Just did my first rootkit scan. Found a host of

\C:\Program Files\World of Warcraft\Blizzard Updater.exe with No Admin in ACL....temp, updates, logs

And a host of these from C:\Old...