
2008-04-21 20:38 . 2008-04-21 20:38 <DIR> d-------- C:\Program Files\Windows Live Toolbar
2008-04-21 20:38 . 2008-04-21 20:38 <DIR> d-------- C:\Program Files\Windows Live Favorites
2008-04-21 20:37 . 2008-04-21 20:37 <DIR> d-------- C:\Program Files\Microsoft SQL Server Compact Edition
2008-04-21 20:20 . 2008-04-21 20:20 <DIR> d-------- C:\Program Files\Apple Software Update
2008-04-20 10:00 . 2008-04-20 10:02 <DIR> d-a------ C:\Users\Calvin\AppData\Roaming\Orbit
2008-04-20 10:00 . 2008-04-20 10:00 <DIR> d-------- C:\Downloads
2008-04-19 16:10 . 2007-10-26 17:46 41,984 --a------ C:\Windows\System32\netfxperf.dll
2008-04-15 22:57 . 2008-04-15 22:57 <DIR> d-------- C:\Program Files\Cloudbrain
2008-04-15 21:15 . 2008-04-15 21:19 <DIR> d-------- C:\Program Files\Common Files\Macromedia Shared
2008-04-15 00:08 . 2008-04-15 21:18 <DIR> d-------- C:\Users\All Users\Macromedia
2008-04-15 00:08 . 2008-05-11 12:47 <DIR> d-------- C:\Program Files\Macromedia
2008-04-15 00:08 . 2008-05-11 12:47 <DIR> d-------- C:\Program Files\Common Files\Macromedia
2008-04-14 20:41 . 2001-09-06 10:00 1,700,352 --a------ C:\Windows\System32\gdiplus.dll
2008-04-14 20:41 . 2007-06-25 14:02 475,136 --a------ C:\Windows\System32\SkinCrafter2.dll
2008-04-14 20:10 . 2008-05-28 22:17 <DIR> d-------- C:\Program Files\LimeWire
2008-04-13 14:59 . 2008-04-13 14:59 <DIR> d-------- C:\Windows\System32\Adobe
2008-04-13 10:07 . 2008-04-13 10:07 0 --a------ C:\Windows\PROTOCOL.INI
2008-04-13 10:02 . 2008-04-22 00:48 <DIR> d-a------ C:\Users\Calvin\AppData\Roaming\Web Page Maker V2
2008-04-12 11:03 . 2008-05-29 23:49 <DIR> d-------- C:\Perl
2008-04-08 20:28 . 2008-04-08 20:28 <DIR> d-------- C:\Users\All Users\Yahoo! Companion
2008-04-08 20:28 . 2008-04-08 20:28 <DIR> d-------- C:\ProgramData\Yahoo! Companion
2008-04-08 19:57 . 2008-04-08 19:57 <DIR> d-------- C:\Users\All Users\PY_Software
2008-04-08 19:57 . 2008-04-08 19:57 <DIR> d-------- C:\ProgramData\PY_Software
2008-04-08 19:57 . 2008-04-22 00:52 <DIR> d-------- C:\Program Files\Actual Drawing
2008-04-08 17:44 . 2008-04-22 00:48 <DIR> d-------- C:\Program Files\Yahoo!

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-30 13:09 --------- d---a-w C:\Users\Calvin\AppData\Roaming\LimeWire
2008-05-29 19:41 --------- d-----w C:\Program Files\McAfee
2008-05-28 06:22 --------- d-----w C:\Program Files\Dl_cats
2008-05-25 04:34 --------- d-----w C:\ProgramData\Roxio
2008-05-23 03:26 --------- d-----w C:\ProgramData\NVIDIA
2008-05-23 02:33 174 --sha-w C:\Program Files\desktop.ini
2008-05-23 02:22 --------- d-----w C:\Program Files\Windows Sidebar
2008-05-23 02:22 --------- d-----w C:\Program Files\Windows Photo Gallery
2008-05-23 02:22 --------- d-----w C:\Program Files\Windows Mail
2008-05-23 02:22 --------- d-----w C:\Program Files\Windows Journal
2008-05-23 02:22 --------- d-----w C:\Program Files\Windows Defender
2008-05-23 02:22 --------- d-----w C:\Program Files\Windows Collaboration
2008-05-23 02:22 --------- d-----w C:\Program Files\Windows Calendar
2008-05-23 01:28 82,432 ----a-w C:\Windows\System32\axaltocm.dll
2008-05-23 01:28 101,888 ----a-w C:\Windows\System32\ifxcardm.dll
2008-05-22 23:45 --------- d-----w C:\Program Files\Nexon
2008-05-15 06:45 --------- d-----w C:\Program Files\Common Files\Adobe
2008-05-15 02:01 --------- d-----w C:\ProgramData\Microsoft Help
2008-05-15 01:13 --------- d-----w C:\Program Files\Java
2008-05-14 00:05 --------- d-----w C:\Program Files\SoundSpectrum
2008-05-11 22:31 --------- d-----w C:\Program Files\Common Files\InstallShield
2008-05-01 02:14 --------- d-----w C:\Program Files\CCleaner
2008-04-30 06:14 --------- d-----w C:\Program Files\Dell DataSafe Online
2008-04-29 02:54 --------- d-----w C:\Program Files\Windows Live
2008-04-29 02:46 --------- d-----w C:\ProgramData\WLInstaller
2008-04-25 12:15 --------- d-----w C:\Program Files\Reference Assemblies
2008-04-22 23:22 --------- d-----w C:\Program Files\7-Zip
2008-04-03 05:30 --------- d-----w C:\Program Files\QuickTime
2008-03-31 18:06 --------- d-----w C:\ProgramData\Spybot - Search & Destroy
2008-03-31 18:05 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-03-31 16:07 --------- d---a-w C:\Users\Calvin\AppData\Roaming\Apple Computer
2008-03-31 05:01 691,545 ----a-w C:\Windows\unins000.exe
2008-03-09 01:45 21,764 ----a-w C:\Windows\System32\CoreAAC-uninstall.exe
2008-03-08 04:19 540,672 ----a-w C:\Windows\AppPatch\AcLayers.dll
2008-03-08 04:19 458,752 ----a-w C:\Windows\AppPatch\AcSpecfc.dll
2008-03-08 04:19 2,153,984 ----a-w C:\Windows\AppPatch\AcGenral.dll
2008-03-08 04:19 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll
2008-03-08 01:58 2,560 ----a-w C:\Windows\AppPatch\AcRes.dll
2007-11-04 16:32 374 ----a-w C:\Users\Calvin\AppData\Roaming\internaldb6334.dat
2007-11-04 14:50 555 ----a-w C:\Users\Calvin\AppData\Roaming\internaldb8467.dat
2007-11-04 14:50 18,432 ----a-w C:\Users\Calvin\AppData\Roaming\internaldb41.dat
.

------- Sigcheck -------

.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{dbf274fc-a367-638c-10e6-5d1e81ecc508}]
C:\Windows\system32\{23dd81ce-e488-eec4-be5c-ebcffe0a6446}.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DellSupport"="C:\Program Files\DellSupport\DSAgnt.exe" [2007-03-15 10:09 460784]
"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2008-01-19 00:33 125952]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34 5724184]
"DellSupportCenter"="C:\Program Files\Dell Support Center\bin\sprtcmd.exe" [2007-10-09 19:56 202544]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 11:43 2097488]
"Dell DataSafe Scheduler"="C:\Program Files\Dell DataSafe Online\Bin\DataSafeOnlineScheduler.exe" [2007-12-02 17:30 308464]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-19 00:33 1233920]
"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\daemon.exe" [2008-04-01 02:39 486856]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 00:33 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RtHDVCpl.exe" [2008-01-17 07:22 4907008 C:\Windows\RtHDVCpl.exe]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2006-10-03 09:37 81920]
"RoxWatchTray"="C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2006-11-05 09:22 221184]
"dscactivate"="C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" [2007-10-09 19:57 16384]
"ECenter"="c:\dell\E-Center\EULALauncher.exe" [2007-03-16 03:20 17920]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-03-28 23:37 413696]
"dlcqmon.exe"="C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe" [2007-06-29 08:47 292080]
"MemoryCardManager"="C:\Program Files\Dell Photo AIO Printer 966\memcard.exe" [2007-06-29 08:48 304368]
"MskAgentexe"="C:\Program Files\McAfee\MSK\MskAgent.exe" [2007-01-17 18:30 152144]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 10:36 267048]
"Adobe_ID0EYTHM"="C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE" [2007-03-20 16:40 1884160]
"DellSupportCenter"="C:\Program Files\Dell Support Center\bin\sprtcmd.exe" [2007-10-09 19:56 202544]
"NvSvc"="C:\Windows\system32\nvsvc.dll" [2007-09-17 09:07 86016]
"NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-09-17 09:07 8497696]
"NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-09-17 09:07 81920]
"{7cea24c7-d3e8-c48b-f141-a11cf8a82b1d}"="C:\Windows\system32\{23dd81ce-e488-eec4-be5c-ebcffe0a6446}.dll" [ ]
"combofix"="C:\Windows\system32\CF13146.exe" [2008-01-19 00:33 318976]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 11:34 5724184]

C:\Users\Calvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
LimeWire On Startup.lnk - C:\Program Files\LimeWire\LimeWire.exe [2/8/2008 2:41:35 PM 147456]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [4/23/2008 3:38:16 AM 29696]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"LogonHoursAction"= 2 (0x2)
"DontDisplayLogonHoursWarnings"= 1 (0x1)

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\system]
"LogonHoursAction"= 2 (0x2)
"DontDisplayLogonHoursWarnings"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.IV41"= ir41_32.dll

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Dell DataSafe Scheduler"="C:\Program Files\Dell DataSafe Online\Bin\DataSafeOnlineScheduler.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001
"InternetSettingsDisableNotify"=dword:00000001
"AutoUpdateDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{C40A1CDE-3524-47EB-AB86-D043632CF06D}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{95A5E1FA-64AB-4ADB-AC4D-3DF2E0B735B6}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{9164ED87-D1FE-4206-8496-29DEC6BBB6D0}"= UDP:C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe:McAfee Network Agent
"{204B31F1-64E0-4F04-B55D-73DE3A458B3F}"= UDP:C:\Program Files\LimeWire\LimeWire.exe:LimeWire
"{189B5808-CF71-49AB-94CA-02B985EA3914}"= TCP:C:\Program Files\LimeWire\LimeWire.exe:LimeWire
"TCP Query User{E162012F-98CF-4888-8A39-00328A767F10}C:\\program files\\nexon\\maplestory\\maplestory.exe"= UDP:C:\program files\nexon\maplestory\maplestory.exe:MapleStory
"UDP Query User{2FB30AAD-97FB-4027-8C8D-3FA7FDCF7BFE}C:\\program files\\nexon\\maplestory\\maplestory.exe"= TCP:C:\program files\nexon\maplestory\maplestory.exe:MapleStory
"TCP Query User{A0186F92-7442-4DC0-9CDF-695C1370EE4F}C:\\users\\calvin\\saved games\\nexon\\maplestory.exe"= UDP:C:\users\calvin\saved games\nexon\maplestory.exe:maplestory.exe
"UDP Query User{FCD1575D-BBD4-4794-AD79-F7C3406AE999}C:\\users\\calvin\\saved games\\nexon\\maplestory.exe"= TCP:C:\users\calvin\saved games\nexon\maplestory.exe:maplestory.exe
"TCP Query User{FF2B4B4D-1D13-48E6-8991-58A7FA801092}C:\\users\\calvin\\saved games\\nexon\\maplestory.exe"= UDP:C:\users\calvin\saved games\nexon\maplestory.exe:maplestory.exe
"UDP Query User{0B2E0060-86A4-484A-AB2C-D90157F44379}C:\\users\\calvin\\saved games\\nexon\\maplestory.exe"= TCP:C:\users\calvin\saved games\nexon\maplestory.exe:maplestory.exe
"TCP Query User{4E10DA99-3C04-4667-9F89-F36A44B45368}C:\\users\\calvin\\saved games\\nexon\\patcher.exe"= UDP:C:\users\calvin\saved games\nexon\patcher.exe:patcher.exe
"UDP Query User{79088905-9F9D-4D68-9C4F-512196042A94}C:\\users\\calvin\\saved games\\nexon\\patcher.exe"= TCP:C:\users\calvin\saved games\nexon\patcher.exe:patcher.exe
"TCP Query User{C5CBBF51-2752-40A6-A2C0-DC8A40B3B8F6}C:\\users\\calvin\\saved games\\nexon\\newpatcher.exe"= UDP:C:\users\calvin\saved games\nexon\newpatcher.exe:newpatcher.exe
"UDP Query User{BFE9CE8F-1C04-4B88-8B32-CAD967AF13DA}C:\\users\\calvin\\saved games\\nexon\\newpatcher.exe"= TCP:C:\users\calvin\saved games\nexon\newpatcher.exe:newpatcher.exe
"TCP Query User{4513D3DC-A943-4252-BE51-253D2AEA4C5F}C:\\users\\calvin\\saved games\\nexon\\patcher.exe"= UDP:C:\users\calvin\saved games\nexon\patcher.exe:patcher.exe
"UDP Query User{D4241B12-00EC-4E4D-A39C-7C2807C78F17}C:\\users\\calvin\\saved games\\nexon\\patcher.exe"= TCP:C:\users\calvin\saved games\nexon\patcher.exe:patcher.exe
"TCP Query User{871E1A48-AEBC-4085-BAED-C787EC6E21F1}C:\\users\\calvin\\appdata\\roaming\\u3\\0000187b85732e4e\\0de4f643-c398-46ec-9339-2362f2311932\\exec\\skype.exe"= UDP:C:\users\calvin\appdata\roaming\u3\0000187b85732e4e\0de4f643-c398-46ec-9339-2362f2311932\exec\skype.exe:skype.exe
"UDP Query User{326FF41C-497D-4D03-8513-22EBAC3AC34A}C:\\users\\calvin\\appdata\\roaming\\u3\\0000187b85732e4e\\0de4f643-c398-46ec-9339-2362f2311932\\exec\\skype.exe"= TCP:C:\users\calvin\appdata\roaming\u3\0000187b85732e4e\0de4f643-c398-46ec-9339-2362f2311932\exec\skype.exe:skype.exe
"TCP Query User{37A6A56D-37BC-40E8-9018-8069A4C66930}C:\\program files\\nexon\\maplestory\\maplestory.exe"= UDP:C:\program files\nexon\maplestory\maplestory.exe:MapleStory
"UDP Query User{A5CF2920-5E05-4607-BCEE-DA15A6B8B0A0}C:\\program files\\nexon\\maplestory\\maplestory.exe"= TCP:C:\program files\nexon\maplestory\maplestory.exe:MapleStory
"TCP Query User{82CCA1D9-95CC-4545-8AE2-8C097F9A4A13}C:\\users\\calvin\\appdata\\roaming\\u3\\0000187b85732e4e\\0de4f643-c398-46ec-9339-2362f2311932\\exec\\skype.exe"= UDP:C:\users\calvin\appdata\roaming\u3\0000187b85732e4e\0de4f643-c398-46ec-9339-2362f2311932\exec\skype.exe:skype.exe
"UDP Query User{2DFC44B5-C6FC-4455-9F08-9713F4536A64}C:\\users\\calvin\\appdata\\roaming\\u3\\0000187b85732e4e\\0de4f643-c398-46ec-9339-2362f2311932\\exec\\skype.exe"= TCP:C:\users\calvin\appdata\roaming\u3\0000187b85732e4e\0de4f643-c398-46ec-9339-2362f2311932\exec\skype.exe:skype.exe
"TCP Query User{3FE2B734-5BFA-4A80-84A8-87DC826F8C00}C:\\windows\\explorer.exe"= UDP:C:\windows\explorer.exe:Windows Explorer
"UDP Query User{5FD30CFD-6BAB-4702-9497-098A7B9A67B4}C:\\windows\\explorer.exe"= TCP:C:\windows\explorer.exe:Windows Explorer
"{400D87FB-D104-4A48-8208-178B985E4A11}"= UDP:C:\Windows\System32\rlvknlg.exe:rlvknlg.exe
"{EC8BCD7F-E649-4D37-A950-57E4B152804C}"= TCP:C:\Windows\System32\rlvknlg.exe:rlvknlg.exe
"{ECEF8CF6-AFE4-4A65-A2EF-8691D9A93C3E}"= UDP:C:\ProgramData\NexonUS\NGM\NGM.exe:Nexon Game Manager
"{79C9CF6E-0E9A-41AB-861D-8EAE4CF907B2}"= TCP:C:\ProgramData\NexonUS\NGM\NGM.exe:Nexon Game Manager
"TCP Query User{489E40BC-53D2-44A4-A423-82B499B8D9BB}C:\\nexon\\maplestory\\maplestory.exe"= UDP:C:\nexon\maplestory\maplestory.exe:MapleStory
"UDP Query User{0B733464-F515-4AA6-8220-F374B7E1341C}C:\\nexon\\maplestory\\maplestory.exe"= TCP:C:\nexon\maplestory\maplestory.exe:MapleStory
"TCP Query User{80CCF7DE-E26B-40A8-836A-638BA1A87700}C:\\nexon\\maplestory\\maplestory.exe"= UDP:C:\nexon\maplestory\maplestory.exe:MapleStory
"UDP Query User{71B875FE-9E27-418C-A965-496F8303828E}C:\\nexon\\maplestory\\maplestory.exe"= TCP:C:\nexon\maplestory\maplestory.exe:MapleStory
"TCP Query User{D3C1ECFA-5DAD-42A3-8DAA-1896FE6B3BEA}C:\\program files\\limewire\\limewire.exe"= UDP:C:\program files\limewire\limewire.exe:LimeWire
"UDP Query User{E2A310D1-7EB4-4C86-94ED-A1764FE80CA3}C:\\program files\\limewire\\limewire.exe"= TCP:C:\program files\limewire\limewire.exe:LimeWire
"{24BECBA1-8C8C-4B02-9916-4EEB02766C48}"= UDP:C:\Program Files\iTunes\iTunes.exe:iTunes
"{39FBCFD1-2DF2-4251-AF7F-3C3685B06BB7}"= TCP:C:\Program Files\iTunes\iTunes.exe:iTunes
"TCP Query User{34A08745-C53B-4350-BBF6-B3E8C45B0762}C:\\program files\\bitlord2\\bitlord.exe"= UDP:C:\program files\bitlord2\bitlord.exe:
"UDP Query User{4FA8BA5C-B3B3-4BB2-B2CE-DAED6CF66DFD}C:\\program files\\bitlord2\\bitlord.exe"= TCP:C:\program files\bitlord2\bitlord.exe:
"TCP Query User{A3D3605E-AF3F-46B9-9FDE-230A280E9BFF}C:\\program files\\bitlord\\bitlord.exe"= UDP:C:\program files\bitlord\bitlord.exe:BitLord
"UDP Query User{9C1B00E3-FA2A-420B-84D1-86DAE89A54E6}C:\\program files\\bitlord\\bitlord.exe"= TCP:C:\program files\bitlord\bitlord.exe:BitLord
"{341CEB89-AAA7-452B-A8EB-87FBD4C00165}"= UDP:C:\ProgramData\NexonUS\NGM\NGM.exe:Nexon Game Manager
"{C4613266-71ED-4679-8A58-AB4071F27743}"= TCP:C:\ProgramData\NexonUS\NGM\NGM.exe:Nexon Game Manager
"{2F9D8050-BF84-4A47-B80A-5A51F24B62A2}"= UDP:C:\Nexon\KartRider\KartRider.exe:KartRider
"{6CEB6678-3F6B-49DA-A194-2CAD4CC4998E}"= TCP:C:\Nexon\KartRider\KartRider.exe:KartRider
"{CB551BCF-FF61-435D-A80D-803693620C35}"= UDP:C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe:Device Monitor
"{BBD75391-A0DC-47C2-9821-47E61C7E212E}"= TCP:C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe:Device Monitor
"{0AA4CB1A-C026-4777-AB0D-26B0E8C4F83E}"= UDP:C:\Program Files\Dell Photo AIO Printer 966\DLCQaiox.exe:All In One Center
"{F12EB92A-1930-47BF-A3FD-728C657F1501}"= TCP:C:\Program Files\Dell Photo AIO Printer 966\DLCQaiox.exe:All In One Center
"{D4C3A691-D7F9-44A7-8EFD-B572AA6E55BD}"= UDP:C:\Program Files\Dell Photo AIO Printer 966\memcard.exe:Memory Card Manager
"{E91FAA2D-12B0-43F8-B2DC-D06E76678598}"= TCP:C:\Program Files\Dell Photo AIO Printer 966\memcard.exe:Memory Card Manager
"{916FABEE-914F-4826-B5B6-1F8593C95026}"= UDP:C:\Windows\System32\dlcqcoms.exe:Dell Communications System
"{52987BB2-9EE3-490F-905B-6245E9C27E94}"= TCP:C:\Windows\System32\dlcqcoms.exe:Dell Communications System
"TCP Query User{2403A6DE-64D6-49C2-80EE-2D943E9CF91F}C:\\program files\\nexon\\maplestory\\gglessv51.exe"= UDP:C:\program files\nexon\maplestory\gglessv51.exe:MapleStory
"UDP Query User{D758F7CB-2751-4782-913A-F24C56E7ABD7}C:\\program files\\nexon\\maplestory\\gglessv51.exe"= TCP:C:\program files\nexon\maplestory\gglessv51.exe:MapleStory
"{5FE6955F-A5A9-4AAC-B7F5-7417FD787A4D}"= UDP:C:\Windows\System32\dlcqcoms.exe:Dell Communications System
"{A5A26F7F-557D-4D8C-8F09-CCA1084FC6D8}"= TCP:C:\Windows\System32\dlcqcoms.exe:Dell Communications System
"{8DB4D979-8B52-45D7-9B71-D00095952AF3}"= UDP:C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe:Device Monitor
"{CD5E6279-511E-4EFF-A1DD-C2ABE970394B}"= TCP:C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe:Device Monitor
"{57D1B8F0-DC42-498A-AF6A-D23054A5340E}"= UDP:C:\Program Files\Dell Photo AIO Printer 966\DLCQaiox.exe:All In One Center
"{28A1A368-8650-4792-9A26-66373E947820}"= TCP:C:\Program Files\Dell Photo AIO Printer 966\DLCQaiox.exe:All In One Center
"{A64B97B6-82CE-4781-B074-0FCDB62DEF67}"= UDP:C:\Program Files\Dell Photo AIO Printer 966\memcard.exe:Memory Card Manager
"{7933A23F-CCC4-43AC-8854-891062504CD7}"= TCP:C:\Program Files\Dell Photo AIO Printer 966\memcard.exe:Memory Card Manager
"TCP Query User{3094D4F0-4A74-43D8-ADF8-385FDCA2125F}C:\\program files\\mozilla firefox\\firefox.exe"= UDP:C:\program files\mozilla firefox\firefox.exe:Firefox
"UDP Query User{60FEC39C-576F-4CDB-8894-596E013E17D4}C:\\program files\\mozilla firefox\\firefox.exe"= TCP:C:\program files\mozilla firefox\firefox.exe:Firefox
"{D04AA1E0-2354-47A4-B03E-34F8302D4128}"= UDP:C:\Program Files\Grisoft\AVG7\avgcc.exe:AVG Control Center
"{DC2D4B90-FE0D-4508-B2AD-7FCD89315EB7}"= TCP:C:\Program Files\Grisoft\AVG7\avgcc.exe:AVG Control Center
"{60ED4348-1C81-48CC-86E6-9E278D53F6AE}"= UDP:C:\Program Files\Grisoft\AVG7\avgw.exe:AVG Test Center
"{CE4889C6-655B-41E5-9634-A9D4F1D861DF}"= TCP:C:\Program Files\Grisoft\AVG7\avgw.exe:AVG Test Center
"{E7093309-45D0-4BDF-AB60-345CD913DD04}"= UDP:C:\Program Files\Grisoft\AVG7\avgvv.exe:AVG Virus Vault
"{08FA98A6-AD7B-4967-8CC5-1725C7A60C25}"= TCP:C:\Program Files\Grisoft\AVG7\avgvv.exe:AVG Virus Vault
"{77A37B42-5889-4A26-9C5B-D8495F8BB946}"= UDP:C:\Program Files\Avast4\ashAvast.exe:avast! Antivirus
"{3E72381B-CED5-431E-803F-43BB4EC16E40}"= TCP:C:\Program Files\Avast4\ashAvast.exe:avast! Antivirus
"{F493B459-7CCA-4DDD-9A94-BD312D30BA98}"= UDP:C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe:McAfee Network Agent
"{55C74632-22F9-4705-AB7B-2B112956FA2B}"= TCP:C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe:McAfee Network Agent
"{ED28BE93-1FAA-4D8C-A7D1-0257C567F0DD}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"TCP Query User{305C2301-1CC4-4397-93CE-DC6BDF9963D5}C:\\program files\\nexon\\maplestory\\ggless52.exe"= UDP:C:\program files\nexon\maplestory\ggless52.exe:MapleStory
"UDP Query User{308608BB-9CB5-4086-B67C-C9BC9AAEB86F}C:\\program files\\nexon\\maplestory\\ggless52.exe"= TCP:C:\program files\nexon\maplestory\ggless52.exe:MapleStory
"{D2745287-EEDB-4836-AA2F-CCBE52746944}"= UDP:C:\Program Files\iTunes\iTunes.exe:iTunes
"{9242175C-A073-468A-959F-1A20FD1F204E}"= TCP:C:\Program Files\iTunes\iTunes.exe:iTunes
"TCP Query User{435E572C-6B71-4895-AF14-A2319EA2A03C}C:\\program files\\orbitdownloader\\orbitnet.exe"= UDP:C:\program files\orbitdownloader\orbitnet.exe:P2P service of Orbit Downloader
"UDP Query User{E37796CC-BDBE-4B98-BA19-7623E2E52319}C:\\program files\\orbitdownloader\\orbitnet.exe"= TCP:C:\program files\orbitdownloader\orbitnet.exe:P2P service of Orbit Downloader
"{CAE85B28-FC9A-4AC2-860E-99EFB98BEC6B}"= UDP:C:\Program Files\Bonjour\mDNSResponder.exe:Bonjour
"{07C4E20F-9055-41F6-99B7-62625B4681FC}"= TCP:C:\Program Files\Bonjour\mDNSResponder.exe:Bonjour
"{625BF72C-6185-4D8F-B800-F26772BBEA96}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"TCP Query User{D8802660-2B38-4762-B31B-C502D67C1A4D}C:\\program files\\ea sports\\nhl08\\nhl2008.exe"= UDP:C:\program files\ea sports\nhl08\nhl2008.exe:nhl2008
"UDP Query User{1C0EF8FA-9327-4934-A9CF-0A6C401F6D9B}C:\\program files\\ea sports\\nhl08\\nhl2008.exe"= TCP:C:\program files\ea sports\nhl08\nhl2008.exe:nhl2008
"{BB93A364-29CE-4471-8A8D-0427EE503372}"= UDP:C:\Program Files\EA Sports\EA SPORTS online\SportsWrapper.exe:SportsWrapper
"{0E00767A-9216-4BA8-B36B-F552C1591F1B}"= TCP:C:\Program Files\EA Sports\EA SPORTS online\SportsWrapper.exe:SportsWrapper
"{7FDCC7F9-7C63-4F32-A0FD-967282029470}"= UDP:3703:Adobe Version Cue CS3 Server
"{A54138F7-585B-45C2-B398-2708C437E641}"= UDP:3704:Adobe Version Cue CS3 Server
"{88F3E162-3910-4B5C-81C9-26A4EF828D5F}"= UDP:50900:Adobe Version Cue CS3 Server
"{CF41B43C-48BF-45B6-A844-345E7BD558F2}"= UDP:50901:Adobe Version Cue CS3 Server
"{E9035596-E03B-4100-8521-8ACD9A3F79FD}"= UDP:C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe:Adobe Version Cue CS3 Server
"{940BD430-EBCF-4C4B-83D7-C7AF61054A01}"= TCP:C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe:Adobe Version Cue CS3 Server
"TCP Query User{56B436A0-8D6B-47B1-A43B-8253FFB3D7B4}C:\\program files\\safari\\safari.exe"= UDP:C:\program files\safari\safari.exe:Safari Web Browser
"UDP Query User{DE366E98-DB01-4FF2-AEF9-DE26FDD6F8D5}C:\\program files\\safari\\safari.exe"= TCP:C:\program files\safari\safari.exe:Safari Web Browser

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"DoNotAllowExceptions"= 0 (0x0)

R1 DLARTL_M;DLARTL_M;C:\Windows\system32\Drivers\DLARTL_M.SYS [2007-02-08 20:05]
R2 AERTFilters;Andrea RT Filters Service;C:\Windows\system32\AERTSrv.exe [2007-12-05 06:17]
R2 dlcq_device;dlcq_device;C:\Windows\system32\dlcqcoms.exe [2006-12-12 01:22]
R2 SBSDWSCService;SBSD Security Center Service;C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2008-01-28 11:43]
R2 sprtsvc_dellsupportcenter;SupportSoft Sprocket Service (dellsupportcenter);C:\Program Files\Dell Support Center\bin\sprtsvc.exe [2007-10-09 19:56]
S2 0061871212152662mcinstcleanup;McAfee Application Installer Cleanup (0061871212152662);C:\Windows\TEMP\006187~1.EXE C:\PROGRA~1\COMMON~1\McAfee\INSTAL~1\cleanup.ini []
S3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver;C:\Windows\system32\DRIVERS\bcmwl6.sys [2006-11-02 00:30]
S3 NAL;Nal Service ;C:\Windows\system32\Drivers\iqvw32.sys [2007-03-09 15:04]
S3 R300;R300;C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-02 00:36]
S3 tapvpn;TAP VPN Adapter;C:\Windows\system32\DRIVERS\tapvpn.sys [2008-03-12 19:38]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\K]
\shell\AutoRun\command - K:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{214b9213-29c4-11dd-b075-00e034123456}]
\shell\AutoRun\command - K:\Autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3d670c13-8f53-11dc-bc1e-001aa090d113}]
\shell\AutoRun\command - K:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{68df2eb4-5b9f-11dc-aed8-806e6f6e6963}]
\shell\AutoRun\command - F:\Autorun.exe

.
Contents of the 'Scheduled Tasks' folder
"2008-05-15 12:56:06 C:\Windows\Tasks\McDefragTask.job"
- c:\program files\mcafee\mqc\QcConsol.exe
"2008-03-03 16:25:30 C:\Windows\Tasks\McQcTask.job"
- c:\program files\mcafee\mqc\QcConsol.exe
"2008-05-27 03:00:00 C:\Windows\Tasks\Norton Internet Security - Run Full System Scan - Calvin.job"
- C:\Program Files\Norton Internet Security\Norton AntiVirus\Navw32.exeB/TASK:
"2008-05-30 14:25:00 C:\Windows\Tasks\User_Feed_Synchronization-{0FC40BB8-6DE1-4C3A-BFFC-6DC12BF1D332}.job"
- C:\Windows\system32\msfeedssync.exe
"2008-05-30 14:25:24 C:\Windows\Tasks\User_Feed_Synchronization-{893D5EE2-FA10-4615-B039-239B29105AB9}.job"
- C:\Windows\system32\msfeedssync.exe
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-30 07:12:35
Windows 6.0.6001 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Windows\System32\audiodg.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
C:\PROGRA~1\COMMON~1\McAfee\McProxy\McProxy.exe
C:\PROGRA~1\COMMON~1\McAfee\RedirSvc\RedirSvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\Mcshield.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\PROGRA~1\McAfee\MPS\mps.exe
C:\Program Files\McAfee\MSK\msksrver.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
C:\Program Files\McAfee\MPS\mpsevh.exe
C:\Windows\System32\WUDFHost.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
C:\PROGRA~1\McAfee.com\Agent\mcagent.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\wbem\unsecapp.exe
C:\Windows\System32\rundll32.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Dell DataSafe Online\Bin\DataSafeOnlineTrayIcon.exe
C:\Program Files\Windows Mail\WinMail.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\ehome\mcupdate.exe
.
**************************************************************************
.
Completion time: 2008-05-30 7:26:28 - machine was rebooted
ComboFix-quarantined-files.txt 2008-05-30 14:26:23
ComboFix2.txt 2008-05-29 23:41:08
ComboFix3.txt 2008-05-14 00:47:57
ComboFix4.txt 2008-05-13 01:49:51
ComboFix5.txt 2008-04-26 15:23:27

Pre-Run: 332,017,025,024 bytes free
Post-Run: 331,452,567,552 bytes free

13213 --- E O F --- 2008-05-28 02:47:11

[Gecko]

cc481613,

I need to see a new hijackthis log please.

[cc481613]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:13:21 AM, on 01/06/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\McAfee\MPS\mpsevh.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\taskeng.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe
C:\Program Files\Dell Photo AIO Printer 966\memcard.exe
C:\Program Files\McAfee\MSK\mskagent.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Dell DataSafe Online\Bin\DataSafeOnlineScheduler.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\LimeWire\LimeWire.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Dell DataSafe Online\Bin\DataSafeOnlineTrayIcon.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Mail\WinMail.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Program Files\Safari\Safari.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Calvin\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://sympatico.msn.ca/?lang=en-CA
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\PROGRA~1\mcafee\VIRUSS~1\scriptcl.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [ECenter] c:\dell\E-Center\EULALauncher.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [dlcqmon.exe] "C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe"
O4 - HKLM\..\Run: [MemoryCardManager] "C:\Program Files\Dell Photo AIO Printer 966\memcard.exe"
O4 - HKLM\..\Run: [MskAgentexe] C:\Program Files\McAfee\MSK\MskAgent.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [{7cea24c7-d3e8-c48b-f141-a11cf8a82b1d}] C:\Windows\System32\Rundll32.exe "C:\Windows\system32\{23dd81ce-e488-eec4-be5c-ebcffe0a6446}.dll" DllStart
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Dell DataSafe Scheduler] "C:\Program Files\Dell DataSafe Online\Bin\DataSafeOnlineScheduler.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files\Bonjour\ExplorerPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O15 - ESC Trusted Zone: http://*.update.microsoft.com
O16 - DPF: {3860DD98-0549-4D50-AA72-5D17D200EE10} (Windows Live OneCare safety scanner control) - http://cdn.scan.onecare.live.com/resour ... cctrl2.cab
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/v ... .2.3.5.cab
O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} (WMI Class) - https://support.dell.com/systemprofiler/SysProExe.CAB
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/So ... b56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-CA/a-U ... E_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b56907.cab
O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Windows\system32\AERTSrv.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: dlcq_device - - C:\Windows\system32\dlcqcoms.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

--
End of file - 11689 bytes

[Gecko]

[cc481613]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:55:16 AM, on 03/06/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe
C:\Program Files\Dell Photo AIO Printer 966\memcard.exe
C:\Program Files\McAfee\MSK\mskagent.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Dell DataSafe Online\Bin\DataSafeOnlineScheduler.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\LimeWire\LimeWire.exe
C:\Program Files\Dell DataSafe Online\Bin\DataSafeOnlineTrayIcon.exe
C:\Windows\System32\rundll32.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Mail\WinMail.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\McAfee\MPS\mpsevh.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Safari\Safari.exe
C:\Users\Calvin\Desktop\HiJackThis.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\msfeedssync.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://sympatico.msn.ca/?lang=en-CA
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\PROGRA~1\mcafee\VIRUSS~1\scriptcl.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [ECenter] c:\dell\E-Center\EULALauncher.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [dlcqmon.exe] "C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe"
O4 - HKLM\..\Run: [MemoryCardManager] "C:\Program Files\Dell Photo AIO Printer 966\memcard.exe"
O4 - HKLM\..\Run: [MskAgentexe] C:\Program Files\McAfee\MSK\MskAgent.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Dell DataSafe Scheduler] "C:\Program Files\Dell DataSafe Online\Bin\DataSafeOnlineScheduler.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files\Bonjour\ExplorerPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O15 - ESC Trusted Zone: http://*.update.microsoft.com
O16 - DPF: {3860DD98-0549-4D50-AA72-5D17D200EE10} (Windows Live OneCare safety scanner control) - http://cdn.scan.onecare.live.com/resour ... cctrl2.cab
O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} (WMI Class) - https://support.dell.com/systemprofiler/SysProExe.CAB
O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Windows\system32\AERTSrv.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: dlcq_device - - C:\Windows\system32\dlcqcoms.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

--
End of file - 11017 bytes

[Gecko]

cc481613,

Your log is clean, how is it running now?