ComboFix 10-09-13.01 - Neil 09/13/2010 20:44:59.2.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3062.1960 [GMT -4:00]
Running from: c:\users\Neil\Desktop\ComboFix.exe
Command switches used :: c:\users\Neil\Desktop\CFScript.txt
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Created a new restore point
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\program files\Spybot - Search & Destroy
c:\program files\Spybot - Search & Destroy\advcheck.dll
c:\program files\Spybot - Search & Destroy\SDWinSec.exe
c:\program files\uTorrent
c:\programdata\Spybot - Search & Destroy
c:\programdata\Spybot - Search & Destroy\Logs\Checks.100815-2308.log
c:\programdata\Spybot - Search & Destroy\Logs\Checks.100815-2341.txt
c:\programdata\Spybot - Search & Destroy\Logs\Checks.100816-1101.log
c:\programdata\Spybot - Search & Destroy\Logs\Checks.100816-1311.txt
c:\programdata\Spybot - Search & Destroy\Logs\Fixes.100815-2343.txt
c:\programdata\Spybot - Search & Destroy\Logs\Resident.log
c:\programdata\Spybot - Search & Destroy\Logs\Update downloads.log
c:\programdata\Spybot - Search & Destroy\ProcCache.sbc
c:\programdata\Spybot - Search & Destroy\Recovery\FraudSysguard.zip
c:\programdata\Spybot - Search & Destroy\Recovery\FraudSysguard1.zip
c:\users\Neil\AppData\Roaming\LimeWire
c:\users\Neil\AppData\Roaming\LimeWire\active.mojito
c:\users\Neil\AppData\Roaming\LimeWire\avg\database\avi7.avg
c:\users\Neil\AppData\Roaming\LimeWire\avg\database\incavi.avm
c:\users\Neil\AppData\Roaming\LimeWire\avg\database\version.nfo
c:\users\Neil\AppData\Roaming\LimeWire\browser\xul-v2.0b2.5-do-not-remove
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\AccessibleMarshal.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\chrome\branding.jar
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\chrome\branding.manifest
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\chrome\classic.jar
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\chrome\classic.manifest
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\chrome\comm.jar
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\chrome\comm.manifest
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\chrome\en-US.jar
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\chrome\en-US.manifest
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\chrome\limewire.jar
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\chrome\limewire.manifest
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\chrome\pippki.jar
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\chrome\pippki.manifest
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\chrome\toolkit.jar
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\chrome\toolkit.manifest
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\accessibility-msaa.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\accessibility.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\alerts.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\appshell.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\appshell_modal.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\appshell_modal.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\appstartup.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\auth.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\autocomplete.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\autoconfig.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\autoconfig.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\caps.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\chardet.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\chrome.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\commandhandler.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\commandlines.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\composer.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\content_base.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\content_html.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\content_htmldoc.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\content_xmldoc.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\content_xslt.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\content_xtf.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\contentprefs.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\cookie.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\directory.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\docshell_base.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\dom.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\dom_base.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\dom_canvas.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\dom_core.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\dom_css.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\dom_events.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\dom_html.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\dom_json.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\dom_loadsave.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\dom_offline.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\dom_range.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\dom_sidebar.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\dom_storage.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\dom_stylesheets.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\dom_svg.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\dom_traversal.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\dom_views.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\dom_xbl.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\dom_xpath.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\dom_xul.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\downloads.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\editor.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\embed_base.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\extensions.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\exthandler.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\exthelper.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\fastfind.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\FeedProcessor.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\feeds.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\find.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\gfx.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\htmlparser.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\imgicon.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\imglib2.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\inspector.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\intl.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\jar.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\jsconsole-clhandler.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\jsdservice.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\layout_base.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\layout_printing.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\layout_xul.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\layout_xul_tree.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\locale.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\loginmgr.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\lwbrk.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\mimetype.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\mozbrwsr.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\mozfind.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\necko.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\necko_about.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\necko_cache.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\necko_cookie.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\necko_dns.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\necko_file.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\necko_ftp.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\necko_http.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\necko_res.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\necko_socket.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\necko_strconv.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\necko_viewsource.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\nsAddonRepository.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\nsBadCertHandler.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\nsBlocklistService.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\nsContentDispatchChooser.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\nsContentPrefService.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\nsDefaultCLH.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\nsDictionary.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\nsDownloadManagerUI.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\nsExtensionManager.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\nsHandlerService.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\nsHelperAppDlg.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\nsLivemarkService.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\nsLoginInfo.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\nsLoginManager.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\nsLoginManagerPrompter.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\nsPostUpdateWin.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\nsProgressDialog.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\nsProxyAutoConfig.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\nsResetPref.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\nsTaggingService.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\nsTryToClose.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\nsUpdateService.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\nsURLFormatter.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\nsWebHandlerApp.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\nsXmlRpcClient.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\nsXULAppInstall.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\oji.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\parentalcontrols.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\pipboot.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\pipboot.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\pipnss.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\pipnss.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\pippki.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\pippki.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\places.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\plugin.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\pluginGlue.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\pref.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\prefetch.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\profile.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\proxyObject.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\rdf.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\satchel.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\saxparser.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\shistory.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\spellchecker.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\storage-Legacy.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\storage.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\toolkitprofile.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\transformiix.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\txEXSLTRegExFunctions.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\txmgr.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\txtsvc.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\uconv.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\unicharutil.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\universalchardet.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\update.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\uriloader.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\urlformatter.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\webBrowser_core.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\webbrowserpersist.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\webshell_idls.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\websrvcs.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\widget.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\windowds.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\windowwatcher.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\xml-rpc.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\xmlextras.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\xpcom_base.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\xpcom_components.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\xpcom_ds.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\xpcom_io.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\xpcom_system.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\xpcom_thread.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\xpcom_xpti.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\xpconnect.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\xpinstall.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\xulapp.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\xulapp_setup.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\xuldoc.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\xultmpl.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\xulutil.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\components\zipwriter.xpt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\crashreporter.exe
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\crashreporter.ini
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\defaults\autoconfig\platform.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\defaults\autoconfig\prefcalls.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\defaults\pref\xulrunner.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\defaults\profile\chrome\userChrome-example.css
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\defaults\profile\chrome\userContent-example.css
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\defaults\profile\localstore.rdf
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\defaults\profile\US\chrome\userChrome-example.css
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\defaults\profile\US\chrome\userContent-example.css
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\defaults\profile\US\localstore.rdf
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\dependentlibs.list
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\dictionaries\en-US.aff
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\dictionaries\en-US.dic
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\freebl3.chk
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\freebl3.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\greprefs\all.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\greprefs\security-prefs.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\greprefs\xpinstall.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\IA2Marshal.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\javaxpcom.jar
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\javaxpcomglue.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\js3250.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\LICENSE
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\modules\debug.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\modules\DownloadUtils.jsm
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\modules\ISO8601DateUtils.jsm
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\modules\JSON.jsm
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\modules\Microformats.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\modules\PluralForm.jsm
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\modules\utils.js
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\modules\XPCOMUtils.jsm
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\mozctl.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\mozctlx.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\MSVCP71.DLL
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\msvcr71.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\nspr4.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\nss3.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\nssckbi.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\nssdbm3.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\nssutil3.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\platform.ini
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\plc4.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\plds4.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\plugins\npnul32.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\README.txt
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\arrow.gif
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\arrowd.gif
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\broken-image.gif
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\charsetalias.properties
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\charsetData.properties
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\contenteditable.css
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\designmode.css
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\dtd\mathml.dtd
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\dtd\xhtml11.dtd
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\EditorOverride.css
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\entityTables\html40Latin1.properties
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\entityTables\html40Special.properties
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\entityTables\html40Symbols.properties
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\entityTables\htmlEntityVersions.properties
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\entityTables\mathml20.properties
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\entityTables\transliterate.properties
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\fonts\mathfont.properties
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\fonts\mathfontStandardSymbolsL.properties
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\fonts\mathfontSTIXNonUnicode.properties
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\fonts\mathfontSTIXSize1.properties
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\fonts\mathfontSymbol.properties
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\fonts\mathfontUnicode.properties
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\forms.css
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\grabber.gif
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\hiddenWindow.html
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\html.css
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\html\folder.png
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\langGroups.properties
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\language.properties
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\loading-image.gif
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\mathml.css
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\quirk.css
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\svg.css
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\table-add-column-after-active.gif
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\table-add-column-after-hover.gif
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\table-add-column-after.gif
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\table-add-column-before-active.gif
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\table-add-column-before-hover.gif
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\table-add-column-before.gif
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\table-add-row-after-active.gif
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\table-add-row-after-hover.gif
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\table-add-row-after.gif
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\table-add-row-before-active.gif
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\table-add-row-before-hover.gif
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\table-add-row-before.gif
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\table-remove-column-active.gif
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\table-remove-column-hover.gif
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\table-remove-column.gif
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\table-remove-row-active.gif
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\table-remove-row-hover.gif
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\table-remove-row.gif
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\ua.css
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\viewsource.css
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\res\wincharset.properties
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\smime3.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\softokn3.chk
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\softokn3.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\sqlite3.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\ssl3.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\updater.exe
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\version.properties
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\xpcom.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\xpcshell.exe
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\xpicleanup.exe
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\xpidl.exe
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\xpt_dump.exe
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\xpt_link.exe
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\xul.dll
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\xulrunner-stub.exe
c:\users\Neil\AppData\Roaming\LimeWire\browser\xulrunner\xulrunner.exe
c:\users\Neil\AppData\Roaming\LimeWire\certificate\limewire.keystore
c:\users\Neil\AppData\Roaming\LimeWire\createtimes.cache
c:\users\Neil\AppData\Roaming\LimeWire\downloads.dat
c:\users\Neil\AppData\Roaming\LimeWire\fileurns.cache
c:\users\Neil\AppData\Roaming\LimeWire\gnutella.net
c:\users\Neil\AppData\Roaming\LimeWire\installation.props
c:\users\Neil\AppData\Roaming\LimeWire\library.dat
c:\users\Neil\AppData\Roaming\LimeWire\library5.dat
c:\users\Neil\AppData\Roaming\LimeWire\limewire.props
c:\users\Neil\AppData\Roaming\LimeWire\lock
c:\users\Neil\AppData\Roaming\LimeWire\mojito.props
c:\users\Neil\AppData\Roaming\LimeWire\mozilla-profile\.autoreg
c:\users\Neil\AppData\Roaming\LimeWire\mozilla-profile\Cache\_CACHE_001_
c:\users\Neil\AppData\Roaming\LimeWire\mozilla-profile\Cache\_CACHE_002_
c:\users\Neil\AppData\Roaming\LimeWire\mozilla-profile\Cache\_CACHE_003_
c:\users\Neil\AppData\Roaming\LimeWire\mozilla-profile\Cache\_CACHE_MAP_
c:\users\Neil\AppData\Roaming\LimeWire\mozilla-profile\Cache\1FEE1D13d01
c:\users\Neil\AppData\Roaming\LimeWire\mozilla-profile\Cache\64A08667d01
c:\users\Neil\AppData\Roaming\LimeWire\mozilla-profile\Cache\7BD6A121d01
c:\users\Neil\AppData\Roaming\LimeWire\mozilla-profile\cert8.db
c:\users\Neil\AppData\Roaming\LimeWire\mozilla-profile\compreg.dat
c:\users\Neil\AppData\Roaming\LimeWire\mozilla-profile\cookies.sqlite
c:\users\Neil\AppData\Roaming\LimeWire\mozilla-profile\downloads.sqlite
c:\users\Neil\AppData\Roaming\LimeWire\mozilla-profile\extensions.cache
c:\users\Neil\AppData\Roaming\LimeWire\mozilla-profile\extensions.ini
c:\users\Neil\AppData\Roaming\LimeWire\mozilla-profile\history.dat
c:\users\Neil\AppData\Roaming\LimeWire\mozilla-profile\key3.db
c:\users\Neil\AppData\Roaming\LimeWire\mozilla-profile\permissions.sqlite
c:\users\Neil\AppData\Roaming\LimeWire\mozilla-profile\places.sqlite-journal
c:\users\Neil\AppData\Roaming\LimeWire\mozilla-profile\places.sqlite
c:\users\Neil\AppData\Roaming\LimeWire\mozilla-profile\pluginreg.dat
c:\users\Neil\AppData\Roaming\LimeWire\mozilla-profile\prefs.js
c:\users\Neil\AppData\Roaming\LimeWire\mozilla-profile\secmod.db
c:\users\Neil\AppData\Roaming\LimeWire\mozilla-profile\XPC.mfl
c:\users\Neil\AppData\Roaming\LimeWire\mozilla-profile\xpti.dat
c:\users\Neil\AppData\Roaming\LimeWire\player.props
c:\users\Neil\AppData\Roaming\LimeWire\promotion\promodb.backup
c:\users\Neil\AppData\Roaming\LimeWire\promotion\promodb.data
c:\users\Neil\AppData\Roaming\LimeWire\promotion\promodb.properties
c:\users\Neil\AppData\Roaming\LimeWire\promotion\promodb.script
c:\users\Neil\AppData\Roaming\LimeWire\questions.props
c:\users\Neil\AppData\Roaming\LimeWire\responses.cache
c:\users\Neil\AppData\Roaming\LimeWire\restaccess.txt
c:\users\Neil\AppData\Roaming\LimeWire\simpp.cert
c:\users\Neil\AppData\Roaming\LimeWire\simpp.xml
c:\users\Neil\AppData\Roaming\LimeWire\spam.dat
c:\users\Neil\AppData\Roaming\LimeWire\tables.props
c:\users\Neil\AppData\Roaming\LimeWire\ttdata.cache
c:\users\Neil\AppData\Roaming\LimeWire\ttroot.cache
c:\users\Neil\AppData\Roaming\LimeWire\update.cert
c:\users\Neil\AppData\Roaming\LimeWire\urns.dat
c:\users\Neil\AppData\Roaming\LimeWire\version.xml
c:\users\Neil\AppData\Roaming\LimeWire\versions.props
c:\users\Neil\AppData\Roaming\LimeWire\xml\data\audio.sxml3
c:\users\Neil\AppData\Roaming\uTorrent
c:\users\Neil\AppData\Roaming\uTorrent\[ZA] ZOIDS Fuzors (Dubbed) 01-26 [BATCH].torrent
c:\users\Neil\AppData\Roaming\uTorrent\3 Idiots 2009 Hindi Repack Pre-DVDRip x264 E-SuB xRG.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Bejeweled 2 -Deluxe- (REFLEXIVE GAMES) (CRACKED) (DIRECT PLAY) [blaze69].torrent
c:\users\Neil\AppData\Roaming\uTorrent\Black Ps2 DvD.RiP.NTSC.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Brawl.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Cowboy.Bebop.The.Movie[XviD][DVDRip][EngDub].torrent
c:\users\Neil\AppData\Roaming\uTorrent\Craig Armstrong.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Cyberlink YouCam 3.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Cyberlink.YouCam.v3.0.1811.7429-DVT.torrent
c:\users\Neil\AppData\Roaming\uTorrent\CyberLink_Power2Go_v6.0_Multilanguage.torrent
c:\users\Neil\AppData\Roaming\uTorrent\dht.dat
c:\users\Neil\AppData\Roaming\uTorrent\dht.dat.old
c:\users\Neil\AppData\Roaming\uTorrent\Excite_Truck_(NTSC)_(WII).torrent
c:\users\Neil\AppData\Roaming\uTorrent\Games nokia 5800XM.torrent
c:\users\Neil\AppData\Roaming\uTorrent\George Lopez Series.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Gumball 3000 - The Movie.torrent
c:\users\Neil\AppData\Roaming\uTorrent\I-Like-Em-White-Erin-Moore.mov.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Iron Man 2 Encoded TS XviD SAFCuk009.torrent
c:\users\Neil\AppData\Roaming\uTorrent\LimeWire PRO 5.5.13 + crack.torrent
c:\users\Neil\AppData\Roaming\uTorrent\LimeWire Pro 5.5.8 - newest version.torrent
c:\users\Neil\AppData\Roaming\uTorrent\LimeWire PRO v5.4.6.1 Final By ChattChitto.torrent
c:\users\Neil\AppData\Roaming\uTorrent\LimeWire PRO v5.4.7 Final [ChattChitto RG].torrent
c:\users\Neil\AppData\Roaming\uTorrent\LimeWire.PRO.5.4.8.1.Multilingual.Retail.torrent
c:\users\Neil\AppData\Roaming\uTorrent\LimeWire.Pro.v5.5.8.rar.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Mario Kart Wii.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Medal_of_Honor_Heroes_2_Usa_Wii-GAMEOVER.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Mega_Pack_for_5800xm.torrent
c:\users\Neil\AppData\Roaming\uTorrent\New folder.torrent
c:\users\Neil\AppData\Roaming\uTorrent\New Super Mario Bro.s.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Nokia 5800 Apps.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Nokia Collection [76 Applications - 31Games - 100 theme - 500 Pic SMS].torrent
c:\users\Neil\AppData\Roaming\uTorrent\P90X Complete Disk Collection.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Pacman World 3 NTSC-U-USA PS2DVD.torrent
c:\users\Neil\AppData\Roaming\uTorrent\PS2 Gran Turismo 4.torrent
c:\users\Neil\AppData\Roaming\uTorrent\RarLab.WinRAR.v3.91.Cracked.PROPER-EAT.torrent
c:\users\Neil\AppData\Roaming\uTorrent\resume.dat
c:\users\Neil\AppData\Roaming\uTorrent\resume.dat.old
c:\users\Neil\AppData\Roaming\uTorrent\rss.dat
c:\users\Neil\AppData\Roaming\uTorrent\rss.dat.old
c:\users\Neil\AppData\Roaming\uTorrent\Run Like Hell (NTSC) PS2.7z.torrent
c:\users\Neil\AppData\Roaming\uTorrent\s60v5 Games.torrent
c:\users\Neil\AppData\Roaming\uTorrent\sega genesis collection^ps2.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Sega Genesis For The PS2.torrent
c:\users\Neil\AppData\Roaming\uTorrent\settings.dat
c:\users\Neil\AppData\Roaming\uTorrent\settings.dat.old
c:\users\Neil\AppData\Roaming\uTorrent\SPB Software Mobile for Symbian - Unsigned - Cracked.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Super Mario Galaxy NTSC.torrent
c:\users\Neil\AppData\Roaming\uTorrent\The Bard's Tale PS2DVD PAL + ESR 0.24 Patcher (Done).torrent
c:\users\Neil\AppData\Roaming\uTorrent\The Bards Tale USA NTSC PS2DVD.torrent
c:\users\Neil\AppData\Roaming\uTorrent\The Book Of Eli 2010 TELESYNC H264 AAC-SecretMyth (Kingdom-Release).torrent
c:\users\Neil\AppData\Roaming\uTorrent\The Matrix Trilogy.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Top Gear 15x04 HDTV XviD FoV.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Top Gear 15x05 HDTV XviD FoV.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Top Gear s15e03 .thebox.hannibal.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Top Gear S15E06.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Top Gear Season 14 Episode 7.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Top.Gear.14x06.HDTV.XviD-FoV.avi.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Top.Gear.S15E01.HDTV.XviD-BiA.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Top.Gear.S15E03.HDTV.XviD-BiA.avi.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Top.Gear.s15e2.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Transformers Revenge of the Fallen[2009]DvDrip[Eng]-FXG.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Turbotax.Deluxe.2009-WIN.torrent
c:\users\Neil\AppData\Roaming\uTorrent\utorrent.lng
c:\users\Neil\AppData\Roaming\uTorrent\Valentine's Day 2010 TELESYNC H264 AAC-SecretMyth (Kingdom-Release).torrent
c:\users\Neil\AppData\Roaming\uTorrent\When In Rome 2010 XviD Re-Encoded CAM SAFCuk009.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Wi-Foo - The Secrets Of Wireless Hacking-C00KIEEE.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Wii Play.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Wii Sports(compressed).torrent
c:\users\Neil\AppData\Roaming\uTorrent\Winamp Pro 5.58 Build 2975 Final + Serial-[HB].torrent
c:\users\Neil\AppData\Roaming\uTorrent\Winamp PRO v5.572 Build 2830 + Serials [ChattChitto RG].torrent
c:\users\Neil\AppData\Roaming\uTorrent\Winamp Pro v5.572 Build 2830.rar.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Winamp.Pro.5.57.(Build 2789).Final.Multilanguage.torrent
c:\users\Neil\AppData\Roaming\uTorrent\Winamp.v5.581.Build.2985.Incl.Keygen-CORE.torrent
c:\users\Neil\AppData\Roaming\uTorrent\WinRAR 3.93 x86.torrent
c:\users\Neil\AppData\Roaming\uTorrent\WinRar v3.91 x32 x64 + Working Patch.torrent
.
((((((((((((((((((((((((( Files Created from 2010-08-14 to 2010-09-14 )))))))))))))))))))))))))))))))
.
2010-09-14 00:52 . 2010-09-14 00:54 -------- d-----w- c:\users\Neil\AppData\Local\temp
2010-09-14 00:52 . 2010-09-14 00:52 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-09-14 00:52 . 2010-09-14 00:52 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-09-12 01:50 . 2010-09-12 01:50 -------- d-----w- c:\program files\ERUNT
2010-09-09 03:20 . 2010-09-09 03:20 -------- d-----w- c:\users\Neil\AppData\Local\GMail Drive
2010-09-09 03:19 . 2010-09-11 04:53 -------- d-----w- c:\windows\system32\ShellExt
2010-08-29 15:46 . 2010-08-29 15:46 -------- d-----w- c:\users\Neil\Office Genuine Advantage
2010-08-19 19:01 . 2010-08-19 19:01 -------- d-----w- C:\rsit
2010-08-17 15:47 . 2010-08-17 15:47 -------- d-----w- c:\users\Neil\AppData\Local\AVG Security Toolbar
2010-08-17 02:21 . 2010-08-19 18:33 -------- d-----w- c:\programdata\AVG Security Toolbar
2010-08-16 02:59 . 2010-08-21 03:23 -------- d-----w- c:\program files\VS Revo Group
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-10 17:43 . 2010-01-31 18:12 -------- d-----w- c:\users\Neil\AppData\Roaming\vlc
2010-09-09 01:50 . 2010-07-15 01:27 -------- d-----w- c:\program files\Winamp
2010-09-09 01:50 . 2010-07-15 01:27 -------- d-----w- c:\users\Neil\AppData\Roaming\Winamp
2010-09-05 13:13 . 2010-04-29 04:30 -------- d-----w- c:\program files\Microsoft Silverlight
2010-08-30 17:39 . 2010-08-14 22:08 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-08-29 16:38 . 2010-01-07 22:09 -------- d-----w- c:\program files\Nokia
2010-08-29 16:38 . 2010-01-07 21:54 -------- d-----w- c:\programdata\Installations
2010-08-27 22:29 . 2010-01-07 00:13 273920 ----a-w- c:\windows\system32\drivers\afd.sys
2010-08-22 18:44 . 2010-01-08 14:46 -------- d-----w- c:\users\Neil\AppData\Roaming\Nokia
2010-08-19 19:01 . 2010-08-14 22:01 -------- d-----w- c:\program files\Trend Micro
2010-08-15 01:32 . 2010-08-14 02:00 -------- d-----w- c:\programdata\Update
2010-08-14 22:08 . 2010-08-14 22:08 -------- d-----w- c:\users\Neil\AppData\Roaming\Malwarebytes
2010-08-14 22:08 . 2010-08-14 22:08 -------- d-----w- c:\programdata\Malwarebytes
2010-08-14 21:53 . 2010-01-07 03:39 -------- d-----w- c:\programdata\avg9
2010-08-14 02:01 . 2010-08-14 02:01 57344 --sha-r- c:\windows\system32\IMJP10KF.dll
2010-08-13 14:49 . 2008-02-18 06:16 -------- d-----w- c:\program files\Microsoft Works
2010-08-13 14:40 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-07-15 15:06 . 2010-01-07 03:40 243024 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-07-15 15:06 . 2010-07-15 15:06 12536 ----a-w- c:\windows\system32\avgrsstx.dll
2010-07-15 15:05 . 2010-01-07 03:40 216400 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2010-07-11 16:07 . 2008-02-18 06:45 1066544 ----a-w- c:\windows\system32\mfc71.dll
2010-06-26 06:05 . 2010-08-13 14:36 916480 ----a-w- c:\windows\system32\wininet.dll
2010-06-26 06:02 . 2010-08-13 14:36 71680 ----a-w- c:\windows\system32\iesetup.dll
2010-06-26 06:02 . 2010-08-13 14:36 109056 ----a-w- c:\windows\system32\iesysprep.dll
2010-06-26 04:25 . 2010-08-13 14:36 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2010-06-25 01:58 . 2010-06-25 01:58 77824 ----a-w- c:\programdata\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\Installer\CommonCustomActions\Run_XML6_SP1.exe
2010-06-25 01:58 . 2010-06-25 01:58 50000 ----a-w- c:\programdata\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\Installer\CommonCustomActions\pcswpc.exe
2010-06-22 19:52 . 2010-06-25 01:58 69214784 ----a-w- c:\programdata\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\Installer.exe
2010-06-21 13:37 . 2010-08-13 14:36 2037760 ----a-w- c:\windows\system32\win32k.sys
2010-06-18 17:31 . 2010-08-13 14:36 36864 ----a-w- c:\windows\system32\rtutils.dll
2010-06-18 15:04 . 2010-08-13 14:36 302080 ----a-w- c:\windows\system32\drivers\srv.sys
2010-06-18 15:04 . 2010-08-13 14:36 144896 ----a-w- c:\windows\system32\drivers\srv2.sys
2010-06-16 16:04 . 2010-08-13 14:35 905088 ----a-w- c:\windows\system32\drivers\tcpip.sys
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{A3BC75A2-1F87-4686-AA43-5347D756017C}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2010-04-19 2117704]
[HKEY_CLASSES_ROOT\clsid\{a3bc75a2-1f87-4686-aa43-5347d756017c}]
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
2010-04-19 14:25 2117704 ----a-w- c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2010-04-19 2117704]
[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2010-04-19 2117704]
[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-01-18 1033512]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-02-26 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-02-26 173592]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-02-26 150552]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\avgrsstx.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
[HKLM\~\startupfolder\C:^Users^Neil^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^albertino.exe]
path=c:\users\Neil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\albertino.exe
backup=c:\windows\pss\albertino.exe.Startup
backupExtension=.Startup
[HKLM\~\startupfolder\C:^Users^Neil^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^LimeWire On Startup.lnk]
path=c:\users\Neil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LimeWire On Startup.lnk
backup=c:\windows\pss\LimeWire On Startup.lnk.Startup
backupExtension=.Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer]
c:\program files\Common Files\Nokia\MPlatform\NokiaMServer [X]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-06-09 08:06 976832 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-06-20 02:04 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Aim]
2010-04-15 21:04 3827544 ----a-w- c:\program files\AIM\aim.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG9_TRAY]
2010-07-15 15:06 2065760 ----a-w- c:\progra~1\AVG\AVG9\avgtray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]
2007-09-28 03:10 122880 ------w- c:\program files\CyberLink\Power2Go\CLMLSvc.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
2007-05-09 00:24 54840 ----a-w- c:\program files\HP\HP Software Update\hpwuSchd2.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPAdvisor]
2007-10-02 00:10 1783136 ----a-w- c:\program files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpqSRMon]
2007-08-23 00:31 80896 ----a-w- c:\program files\HP\Digital Imaging\bin\HpqSRmon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpWirelessAssistant]
2007-09-13 16:47 480560 ----a-w- c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAAnotif]
2007-10-24 10:02 178712 ----a-w- c:\program files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OnScreenDisplay]
2007-09-04 20:54 554320 ----a-w- c:\program files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QlbCtrl]
2007-09-19 21:31 202032 ----a-w- c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QPService]
2007-12-20 02:27 468264 ----a-w- c:\program files\HP\QuickPlay\QPService.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
2007-10-09 16:59 4702208 ----a-w- c:\windows\RtHDVCpl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMSERIAL]
2007-01-17 13:34 634880 ----a-w- c:\program files\Motorola\SMSERIAL\sm56hlpr.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe]
2010-06-24 14:41 247144 ----a-w- c:\program files\TomTom HOME 2\TomTomHOMERunner.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UCam_Menu]
2009-05-20 03:16 222504 ------w- c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WAWifiMessage]
2007-01-08 23:53 311296 ----a-w- c:\program files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
2008-01-21 02:23 1008184 ----a-w- c:\program files\Windows Defender\MSASCui.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\YouCam Mirror Tray icon]
2009-10-20 02:23 167008 ------w- c:\program files\CyberLink\YouCam\YouCamTray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\AVG\AVG9\Toolbar\ToolbarBroker.exe [2010-04-19 430152]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\System32\Drivers\avgldx86.sys [2010-07-15 216400]
S1 AvgTdiX;AVG Free Network Redirector;c:\windows\System32\Drivers\avgtdix.sys [2010-07-15 243024]
S2 avg9wd;AVG Free WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [2010-07-15 308136]
S2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [2010-06-24 92008]
S3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\NETw5v32.sys [2009-10-26 4247552]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
.
------- Supplementary Scan -------
.
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
Trusted Zone: intuit.com\ttlc
Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll
FF - ProfilePath - c:\users\Neil\AppData\Roaming\Mozilla\Firefox\Profiles\jlc1tz2j.default\
FF - prefs.js: browser.startup.homepage - igoogle.com
FF - prefs.js: keyword.URL -
hxxp://www.google.com/search?btnI=I%27m ... g+Lucky&q=FF - component: c:\program files\AVG\AVG9\Firefox\components\avgssff.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
---- FIREFOX POLICIES ----
FF - user.js: network.protocol-handler.warn-external.dnupdate - false);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(network.protocol-handler.warn-external.dnupdate, falsec:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
**************************************************************************
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files:
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
c:\program files\AVG\AVG9\avgnsx.exe
c:\program files\AVG\AVG9\avgchsvx.exe
c:\program files\AVG\AVG9\avgrsx.exe
c:\program files\AVG\AVG9\avgcsrvx.exe
c:\windows\system32\igfxsrvc.exe
c:\program files\Common Files\Intuit\Update Service\IntuitUpdateService.exe
c:\windows\servicing\TrustedInstaller.exe
.
**************************************************************************
.
Completion time: 2010-09-13 21:04:23 - machine was rebooted
ComboFix-quarantined-files.txt 2010-09-14 01:04
ComboFix2.txt 2010-09-12 02:17
Pre-Run: 109,252,399,104 bytes free
Post-Run: 109,304,205,312 bytes free
- - End Of File - - 8782B053B739F6989F74D05DFC31CCD4
after combofix finished, i had a hard time saving the file. my mouse stopped working and no programs would open.
I managed to save the file, but i had to restart my computer to come back online.