Rooter.exe (v1.0.2) by Eric_71
.
SeDebugPrivilege granted successfully ...
.
Windows XP . (5.1.2600) Service Pack 3
[32_bits] - x86 Family 15 Model 4 Stepping 7, GenuineIntel
.
[wscsvc] STOPPED (state:1) : Security Center -> Disabled !
[SharedAccess] RUNNING (state:4)
Windows Firewall -> Enabled
.
Internet Explorer 8.0.6001.18702
Mozilla Firefox 3.0.3 (en-US)
.
A:\  [Removable]
C:\  [Fixed-NTFS] .. ( Total:465 Go - Free:279 Go )
D:\  [CD_Rom]
E:\  [Removable]
F:\  [Removable]
H:\  [Removable]
I:\  [Removable]
J:\  [Fixed-NTFS] .. ( Total:698 Go - Free:118 Go )
M:\  [CD_Rom]
.
Scan : 22:35.45
Path : C:\Documents and Settings\Dell 210\Local Settings\Temporary Internet Files\Content.IE5\DPPY596H\Rooter[1].exe
User : Dell 210 ( Administrator -> YES )
.
----------------------\\ Processes
.
Locked [System Process] (0)
______ System (4)
______ \SystemRoot\System32\smss.exe (864)
______ \??\C:\WINDOWS\system32\csrss.exe (1272)
______ \??\C:\WINDOWS\system32\winlogon.exe (1300)
______ C:\WINDOWS\system32\services.exe (1368)
______ C:\WINDOWS\system32\lsass.exe (1380)
______ C:\WINDOWS\system32\svchost.exe (1584)
______ C:\WINDOWS\system32\svchost.exe (1632)
______ C:\Program Files\Windows Defender\MsMpEng.exe (1828)
______ C:\WINDOWS\System32\svchost.exe (1888)
______ C:\WINDOWS\system32\svchost.exe (1964)
______ C:\WINDOWS\system32\svchost.exe (404)
______ C:\WINDOWS\system32\svchost.exe (680)
______ C:\WINDOWS\Explorer.EXE (920)
______ C:\WINDOWS\system32\spoolsv.exe (1072)
______ C:\WINDOWS\system32\svchost.exe (1172)
______ C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe (1244)
______ C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (1780)
______ C:\Program Files\Bonjour\mDNSResponder.exe (1924)
______ C:\WINDOWS\system32\hasplms.exe (324)
______ C:\Program Files\Java\jre6\bin\jqs.exe (368)
______ C:\Program Files\McAfee\SiteAdvisor\McSACore.exe (856)
______ C:\WINDOWS\system32\igfxpers.exe (424)
______ C:\WINDOWS\System32\DLA\DLACTRLW.EXE (604)
______ C:\Program Files\Norton AntiVirus\Engine\16.5.0.134\ccSvcHst.exe (720)
______ C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (824)
______ C:\WINDOWS\stsystra.exe (892)
______ C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (948)
______ C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe (1768)
______ C:\Program Files\Common Files\AOL\1224118735\ee\AOLSoftware.exe (1788)
______ C:\WINDOWS\system32\svchost.exe (276)
______ C:\Program Files\Windows Defender\MSASCui.exe (340)
______ C:\Program Files\Pure Networks\Network Magic\nmapp.exe (996)
______ C:\Program Files\iTunes\iTunesHelper.exe (2792)
______ C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (2820)
______ C:\Program Files\CleanMyPC\Registry Cleaner\RCHelper.exe (2900)
______ C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (3512)
______ C:\WINDOWS\System32\alg.exe (3600)
______ C:\Program Files\iPod\bin\iPodService.exe (3972)
______ C:\Documents and Settings\Dell 210\Application Data\SanDisk\Sansa Updater\SansaDispatch.exe (4056)
______ C:\WINDOWS\system32\ctfmon.exe (2480)
______ C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe (2596)
______ C:\Program Files\Rosewill\Common\RaUI.exe (3744)
______ C:\Program Files\Norton AntiVirus\Engine\16.5.0.134\ccSvcHst.exe (256)
______ C:\Program Files\Common Files\AOL\1224118735\ee\AOLDesktop.exe (2816)
______ C:\WINDOWS\system32\wbem\wmiprvse.exe (2956)
______ C:\WINDOWS\System32\svchost.exe (792)
______ C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe (3836)
______ C:\WINDOWS\system32\dllhost.exe (2688)
______ C:\WINDOWS\system32\msdtc.exe (5864)
______ C:\WINDOWS\system32\winmine.exe (4228)
______ C:\Program Files\Internet Explorer\iexplore.exe (4504)
______ C:\Program Files\Internet Explorer\iexplore.exe (5108)
______ C:\Program Files\Internet Explorer\iexplore.exe (1628)
______ C:\Program Files\Internet Explorer\iexplore.exe (4232)
______ C:\Program Files\Internet Explorer\iexplore.exe (4356)
______ C:\WINDOWS\system32\notepad.exe (1416)
______ C:\Documents and Settings\Dell 210\Local Settings\Temporary Internet Files\Content.IE5\DPPY596H\Rooter[1].exe (4616)
.
----------------------\\ Device\Harddisk0\
.
\Device\Harddisk0 [Sectors : 63 x 512 Bytes]
.
\Device\Harddisk0\Partition1 --[ MBR ]-- (Start_Offset:32256 | Length:500096991744)
.
----------------------\\ Scheduled Tasks
.
C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
C:\WINDOWS\Tasks\desktop.ini
C:\WINDOWS\Tasks\GBM - Backup-1-Full.job
C:\WINDOWS\Tasks\MP Scheduled Scan.job
C:\WINDOWS\Tasks\SA.DAT
C:\WINDOWS\Tasks\User_Feed_Synchronization-{AA98C927-A126-4890-9F9F-0BB7176F4F74}.job
.
----------------------\\ Registry
.
.
----------------------\\ Files & Folders
.
C:\DOCUME~1\DELL21~1\My Documents\My Backups\New Backup Job(1)\MP\MyDoc\LimeWire\Incomplete\T-76249-chief architect x1 crack.zip
C:\DOCUME~1\DELL21~1\My Documents\My Backups\New Backup Job(1)\MP\MyDoc\LimeWire\Incomplete\T-76251-chief architect x1 keygen [SSG].zip
[b]==> Cracks & Keygens <==[/b]
.
----------------------\\ Scan completed at 22:36.23
.
C:\Rooter$\Rooter_1.txt - (27/07/2009 | 22:36.23).c