ComboFix 09-12-08.01 - Todd 12/08/2009 10:38.4.2 - x86 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3063.2170 [GMT -7:00] Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe Command switches used :: c:\documents and settings\Todd\Desktop\CFScript.txt AV: McAfee VirusScan *On-access scanning disabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83} FW: McAfee Personal Firewall *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8} FILE :: "C:\2.js" "C:\4.js" "c:\documents and settings\Todd\Application Data\Sun\Java\Deployment\cache\6.0\44\3efada6c-5b5e90c5" "c:\documents and settings\Todd\Application Data\Sun\Java\Deployment\cache\6.0\58\7b79707a-27e4ca01" . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\2.js C:\4.js c:\documents and settings\Todd\Application Data\LimeWire c:\documents and settings\Todd\Application Data\LimeWire\414splashfree.png c:\documents and settings\Todd\Application Data\LimeWire\browser\xul-v2.0b2.4-do-not-remove c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\AccessibleMarshal.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\chrome\branding.jar c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\chrome\branding.manifest c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\chrome\classic.jar c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\chrome\classic.manifest c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\chrome\comm.jar c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\chrome\comm.manifest c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\chrome\en-US.jar c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\chrome\en-US.manifest c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\chrome\limewire.jar c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\chrome\limewire.manifest c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\chrome\pippki.jar c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\chrome\pippki.manifest c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\chrome\toolkit.jar c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\chrome\toolkit.manifest c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\accessibility-msaa.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\accessibility.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\alerts.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\appshell.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\appshell_modal.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\appshell_modal.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\appstartup.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\auth.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\autocomplete.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\autoconfig.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\autoconfig.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\caps.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\chardet.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\chrome.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\commandhandler.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\commandlines.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\composer.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\content_base.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\content_html.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\content_htmldoc.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\content_xmldoc.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\content_xslt.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\content_xtf.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\contentprefs.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\cookie.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\directory.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\docshell_base.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\dom.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\dom_base.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\dom_canvas.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\dom_core.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\dom_css.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\dom_events.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\dom_html.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\dom_json.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\dom_loadsave.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\dom_offline.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\dom_range.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\dom_sidebar.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\dom_storage.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\dom_stylesheets.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\dom_svg.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\dom_traversal.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\dom_views.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\dom_xbl.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\dom_xpath.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\dom_xul.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\downloads.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\editor.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\embed_base.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\extensions.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\exthandler.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\exthelper.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\fastfind.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\FeedProcessor.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\feeds.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\find.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\gfx.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\htmlparser.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\imgicon.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\imglib2.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\inspector.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\intl.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\jar.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\jsconsole-clhandler.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\jsdservice.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\layout_base.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\layout_printing.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\layout_xul.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\layout_xul_tree.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\locale.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\loginmgr.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\lwbrk.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\mimetype.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\mozbrwsr.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\mozfind.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\necko.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\necko_about.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\necko_cache.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\necko_cookie.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\necko_dns.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\necko_file.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\necko_ftp.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\necko_http.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\necko_res.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\necko_socket.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\necko_strconv.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\necko_viewsource.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\nsAddonRepository.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\nsBadCertHandler.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\nsBlocklistService.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\nsContentDispatchChooser.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\nsContentPrefService.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\nsDefaultCLH.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\nsDictionary.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\nsDownloadManagerUI.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\nsExtensionManager.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\nsHandlerService.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\nsHelperAppDlg.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\nsLivemarkService.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\nsLoginInfo.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\nsLoginManager.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\nsLoginManagerPrompter.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\nsPostUpdateWin.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\nsProgressDialog.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\nsProxyAutoConfig.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\nsResetPref.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\nsTaggingService.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\nsTryToClose.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\nsUpdateService.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\nsURLFormatter.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\nsWebHandlerApp.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\nsXmlRpcClient.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\nsXULAppInstall.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\oji.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\parentalcontrols.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\pipboot.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\pipboot.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\pipnss.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\pipnss.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\pippki.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\pippki.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\places.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\plugin.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\pluginGlue.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\pref.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\prefetch.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\profile.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\proxyObject.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\rdf.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\satchel.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\saxparser.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\shistory.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\spellchecker.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\storage-Legacy.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\storage.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\toolkitprofile.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\transformiix.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\txEXSLTRegExFunctions.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\txmgr.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\txtsvc.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\uconv.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\unicharutil.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\universalchardet.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\update.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\uriloader.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\urlformatter.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\webBrowser_core.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\webbrowserpersist.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\webshell_idls.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\websrvcs.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\widget.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\windowds.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\windowwatcher.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\xml-rpc.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\xmlextras.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\xpcom_base.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\xpcom_components.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\xpcom_ds.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\xpcom_io.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\xpcom_system.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\xpcom_thread.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\xpcom_xpti.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\xpconnect.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\xpinstall.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\xulapp.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\xulapp_setup.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\xuldoc.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\xultmpl.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\xulutil.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\components\zipwriter.xpt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\crashreporter.exe c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\crashreporter.ini c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\defaults\autoconfig\platform.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\defaults\autoconfig\prefcalls.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\defaults\pref\xulrunner.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\defaults\profile\chrome\userChrome-example.css c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\defaults\profile\chrome\userContent-example.css c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\defaults\profile\localstore.rdf c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\defaults\profile\US\chrome\userChrome-example.css c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\defaults\profile\US\chrome\userContent-example.css c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\defaults\profile\US\localstore.rdf c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\dependentlibs.list c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\dictionaries\en-US.aff c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\dictionaries\en-US.dic c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\freebl3.chk c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\freebl3.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\greprefs\all.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\greprefs\security-prefs.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\greprefs\xpinstall.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\IA2Marshal.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\javaxpcom.jar c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\javaxpcomglue.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\js3250.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\LICENSE c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\modules\debug.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\modules\DownloadUtils.jsm c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\modules\ISO8601DateUtils.jsm c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\modules\JSON.jsm c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\modules\Microformats.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\modules\PluralForm.jsm c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\modules\utils.js c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\modules\XPCOMUtils.jsm c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\mozctl.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\mozctlx.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\MSVCP71.DLL c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\msvcr71.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\nspr4.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\nss3.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\nssckbi.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\nssdbm3.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\nssutil3.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\platform.ini c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\plc4.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\plds4.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\plugins\npnul32.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\README.txt c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\arrow.gif c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\arrowd.gif c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\broken-image.gif c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\charsetalias.properties c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\charsetData.properties c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\contenteditable.css c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\designmode.css c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\dtd\mathml.dtd c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\dtd\xhtml11.dtd c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\EditorOverride.css c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\entityTables\html40Latin1.properties c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\entityTables\html40Special.properties c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\entityTables\html40Symbols.properties c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\entityTables\htmlEntityVersions.properties c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\entityTables\mathml20.properties c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\entityTables\transliterate.properties c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\fonts\mathfont.properties c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\fonts\mathfontStandardSymbolsL.properties c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\fonts\mathfontSTIXNonUnicode.properties c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\fonts\mathfontSTIXSize1.properties c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\fonts\mathfontSymbol.properties c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\fonts\mathfontUnicode.properties c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\forms.css c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\grabber.gif c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\hiddenWindow.html c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\html.css c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\html\folder.png c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\langGroups.properties c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\language.properties c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\loading-image.gif c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\mathml.css c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\quirk.css c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\svg.css c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\table-add-column-after-active.gif c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\table-add-column-after-hover.gif c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\table-add-column-after.gif c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\table-add-column-before-active.gif c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\table-add-column-before-hover.gif c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\table-add-column-before.gif c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\table-add-row-after-active.gif c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\table-add-row-after-hover.gif c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\table-add-row-after.gif c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\table-add-row-before-active.gif c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\table-add-row-before-hover.gif c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\table-add-row-before.gif c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\table-remove-column-active.gif c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\table-remove-column-hover.gif c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\table-remove-column.gif c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\table-remove-row-active.gif c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\table-remove-row-hover.gif c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\table-remove-row.gif c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\ua.css c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\viewsource.css c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\res\wincharset.properties c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\smime3.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\softokn3.chk c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\softokn3.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\sqlite3.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\ssl3.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\updater.exe c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\version.properties c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\xpcom.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\xpcshell.exe c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\xpicleanup.exe c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\xpidl.exe c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\xpt_dump.exe c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\xpt_link.exe c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\xul.dll c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\xulrunner-stub.exe c:\documents and settings\Todd\Application Data\LimeWire\browser\xulrunner\xulrunner.exe c:\documents and settings\Todd\Application Data\LimeWire\certificate\limewire.keystore c:\documents and settings\Todd\Application Data\LimeWire\createtimes.cache c:\documents and settings\Todd\Application Data\LimeWire\downloads.dat c:\documents and settings\Todd\Application Data\LimeWire\fileurns.cache c:\documents and settings\Todd\Application Data\LimeWire\filters.props c:\documents and settings\Todd\Application Data\LimeWire\gnutella.net c:\documents and settings\Todd\Application Data\LimeWire\installation.props c:\documents and settings\Todd\Application Data\LimeWire\library.dat c:\documents and settings\Todd\Application Data\LimeWire\library5.dat c:\documents and settings\Todd\Application Data\LimeWire\limewire.props c:\documents and settings\Todd\Application Data\LimeWire\lock c:\documents and settings\Todd\Application Data\LimeWire\mojito.props c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\.autoreg c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\Cache\_CACHE_001_ c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\Cache\_CACHE_002_ c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\Cache\_CACHE_003_ c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\Cache\_CACHE_MAP_ c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\Cache\0E6B8B2Ad01 c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\Cache\75B8DBA3d01 c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\Cache\7BD6A121d01 c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\Cache\98E79480d01 c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\Cache\AE98BDFBd01 c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\Cache\BAFF9A89d01 c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\Cache\CB7E9345d01 c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\Cache\D5267890d01 c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\cert8.db c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\compreg.dat c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\cookies.sqlite c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\downloads.sqlite c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\extensions.cache c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\extensions.ini c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\history.dat c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\key3.db c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\permissions.sqlite c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\places.sqlite-journal c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\places.sqlite c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\pluginreg.dat c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\prefs.js c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\secmod.db c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\XPC.mfl c:\documents and settings\Todd\Application Data\LimeWire\mozilla-profile\xpti.dat c:\documents and settings\Todd\Application Data\LimeWire\player.props c:\documents and settings\Todd\Application Data\LimeWire\promotion\promodb.backup c:\documents and settings\Todd\Application Data\LimeWire\promotion\promodb.data c:\documents and settings\Todd\Application Data\LimeWire\promotion\promodb.properties c:\documents and settings\Todd\Application Data\LimeWire\promotion\promodb.script c:\documents and settings\Todd\Application Data\LimeWire\questions.props c:\documents and settings\Todd\Application Data\LimeWire\responses.cache c:\documents and settings\Todd\Application Data\LimeWire\simpp.xml c:\documents and settings\Todd\Application Data\LimeWire\spam.dat c:\documents and settings\Todd\Application Data\LimeWire\tables.props c:\documents and settings\Todd\Application Data\LimeWire\themes\windows_theme.lwtp c:\documents and settings\Todd\Application Data\LimeWire\themes\windows_theme\01_star.gif c:\documents and settings\Todd\Application Data\LimeWire\themes\windows_theme\02_star.gif c:\documents and settings\Todd\Application Data\LimeWire\themes\windows_theme\03_star.gif c:\documents and settings\Todd\Application Data\LimeWire\themes\windows_theme\04_star.gif c:\documents and settings\Todd\Application Data\LimeWire\themes\windows_theme\05_star.gif c:\documents and settings\Todd\Application Data\LimeWire\themes\windows_theme\chat.gif c:\documents and settings\Todd\Application Data\LimeWire\themes\windows_theme\forward_dn.gif c:\documents and settings\Todd\Application Data\LimeWire\themes\windows_theme\forward_up.gif c:\documents and settings\Todd\Application Data\LimeWire\themes\windows_theme\kill.gif c:\documents and settings\Todd\Application Data\LimeWire\themes\windows_theme\kill_on.gif c:\documents and settings\Todd\Application Data\LimeWire\themes\windows_theme\logo.png c:\documents and settings\Todd\Application Data\LimeWire\themes\windows_theme\notsearching.png c:\documents and settings\Todd\Application Data\LimeWire\themes\windows_theme\pause_dn.gif c:\documents and settings\Todd\Application Data\LimeWire\themes\windows_theme\pause_up.gif c:\documents and settings\Todd\Application Data\LimeWire\themes\windows_theme\play_dn.gif c:\documents and settings\Todd\Application Data\LimeWire\themes\windows_theme\play_up.gif c:\documents and settings\Todd\Application Data\LimeWire\themes\windows_theme\question.gif c:\documents and settings\Todd\Application Data\LimeWire\themes\windows_theme\rewind_dn.gif c:\documents and settings\Todd\Application Data\LimeWire\themes\windows_theme\rewind_up.gif c:\documents and settings\Todd\Application Data\LimeWire\themes\windows_theme\searching.gif c:\documents and settings\Todd\Application Data\LimeWire\themes\windows_theme\splash.png c:\documents and settings\Todd\Application Data\LimeWire\themes\windows_theme\splashpro.png c:\documents and settings\Todd\Application Data\LimeWire\themes\windows_theme\stop_dn.gif c:\documents and settings\Todd\Application Data\LimeWire\themes\windows_theme\stop_up.gif c:\documents and settings\Todd\Application Data\LimeWire\themes\windows_theme\theme.txt c:\documents and settings\Todd\Application Data\LimeWire\themes\windows_theme\version.txt c:\documents and settings\Todd\Application Data\LimeWire\themes\windows_theme\warning.gif c:\documents and settings\Todd\Application Data\LimeWire\ttdata.cache c:\documents and settings\Todd\Application Data\LimeWire\ttree.cache c:\documents and settings\Todd\Application Data\LimeWire\ttrees.cache c:\documents and settings\Todd\Application Data\LimeWire\ttroot.cache c:\documents and settings\Todd\Application Data\LimeWire\version.xml c:\documents and settings\Todd\Application Data\LimeWire\versions.props c:\documents and settings\Todd\Application Data\LimeWire\xml\data\audio.sxml2 c:\documents and settings\Todd\Application Data\LimeWire\xml\data\audio.sxml3 c:\documents and settings\Todd\Application Data\LimeWire\xml\data\delete_me c:\documents and settings\Todd\Application Data\LimeWire\xml\data\video.sxml3 c:\documents and settings\Todd\Application Data\LimeWire\xml\misc\application.gif c:\documents and settings\Todd\Application Data\LimeWire\xml\misc\audio.gif c:\documents and settings\Todd\Application Data\LimeWire\xml\misc\document.gif c:\documents and settings\Todd\Application Data\LimeWire\xml\misc\image.gif c:\documents and settings\Todd\Application Data\LimeWire\xml\misc\video.gif c:\documents and settings\Todd\Application Data\LimeWire\xml\schemas\application.xsd c:\documents and settings\Todd\Application Data\LimeWire\xml\schemas\audio.xsd c:\documents and settings\Todd\Application Data\LimeWire\xml\schemas\document.xsd c:\documents and settings\Todd\Application Data\LimeWire\xml\schemas\image.xsd c:\documents and settings\Todd\Application Data\LimeWire\xml\schemas\video.xsd c:\documents and settings\Todd\Application Data\Sun\Java\Deployment\cache\6.0\44\3efada6c-5b5e90c5 c:\documents and settings\Todd\Application Data\Sun\Java\Deployment\cache\6.0\58\7b79707a-27e4ca01 c:\windows\TEMP\logishrd\LVPrcInj01.dll . ((((((((((((((((((((((((( Files Created from 2009-11-08 to 2009-12-08 ))))))))))))))))))))))))))))))) . 2009-12-08 03:51 . 2009-07-16 19:32 120136 ----a-w- c:\windows\system32\drivers\Mpfp.sys 2009-12-08 03:50 . 2009-12-08 03:51 -------- d-----w- c:\program files\Common Files\McAfee 2009-12-08 03:50 . 2009-12-08 03:50 -------- d-----w- c:\program files\McAfee.com 2009-12-08 03:50 . 2009-12-08 03:53 -------- d-----w- c:\program files\McAfee 2009-12-06 03:21 . 2009-12-06 03:22 -------- dc-h--w- c:\windows\ie8 2009-12-01 18:34 . 2009-12-01 06:54 15880 ----a-w- c:\windows\system32\lsdelete.exe 2009-12-01 15:37 . 2009-12-08 17:35 -------- d-----w- c:\windows\system32\CatRoot2 2009-12-01 06:52 . 2009-12-01 06:52 -------- dc-h--w- c:\documents and settings\All Users\Application Data\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6} 2009-12-01 06:52 . 2009-10-03 08:15 2924848 -c--a-w- c:\documents and settings\All Users\Application Data\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}\Ad-AwareInstallation.exe 2009-12-01 06:51 . 2009-12-01 06:51 -------- d-----w- c:\program files\Lavasoft 2009-12-01 05:53 . 2009-12-01 06:25 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2009-12-01 05:53 . 2009-12-01 05:59 -------- d-----w- c:\program files\Spybot - Search & Destroy 2009-12-01 04:28 . 2009-12-01 04:28 -------- d-----w- c:\windows\system32\wbem\Repository 2009-12-01 04:13 . 2009-12-01 04:13 -------- d--h--w- c:\documents and settings\All Users\Application Data\{EF63305C-BAD7-4144-9208-D65528260864} 2009-12-01 04:12 . 2009-12-01 04:12 -------- d-----w- c:\documents and settings\All Users\Application Data\Yahoo! Companion 2009-11-25 01:20 . 2009-11-25 01:20 -------- d-----w- c:\program files\Enigma Software Group 2009-11-23 23:20 . 2009-11-23 23:20 -------- d-----w- c:\program files\Trend Micro 2009-11-23 19:36 . 2009-11-23 21:07 358432 --sha-w- c:\windows\system32\drivers\fidbox.dat 2009-11-23 19:36 . 2009-11-23 21:07 22048 --sha-w- c:\windows\system32\drivers\fidbox2.dat 2009-11-20 12:29 . 2009-11-20 12:29 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache 2009-11-11 05:12 . 2009-11-11 05:12 -------- d-----w- c:\documents and settings\Todd\Local Settings\Application Data\PSU 2009-11-11 03:42 . 2009-09-10 12:46 482408 ----a-w- c:\windows\ssndii.exe 2009-11-11 03:42 . 2009-11-18 05:40 -------- d-----w- c:\program files\SamsungPrinterLiveUpdate 2009-11-11 03:42 . 2009-11-11 03:42 -------- d-----w- c:\windows\Samsung 2009-11-11 03:42 . 2009-11-11 03:42 -------- d-----w- c:\temp\ML-2850_SP 2009-11-11 03:23 . 2009-11-11 03:23 -------- d-----w- c:\temp\ML-2850_Win7_Print 2009-11-10 14:22 . 2009-11-10 14:22 -------- d-----w- c:\program files\Common Files\Skype . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-12-08 18:23 . 2009-09-09 21:43 -------- d-----w- c:\documents and settings\Todd\Application Data\Skype 2009-12-08 18:13 . 2009-03-26 23:26 -------- d-----w- c:\documents and settings\All Users\Application Data\Google Updater 2009-12-08 18:12 . 2008-08-28 04:35 0 ----a-w- c:\windows\system32\drivers\lvuvc.hs 2009-12-08 18:12 . 2008-08-28 04:35 0 ----a-w- c:\windows\system32\drivers\logiflt.iad 2009-12-08 04:36 . 2007-03-14 16:38 -------- d-----w- c:\documents and settings\All Users\Application Data\McAfee 2009-12-05 22:57 . 2009-09-10 21:00 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2009-12-05 22:57 . 2009-09-10 21:01 4844296 ----a-w- c:\documents and settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe 2009-12-03 23:14 . 2009-09-10 21:00 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2009-12-03 23:13 . 2009-09-10 21:00 19160 ----a-w- c:\windows\system32\drivers\mbam.sys 2009-12-01 06:51 . 2008-04-23 20:53 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft 2009-12-01 04:23 . 2009-09-29 10:43 -------- d-----w- c:\documents and settings\Todd\Application Data\HPAppData 2009-11-29 08:44 . 2008-07-14 23:30 -------- d-----w- c:\program files\Sprint Instinct Applications 2009-11-25 01:43 . 2009-09-29 04:13 -------- d-----w- c:\program files\Yahoo! 2009-11-23 21:07 . 2009-11-23 19:36 6920 --sha-w- c:\windows\system32\drivers\fidbox.idx 2009-11-23 21:07 . 2009-11-23 19:36 3140 --sha-w- c:\windows\system32\drivers\fidbox2.idx 2009-11-21 22:18 . 2005-05-26 01:55 -------- d-----w- c:\program files\Google 2009-11-20 22:51 . 2005-03-09 06:38 -------- d-----w- c:\program files\vb2000 2009-11-18 15:08 . 2009-09-30 04:36 -------- d-----w- c:\documents and settings\Todd\Application Data\HpUpdate 2009-11-11 03:23 . 2008-07-14 23:45 -------- d-----w- c:\program files\Samsung 2009-11-10 14:22 . 2009-09-10 05:23 -------- d-----r- c:\program files\Skype 2009-11-10 14:22 . 2008-08-28 04:41 -------- d-----w- c:\documents and settings\All Users\Application Data\Skype 2009-11-09 00:03 . 2009-09-13 02:49 -------- d-----w- c:\documents and settings\Todd\Application Data\vlc 2009-11-04 23:54 . 2009-11-04 23:54 214664 ----a-w- c:\windows\system32\drivers\mfehidk.sys 2009-11-04 23:54 . 2007-03-14 17:23 40552 ----a-w- c:\windows\system32\drivers\mfesmfk.sys 2009-11-04 23:54 . 2007-03-14 17:23 35272 ----a-w- c:\windows\system32\drivers\mfebopk.sys 2009-11-04 23:54 . 2007-03-14 17:23 79816 ----a-w- c:\windows\system32\drivers\mfeavfk.sys 2009-11-04 20:10 . 2009-10-04 23:58 16384 ----a-w- c:\windows\system32\lgfwunis.exe 2009-11-04 05:40 . 2005-01-12 21:53 -------- d-----w- c:\program files\Java 2009-11-04 05:39 . 2009-11-04 05:39 152576 ----a-w- c:\documents and settings\Todd\Application Data\Sun\Java\jre1.6.0_17\lzma.dll 2009-11-03 03:42 . 2009-10-02 20:41 195456 ------w- c:\windows\system32\MpSigStub.exe 2009-10-14 14:41 . 2005-03-09 03:08 -------- d-----w- c:\program files\Common Files\Adobe 2009-10-11 11:17 . 2009-03-07 04:03 411368 ----a-w- c:\windows\system32\deploytk.dll 2009-10-07 03:53 . 2009-10-07 03:49 68027 ----a-w- c:\windows\hpqins13.dat 2009-10-06 10:51 . 2009-10-06 10:51 26624 ----a-w- c:\windows\system32\ml285pl3.dll 2009-09-29 04:16 . 2009-09-29 04:01 188864 ----a-w- c:\windows\hpwins22.dat 2009-09-23 12:55 . 2009-12-01 06:54 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys 2009-09-16 16:22 . 2007-03-14 17:23 34248 ----a-w- c:\windows\system32\drivers\mferkdk.sys 2009-09-11 15:59 . 2009-09-11 15:59 1925024 ----a-w- c:\documents and settings\All Users\Application Data\NOS\Adobe_Downloads\install_flash_player.exe 2009-09-11 14:18 . 2004-08-04 07:56 136192 ----a-w- c:\windows\system32\msv1_0.dll 2009-09-11 09:50 . 2009-09-11 09:50 81920 ----a-w- c:\windows\system32\ssdevm.dll . ((((((((((((((((((((((((((((( SnapShot_2009-12-07_17.58.57 ))))))))))))))))))))))))))))))))))))))))) . + 2009-12-08 18:13 . 2009-12-08 18:13 16384 c:\windows\Temp\Perflib_Perfdata_7ac.dat - 2004-08-09 20:44 . 2009-12-07 18:01 71904 c:\windows\system32\perfc009.dat + 2004-08-09 20:44 . 2009-12-08 18:18 71904 c:\windows\system32\perfc009.dat + 2005-01-12 22:00 . 2009-12-08 18:12 49152 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat + 2005-01-12 22:00 . 2009-12-08 18:12 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat - 2005-01-12 22:00 . 2009-12-07 17:56 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat + 2009-12-08 18:18 . 2009-12-08 18:18 16384 c:\windows\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT + 2005-01-12 22:00 . 2009-12-08 18:12 32768 c:\windows\system32\config\systemprofile\Cookies\index.dat - 2005-01-12 22:00 . 2009-12-07 17:56 32768 c:\windows\system32\config\systemprofile\Cookies\index.dat - 2004-08-09 20:44 . 2009-12-07 18:01 444028 c:\windows\system32\perfh009.dat + 2004-08-09 20:44 . 2009-12-08 18:18 444028 c:\windows\system32\perfh009.dat + 2009-07-02 16:18 . 2009-12-08 18:12 245760 c:\windows\system32\config\systemprofile\IETldCache\index.dat - 2009-07-02 16:18 . 2009-12-07 17:56 245760 c:\windows\system32\config\systemprofile\IETldCache\index.dat . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Skype"="c:\program files\Skype\\Phone\Skype.exe" [2009-10-09 25623336] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-29 68856] "SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "type32"="c:\program files\Microsoft IntelliType Pro\type32.exe" [2004-06-03 172032] "IntelliPoint"="c:\program files\Microsoft IntelliPoint\point32.exe" [2004-06-03 204800] "Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2006-11-04 866584] "Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" [2005-06-07 57344] "Samsung PanelMgr"="c:\windows\Samsung\PanelMgr\SSMMgr.exe" [2009-09-12 614400] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-01-05 413696] "mcagent_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2009-10-29 1218008] c:\documents and settings\All Users\Start Menu\Programs\Startup\ APC UPS Status.lnk - c:\program files\APC\APC PowerChute Personal Edition\Display.exe [2005-3-25 209016] Google Calendar Sync.lnk - c:\program files\Google\Google Calendar Sync\GoogleCalendarSync.exe [2008-10-2 546288] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service] @="Service" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc] @="" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] @="" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend] @="Service" [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk] path=c:\documents and settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^Todd^Start Menu^Programs^Startup^HotSync Manager.lnk] path=c:\documents and settings\Todd\Start Menu\Programs\Startup\HotSync Manager.lnk backup=c:\windows\pss\HotSync Manager.lnkStartup [HKLM\~\startupfolder\C:^Documents and Settings^Todd^Start Menu^Programs^Startup^Sprint media monitor.lnk] path=c:\documents and settings\Todd\Start Menu\Programs\Startup\Sprint media monitor.lnk backup=c:\windows\pss\Sprint media monitor.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM] 2009-09-04 18:08 935288 ----a-r- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader] 2005-06-07 06:46 57344 ----a-w- c:\program files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] 2009-10-03 10:08 35696 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search] 2007-09-12 20:50 1838592 ----a-w- c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds] 2004-09-30 22:37 126976 ----a-w- c:\windows\system32\hkcmd.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update] 2008-12-08 21:50 54576 ----a-w- c:\program files\HP\HP Software Update\hpwuschd2.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpqSRMon] 2008-08-20 16:54 150016 ----a-w- c:\program files\HP\Digital Imaging\bin\HpqSRmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray] 2004-09-30 22:41 155648 ----a-w- c:\windows\system32\igfxtray.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD] 2007-11-26 20:54 1057064 ----a-w- c:\program files\Nero\Nero 7\InCD\InCD.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] 2009-01-06 20:06 290088 ----a-w- c:\program files\iTunes\iTunesHelper.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanguageShortcut] 2007-01-09 04:17 52256 -c--a-w- e:\program files\CyberLink\PowerDVD\Language\Language.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LGODDFU] 2009-11-04 20:09 557056 -c--a-w- e:\program files\lg_fwupdate\fwupdate.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel] 2007-12-05 18:30 2295072 ----a-w- c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechCommunicationsManager] 2008-08-14 23:11 565008 ----a-w- c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechQuickCamRibbon] 2008-08-14 23:15 2407184 ----a-w- c:\program files\Logitech\QuickCam\Quickcam.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] 2008-04-14 00:12 1695232 ----a-w- c:\program files\Messenger\msmsgs.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] 2007-03-01 20:57 153136 ----a-w- c:\program files\Common Files\Ahead\Lib\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDF Complete] 2006-01-04 05:30 219648 -c--a-w- c:\program files\PDF Complete\pdfsty.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] 2009-01-05 22:18 413696 ----a-w- c:\program files\QuickTime\QTTask.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl] 2007-03-15 03:01 71216 -c----w- e:\program files\CyberLink\PowerDVD\PDVDServ.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SecurDisc] 2007-11-26 20:54 1629480 ----a-w- c:\program files\Nero\Nero 7\InCD\NBHGui.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SetRefresh] 2003-11-20 20:01 525824 ----a-w- c:\program files\Compaq\SetRefresh\SetRefresh.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] 2009-10-11 11:17 149280 ----a-w- c:\program files\Java\jre6\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] 2007-06-29 20:00 68856 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe] 2005-05-26 01:53 180269 ----a-w- c:\program files\Common Files\Real\Update_OB\realsched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ulead AutoDetector v2] 2005-05-23 15:57 90112 ----a-w- c:\program files\Common Files\Ulead Systems\AutoDetector\Monitor.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UVS10 Preload] 2006-03-07 06:52 36864 -c----w- c:\program files\Ulead Systems\Ulead VideoStudio 10\uvPL.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG] 2006-10-19 02:05 204288 ------w- c:\program files\Windows Media Player\wmpnscfg.exe [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusOverride"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Palm\\HOTSYNC.EXE"= "c:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"= "c:\\Program Files\\Bonjour\\mDNSResponder.exe"= "c:\\Program Files\\iTunes\\iTunes.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfcCopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"= "c:\\Program Files\\Common Files\\HP\\Digital Imaging\\bin\\hpqPhotoCrm.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpsapp.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxs08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqfxt08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpse.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqsudi.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"= "c:\\Program Files\\Common Files\\McAfee\\MNA\\McNASvc.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= R0 $sys$cor;$sys$cor;c:\windows\system32\drivers\$sys$cor.sys [10/6/2004 7:11 AM 18432] R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [11/30/2009 11:54 PM 64288] R1 $sys$crater;$sys$crater;c:\windows\system32\$sys$filesystem\crater.sys [10/7/2004 12:57 AM 11904] R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [9/24/2009 4:17 AM 1184912] R2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [11/3/2006 6:19 PM 13592] S2 0288801260244268mcinstcleanup;McAfee Application Installer Cleanup (0288801260244268);c:\docume~1\Todd\LOCALS~1\Temp\028880~1.EXE c:\progra~1\COMMON~1\McAfee\INSTAL~1\cleanup.ini -cleanup -nolog -service --> c:\docume~1\Todd\LOCALS~1\Temp\028880~1.EXE c:\progra~1\COMMON~1\McAfee\INSTAL~1\cleanup.ini -cleanup -nolog -service [?] S2 gupdate1c9ae6a9168b1b6;Google Update Service (gupdate1c9ae6a9168b1b6);c:\program files\Google\Update\GoogleUpdate.exe [3/26/2009 4:28 PM 133104] S2 SSPORT;SSPORT;\??\c:\windows\system32\Drivers\SSPORT.sys --> c:\windows\system32\Drivers\SSPORT.sys [?] S3 IFXTPM;IFXTPM;c:\windows\system32\drivers\ifxtpm.sys [1/12/2005 3:28 PM 32640] --- Other Services/Drivers In Memory --- *NewlyCreated* - 0288801260244268MCINSTCLEANUP [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 HPService REG_MULTI_SZ HPSLPSVC hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] 2007-12-05 18:27 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe . ------- Supplementary Scan ------- . uStart Page = hxxp://www.google.com/ uSearchMigratedDefaultURL = hxxp://sidesearch.lycos.com/?query={searchTerms}&npl=& mSearch Bar = hxxp://go.compaq.com/1Q00CDT/0409/bl8.asp uInternet Connection Wizard,ShellNext = iexplore uInternet Settings,ProxyOverride = *.local uSearchURL,(Default) = hxxp://www.google.com/keyword/%s IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 Trusted Zone: turbotax.com DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab FF - ProfilePath - c:\documents and settings\Todd\Application Data\Mozilla\Firefox\Profiles\woi89l2r.default\ FF - plugin: c:\program files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\NPMGWRAP.DLL FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ ---- FIREFOX POLICIES ---- c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true); . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-12-08 11:22 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net device: opened successfully user: MBR read successfully called modules: >>UNKNOWN [0x804D7000]<< >>UNKNOWN [0xF7637000]<< >>UNKNOWN [0xF7627000]<< >>UNKNOWN [0xF75A8000]<< >>UNKNOWN [0x806FF000]<< >>UNKNOWN [0xF749A000]<< >>UNKNOWN [0xF7A4F000]<< >>UNKNOWN [0xF7707000]<< kernel: MBR read successfully detected MBR rootkit hooks: \Driver\Disk -> 0xf763bf28 \Driver\ACPI -> 0xf75aecb8 \Driver\atapi -> 0xf74a0852 IoDeviceObjectType -> DeleteProcedure -> 0x805e668e ParseProcedure -> 0x8057b6b1 \Device\Harddisk0\DR0 -> DeleteProcedure -> 0x805e668e ParseProcedure -> 0x8057b6b1 NDIS: Broadcom NetXtreme Gigabit Ethernet #2 -> SendCompleteHandler -> 0xf7426bb0 PacketIndicateHandler -> 0xf7433a21 SendHandler -> 0xf741187b user & kernel MBR OK ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - > 'winlogon.exe'(692) c:\windows\system32\WININET.dll - - - - - - - > 'lsass.exe'(752) c:\windows\system32\WININET.dll - - - - - - - > 'explorer.exe'(7904) c:\windows\system32\WININET.dll c:\windows\TEMP\logishrd\LVPrcInj01.dll c:\windows\system32\ieframe.dll c:\windows\system32\mshtml.dll c:\windows\system32\msls31.dll c:\windows\system32\webcheck.dll c:\windows\system32\WPDShServiceObj.dll c:\windows\system32\PortableDeviceTypes.dll c:\windows\system32\PortableDeviceApi.dll . ------------------------ Other Running Processes ------------------------ . c:\program files\APC\APC PowerChute Personal Edition\mainserv.exe c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe c:\program files\Bonjour\mDNSResponder.exe c:\program files\Nero\Nero 7\InCD\InCDsrv.exe c:\program files\Java\jre6\bin\jqs.exe c:\program files\Common Files\LightScribe\LSSrvc.exe c:\program files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe c:\program files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe c:\progra~1\McAfee\MSC\mcmscsvc.exe c:\progra~1\COMMON~1\mcafee\mna\mcnasvc.exe c:\progra~1\COMMON~1\mcafee\mcproxy\mcproxy.exe c:\progra~1\McAfee\VIRUSS~1\mcshield.exe c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE c:\program files\McAfee\MPF\MPFSrv.exe c:\program files\CyberLink\Shared Files\RichVideo.exe c:\program files\Windows Media Player\WMPNetwk.exe c:\program files\Canon\CAL\CALMAIN.exe c:\windows\system32\wbem\unsecapp.exe c:\progra~1\mcafee.com\agent\mcagent.exe c:\program files\Skype\Phone\Skype.exe c:\program files\APC\APC PowerChute Personal Edition\apcsystray.exe c:\program files\Lavasoft\Ad-Aware\AAWTray.exe c:\progra~1\mcafee\msc\mcupdmgr.exe c:\progra~1\mcafee\msc\mcupdui.exe c:\program files\mcafee\virusscan\mcinsupd.exe . ************************************************************************** . Completion time: 2009-12-08 11:31 - machine was rebooted ComboFix-quarantined-files.txt 2009-12-08 18:31 ComboFix2.txt 2009-12-05 05:02 Pre-Run: 27,062,460,416 bytes free Post-Run: 26,838,450,176 bytes free - - End Of File - - 6D47CAB00A754219565073C83E51097D