Spybot Search & Destroy has stopped working

**Shaba** · 2009-04-22, 15:24

To access the Uninstall Manager you would do the following:

1. Start HijackThis
2. Click on the Config button
3. Click on the Misc Tools button
4. Click on the Open Uninstall Manager button.

You will now be presented with a screen similar to the one below:

5. Click on the Save list... button and specify where you would like to save this file. When you press Save button a notepad will open with the contents of that file. Simply copy and paste the contents of that notepad here on your next reply.

**Brinesy** · 2009-04-23, 11:29

2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
Acer Empowering Technology
Acer ePerformance Management
Acer ScreenSaver
Acrobat.com
Adobe AIR
Adobe AIR
Adobe Flash Player ActiveX
Adobe Reader 9.1
Apple Mobile Device Support
Apple Software Update
BitDefender Total Security 2009
BOClean
Bonjour
CCleaner (remove only)
Common-Use Signing Interface
DivX Codec
DivX Converter
DivX Player
DivX Plus DirectShow Filters
DivX Web Player
EPSON Attach To Email
EPSON Copy Utility 3
EPSON Easy Photo Print
EPSON File Manager
EPSON Image Clip Palette
EPSON Printer Software
EPSON Scan
EPSON Scan Assistant
EPSON Web-To-Page
ESCX4700_4100 User's Guide
ESET Online Scanner
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
iTunes
Java(TM) 6 Update 13
Java(TM) 6 Update 7
LimeWire PRO 4.18.3
LiveUpdate Notice (Symantec Corporation)
Logitech Harmony Remote Software 7
Malwarebytes' Anti-Malware
MetaFrame Presentation Server Web Client for Win32
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB929729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Silverlight
Microsoft Visual C++ 2005 Redistributable
MobileMe Control Panel
Motorola SM56 Speakerphone Modem
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB941833)
MSXML 4.0 SP2 (KB954430)
Nero 8
neroxml
Norton 360
NTI Backup NOW! 4.7
OGA Notifier 1.7.0105.35.0
PIF DESIGNER
QuickTime
Realtek High Definition Audio Driver
Remote Control USB Driver
ResumeMaker
Security Update for 2007 Microsoft Office System (KB951550)
Security Update for 2007 Microsoft Office System (KB951944)
Security Update for 2007 Microsoft Office System (KB960003)
Security Update for Microsoft Office Excel 2007 (KB959997)
Security Update for Microsoft Office OneNote 2007 (KB950130)
Security Update for Microsoft Office PowerPoint 2007 (KB951338)
Security Update for Microsoft Office Publisher 2007 (KB950114)
Security Update for Microsoft Office system 2007 (KB954326)
Security Update for Microsoft Office system 2007 (KB956828)
Security Update for Microsoft Office Word 2007 (KB956358)
Spybot - Search & Destroy
Topfield Tools
Update for Microsoft Office 2007 Help for Common Features (KB957244)
Update for Microsoft Office Access 2007 Help (KB957241)
Update for Microsoft Office Excel 2007 Help (KB957242)
Update for Microsoft Office InfoPath 2007 Help (KB957243)
Update for Microsoft Office OneNote 2007 Help (KB957245)
Update for Microsoft Office Outlook 2007 (KB950219)
Update for Microsoft Office Outlook 2007 (KB952142)
Update for Microsoft Office Outlook 2007 Help (KB957246)
Update for Microsoft Office PowerPoint 2007 Help (KB957247)
Update for Microsoft Office Publisher 2007 Help (KB957249)
Update for Microsoft Office Word 2007 Help (KB957252)
Update for Microsoft Script Editor Help (KB957253)
Update for Office 2007 (KB946691)
Update for Outlook 2007 Junk Email Filter (kb962871)
VC80CRTRedist - 8.0.50727.762
VCRedistSetup
VideoReDo TVSuite Version 3.1.4.549
Vuze
WinAce Archiver
XnView 1.95.3

**Shaba** · 2009-04-23, 17:20

IMPORTANT I notice there are signs of one or more P2P (Peer to Peer) File Sharing Programs on your computer.

LimeWire PRO 4.18.3
Vuze

I'd like you to read the this thread.

Please go to Control Panel > Add/Remove Programs and uninstall the programs listed above (in red).

Please run a new uninstall log scan when finished and post the log back here.

**Brinesy** · 2009-04-23, 22:21

2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
Acer Empowering Technology
Acer ePerformance Management
Acer ScreenSaver
Acrobat.com
Adobe AIR
Adobe AIR
Adobe Flash Player ActiveX
Adobe Reader 9.1
Apple Mobile Device Support
Apple Software Update
BitDefender Total Security 2009
BOClean
Bonjour
CCleaner (remove only)
Common-Use Signing Interface
DivX Codec
DivX Converter
DivX Player
DivX Plus DirectShow Filters
DivX Web Player
EPSON Attach To Email
EPSON Copy Utility 3
EPSON Easy Photo Print
EPSON File Manager
EPSON Image Clip Palette
EPSON Printer Software
EPSON Scan
EPSON Scan Assistant
EPSON Web-To-Page
ESCX4700_4100 User's Guide
ESET Online Scanner
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
iTunes
Java(TM) 6 Update 13
Java(TM) 6 Update 7
Logitech Harmony Remote Software 7
Malwarebytes' Anti-Malware
MetaFrame Presentation Server Web Client for Win32
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB929729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Silverlight
Microsoft Visual C++ 2005 Redistributable
MobileMe Control Panel
Motorola SM56 Speakerphone Modem
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB941833)
MSXML 4.0 SP2 (KB954430)
Nero 8
neroxml
NTI Backup NOW! 4.7
OGA Notifier 1.7.0105.35.0
PIF DESIGNER
QuickTime
Realtek High Definition Audio Driver
Remote Control USB Driver
ResumeMaker
Security Update for 2007 Microsoft Office System (KB951550)
Security Update for 2007 Microsoft Office System (KB951944)
Security Update for 2007 Microsoft Office System (KB960003)
Security Update for Microsoft Office Excel 2007 (KB959997)
Security Update for Microsoft Office OneNote 2007 (KB950130)
Security Update for Microsoft Office PowerPoint 2007 (KB951338)
Security Update for Microsoft Office Publisher 2007 (KB950114)
Security Update for Microsoft Office system 2007 (KB954326)
Security Update for Microsoft Office system 2007 (KB956828)
Security Update for Microsoft Office Word 2007 (KB956358)
Spybot - Search & Destroy
Topfield Tools
Update for Microsoft Office 2007 Help for Common Features (KB957244)
Update for Microsoft Office Access 2007 Help (KB957241)
Update for Microsoft Office Excel 2007 Help (KB957242)
Update for Microsoft Office InfoPath 2007 Help (KB957243)
Update for Microsoft Office OneNote 2007 Help (KB957245)
Update for Microsoft Office Outlook 2007 (KB950219)
Update for Microsoft Office Outlook 2007 (KB952142)
Update for Microsoft Office Outlook 2007 Help (KB957246)
Update for Microsoft Office PowerPoint 2007 Help (KB957247)
Update for Microsoft Office Publisher 2007 Help (KB957249)
Update for Microsoft Office Word 2007 Help (KB957252)
Update for Microsoft Script Editor Help (KB957253)
Update for Office 2007 (KB946691)
Update for Outlook 2007 Junk Email Filter (kb962871)
VC80CRTRedist - 8.0.50727.762
VCRedistSetup
VideoReDo TVSuite Version 3.1.4.549
WinAce Archiver
XnView 1.95.3

**Shaba** · 2009-04-24, 06:04

Please open Notepad (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the code box below:

Code:

Folder::
c:\users\Naomi\AppData\Roaming\LimeWire
c:\users\Joey\AppData\Roaming\LimeWire
c:\users\Renae\AppData\Roaming\LimeWire
c:\users\Brett\AppData\Roaming\Azureus
c:\users\Brett\AppData\Roaming\LimeWire

Registry::
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{6EA877F6-CD1B-4F38-ABC3-CAE702A7ABB6}"=-
"{6AC9F8CF-057B-4561-90C3-38B22F18CC92}"=-
"TCP Query User{7DBF8BE9-ED24-4342-86CA-93B680BDE0AE}c:\\program files\\vuze\\azureus.exe"= -
"UDP Query User{D0CA9261-A3FA-4B43-8660-B2A3BE40B684}c:\\program files\\vuze\\azureus.exe"=-

Save this as CFScript.txt and change the "Save as type" to "All Files" and place it on your desktop.
Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
When finished, it shall produce a log for you. Copy and paste the contents of the log in your next reply.

CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.

**Brinesy** · 2009-04-24, 11:47

ComboFix 09-04-22.A2 - Brett 24/04/2009 19:31.2 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.61.1033.18.3327.1851 [GMT 10:00]
Running from: c:\users\Brett\Desktop\ComboFix.exe
Command switches used :: c:\users\Brett\Desktop\CFScript.txt
AV: BitDefender Antivirus *On-access scanning enabled* (Updated)
FW: BitDefender Firewall *enabled*
* Resident AV is active

.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\users\Brett\AppData\Roaming\Azureus
c:\users\Brett\AppData\Roaming\Azureus\.certs
c:\users\Brett\AppData\Roaming\Azureus\.keystore
c:\users\Brett\AppData\Roaming\Azureus\.lock
c:\users\Brett\AppData\Roaming\Azureus\active\03DD5CE7C74815627162067C7A59F1BE8F339542.dat
c:\users\Brett\AppData\Roaming\Azureus\active\03DD5CE7C74815627162067C7A59F1BE8F339542.dat.bak
c:\users\Brett\AppData\Roaming\Azureus\active\0D1B1FCBCBB2A69534E15E27CACA65831D5ABB4F.dat
c:\users\Brett\AppData\Roaming\Azureus\active\0D1B1FCBCBB2A69534E15E27CACA65831D5ABB4F.dat.bak
c:\users\Brett\AppData\Roaming\Azureus\active\298B2CD96F1455051A69831337C85946C2EAD0DC.dat
c:\users\Brett\AppData\Roaming\Azureus\active\298B2CD96F1455051A69831337C85946C2EAD0DC.dat.bak
c:\users\Brett\AppData\Roaming\Azureus\active\2D8312A4FE6883DC09A4472CDC631FF7D384F310.dat
c:\users\Brett\AppData\Roaming\Azureus\active\2D8312A4FE6883DC09A4472CDC631FF7D384F310.dat.bak
c:\users\Brett\AppData\Roaming\Azureus\active\470FBF5B4C8899659F02F37E2E522018275D5399.dat
c:\users\Brett\AppData\Roaming\Azureus\active\470FBF5B4C8899659F02F37E2E522018275D5399.dat.bak
c:\users\Brett\AppData\Roaming\Azureus\active\483258DE34AD68AA932C3F2AF612B3C0456ECCD4.dat
c:\users\Brett\AppData\Roaming\Azureus\active\483258DE34AD68AA932C3F2AF612B3C0456ECCD4.dat.bak
c:\users\Brett\AppData\Roaming\Azureus\active\4ED86A0681644BDC049176D8BD4D61736D5D76D3.dat
c:\users\Brett\AppData\Roaming\Azureus\active\4ED86A0681644BDC049176D8BD4D61736D5D76D3.dat.bak
c:\users\Brett\AppData\Roaming\Azureus\active\663BEE2DEEFB122CD85072F7B917B976C168D65D.dat
c:\users\Brett\AppData\Roaming\Azureus\active\663BEE2DEEFB122CD85072F7B917B976C168D65D.dat.bak
c:\users\Brett\AppData\Roaming\Azureus\active\6964E4F7D4A00E419EE9FCB6ADBBF437F4388EEA.dat
c:\users\Brett\AppData\Roaming\Azureus\active\6964E4F7D4A00E419EE9FCB6ADBBF437F4388EEA.dat.bak
c:\users\Brett\AppData\Roaming\Azureus\active\6F2F120018451A8CAAC0DBCD69B3B4F70D5E499D.dat
c:\users\Brett\AppData\Roaming\Azureus\active\6F2F120018451A8CAAC0DBCD69B3B4F70D5E499D.dat.bak
c:\users\Brett\AppData\Roaming\Azureus\active\8D3ADEDE1022B748C3B57F1561CD94442EC1DB25.dat
c:\users\Brett\AppData\Roaming\Azureus\active\8D3ADEDE1022B748C3B57F1561CD94442EC1DB25.dat.bak
c:\users\Brett\AppData\Roaming\Azureus\active\9984ADF0A137E721DF151E56BBAC0B60B6957F3F.dat
c:\users\Brett\AppData\Roaming\Azureus\active\9984ADF0A137E721DF151E56BBAC0B60B6957F3F.dat.bak
c:\users\Brett\AppData\Roaming\Azureus\active\9BC7EBA21AA9826049F7C8E5062AD70A64BBADA7.dat
c:\users\Brett\AppData\Roaming\Azureus\active\9BC7EBA21AA9826049F7C8E5062AD70A64BBADA7.dat.bak
c:\users\Brett\AppData\Roaming\Azureus\active\B18E7748222CE103F04D9B0E3C9DB29711C23C1D.dat
c:\users\Brett\AppData\Roaming\Azureus\active\B18E7748222CE103F04D9B0E3C9DB29711C23C1D.dat.bak
c:\users\Brett\AppData\Roaming\Azureus\active\B5D0AB741C991195B5779308EA2B9D27AE88C6C1.dat
c:\users\Brett\AppData\Roaming\Azureus\active\B5D0AB741C991195B5779308EA2B9D27AE88C6C1.dat.bak
c:\users\Brett\AppData\Roaming\Azureus\active\B9D68954A2758CF2ABC00F89C1EA205F7B043238.dat
c:\users\Brett\AppData\Roaming\Azureus\active\B9D68954A2758CF2ABC00F89C1EA205F7B043238.dat.bak
c:\users\Brett\AppData\Roaming\Azureus\active\BCC328DE48B9F90848D85D1141D59E10DEEC4D5C.dat
c:\users\Brett\AppData\Roaming\Azureus\active\BCC328DE48B9F90848D85D1141D59E10DEEC4D5C.dat.bak
c:\users\Brett\AppData\Roaming\Azureus\active\cache.dat
c:\users\Brett\AppData\Roaming\Azureus\active\D08048B87FDDCF7BC8FF0BF36295A2B19893AF0B.dat
c:\users\Brett\AppData\Roaming\Azureus\active\D08048B87FDDCF7BC8FF0BF36295A2B19893AF0B.dat.bak
c:\users\Brett\AppData\Roaming\Azureus\active\D13B27F5F3926DE81F3DAE28B1BA2EF152607489.dat
c:\users\Brett\AppData\Roaming\Azureus\active\D13B27F5F3926DE81F3DAE28B1BA2EF152607489.dat.bak
c:\users\Brett\AppData\Roaming\Azureus\active\D428B3E847F1B3C06D42CF6217840E776A5B0AEB.dat
c:\users\Brett\AppData\Roaming\Azureus\active\D428B3E847F1B3C06D42CF6217840E776A5B0AEB.dat.bak
c:\users\Brett\AppData\Roaming\Azureus\active\EFC87B5E8CD47022B8544E8AC5046321586891CF.dat
c:\users\Brett\AppData\Roaming\Azureus\active\EFC87B5E8CD47022B8544E8AC5046321586891CF.dat.bak
c:\users\Brett\AppData\Roaming\Azureus\active\F231F95BB6E9531A4F6F7B3437C553B2BAE0D3A4.dat
c:\users\Brett\AppData\Roaming\Azureus\active\F231F95BB6E9531A4F6F7B3437C553B2BAE0D3A4.dat.bak
c:\users\Brett\AppData\Roaming\Azureus\active\FF429A866878B80D5ED907965F7348F8F088FFC0.dat
c:\users\Brett\AppData\Roaming\Azureus\active\FF429A866878B80D5ED907965F7348F8F088FFC0.dat.bak
c:\users\Brett\AppData\Roaming\Azureus\active\FF9B58B3F64859478EDEE52E93834D2A24C1D066.dat
c:\users\Brett\AppData\Roaming\Azureus\active\FF9B58B3F64859478EDEE52E93834D2A24C1D066.dat.bak
c:\users\Brett\AppData\Roaming\Azureus\azureus.config
c:\users\Brett\AppData\Roaming\Azureus\azureus.config.bak
c:\users\Brett\AppData\Roaming\Azureus\azureus.statistics
c:\users\Brett\AppData\Roaming\Azureus\azureus.statistics.bak
c:\users\Brett\AppData\Roaming\Azureus\banips.config
c:\users\Brett\AppData\Roaming\Azureus\banips.config.bak
c:\users\Brett\AppData\Roaming\Azureus\cache\1191085919.ico
c:\users\Brett\AppData\Roaming\Azureus\cnetworks.config
c:\users\Brett\AppData\Roaming\Azureus\devices.config
c:\users\Brett\AppData\Roaming\Azureus\dht\addresses.dat
c:\users\Brett\AppData\Roaming\Azureus\dht\contacts.dat
c:\users\Brett\AppData\Roaming\Azureus\dht\diverse.dat
c:\users\Brett\AppData\Roaming\Azureus\dht\general.dat
c:\users\Brett\AppData\Roaming\Azureus\dht\net3\addresses.dat
c:\users\Brett\AppData\Roaming\Azureus\dht\net3\contacts.dat
c:\users\Brett\AppData\Roaming\Azureus\dht\net3\diverse.dat
c:\users\Brett\AppData\Roaming\Azureus\dht\net3\version.dat
c:\users\Brett\AppData\Roaming\Azureus\dht\version.dat
c:\users\Brett\AppData\Roaming\Azureus\downloads.config
c:\users\Brett\AppData\Roaming\Azureus\downloads.config.bak
c:\users\Brett\AppData\Roaming\Azureus\friends.config
c:\users\Brett\AppData\Roaming\Azureus\friends.config.bak
c:\users\Brett\AppData\Roaming\Azureus\ipfilter.cache
c:\users\Brett\AppData\Roaming\Azureus\logs\MetaSearch_Engine_3.txt
c:\users\Brett\AppData\Roaming\Azureus\logs\MetaSearch_Engine_3605429056.txt
c:\users\Brett\AppData\Roaming\Azureus\metasearch.config
c:\users\Brett\AppData\Roaming\Azureus\metasearch.config.bak
c:\users\Brett\AppData\Roaming\Azureus\net\pm_9543.dat
c:\users\Brett\AppData\Roaming\Azureus\net\pm_default.dat
c:\users\Brett\AppData\Roaming\Azureus\plugins\azump\azump_1.2.jar
c:\users\Brett\AppData\Roaming\Azureus\plugins\azump\azump_1.2.zip
c:\users\Brett\AppData\Roaming\Azureus\plugins\azump\azump_1.3.jar
c:\users\Brett\AppData\Roaming\Azureus\plugins\azump\azump_1.3.zip
c:\users\Brett\AppData\Roaming\Azureus\plugins\azump\mplayer.exe
c:\users\Brett\AppData\Roaming\Azureus\plugins\azump\mplayer.exe.bak
c:\users\Brett\AppData\Roaming\Azureus\plugins\azump\mplayer\config
c:\users\Brett\AppData\Roaming\Azureus\plugins\azupnpav\cd.dat
c:\users\Brett\AppData\Roaming\Azureus\sidebarauto.config
c:\users\Brett\AppData\Roaming\Azureus\sidebarauto.config.bak
c:\users\Brett\AppData\Roaming\Azureus\subs\00C60E73A94959D3C5D4.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\02BAAAEBE411DFAC0244.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\065BC7FC173B034D8ED1.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\06CB2693507E1A022820.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\09A4EF071DB008D2F8DB.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\0CDE72846FE2AA5DB933.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\0F193C9F601B15C4EFFE.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\0F43028A20CF28E3BD66.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\0FABB39CC95EDC7AC96A.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\1318175E4E1FA98A9865.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\138C6A1EDC4370F95C7E.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\13CCCA643B4D4185F7D8.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\1553F4D575E7CB313E0E.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\1A3FC0313635EB3FFECF.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\21B6F154E1FA75E4DF0A.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\22B35854ED26BC70481C.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\23C07FC046663EDB38E5.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\2467EBC11EDD571DC7C1.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\263B1CE9E9EBF2EE035A.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\298D92152D663570BB8F.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\2DD34BCB85CDDCB979F0.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\31E3051CC42F8C7385B0.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\31FF70471734C8A044C9.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\323A4ADFB999F6620B6D.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\3405D0DD44921CFD1D39.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\3899974FA488B341844A.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\38F14939A1ADE522383C.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\3E1E3C16D075895286EC.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\3E4896870D57AA2558A2.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\3E916F6AC713B06A5907.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\400B09C6BFC041C77125.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\41B5BA8E964DADE2D58B.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\428870FB845DFB86BDFF.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\475A6FF4074864929368.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\49D0477CAD9099C40114.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\4D24F81910383150D4B1.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\4E52720D295BF1A3277A.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\5323336381142EFCCE0F.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\54BCD7706C9AED3A4424.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\557394064D545800B239.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\5781FA290B8DE0FA3388.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\581765478D3517627C73.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\594912A4EBA470D10848.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\5B3715A8F8D772001847.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\5CBA0BA6AAA42E09B126.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\6266EA3AFA431F35C521.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\62FE6A1CAD12849F5889.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\67ABAAD1A37AABB08206.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\6822CCC1875B4536231B.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\6824755C86CF5244EBB4.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\68461FFBE2AB011691AE.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\687B5D8D87F188977E5D.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\69A0AED74E86B87A51C8.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\7076DB20A5F225DDB82C.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\708C5D9333EC9E54E297.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\70D3491173F95362C1CC.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\722FEC9BA057A883FE52.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\740AF5DF29177BDBE64C.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\748A3B325EC5C08006C9.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\7AA8A97E28F65BEDAE80.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\7B904F661A6D92192B9C.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\7E32D607DDE5A5304A3A.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\7EB198584F3721914E9D.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\81392141E18B42558293.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\87E23B1872099785E348.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\923C72F7DA0D15155C47.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\AA18A55630A89D766D85.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\AB8B1D7C60A4AAE70E51.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\AF734186BA1B192A332E.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\B0B3D3C66416616CA5CE.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\B838F5D871039A5EF5B3.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\B8D49D40BB83C32390BE.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\BBA708018991E48BD0CC.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\BEC51319F57960A5CA9D.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\BFF8CA6650753157FB90.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\CBC2322EB32060DC5494.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\D8FEE1A7C995129DD009.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\DE85E135FD3B432053D4.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\DF263FBC88D44B4960D3.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\E27E836A4572F6158628.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\E5D61CC36A7FC66ABFD5.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\E6925ADD353B0CC4752A.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\E9143F73AFF575C60F79.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\EBEDE1B9AAA932F13D15.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\EF1E56532E8BEF299671.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\F484CD9E607ED0711880.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\F4AEC24FF585D5CC48FC.vuze
c:\users\Brett\AppData\Roaming\Azureus\subs\FB842F38FBD17B46F780.vuze
c:\users\Brett\AppData\Roaming\Azureus\subscriptions.config
c:\users\Brett\AppData\Roaming\Azureus\subscriptions.config.bak
c:\users\Brett\AppData\Roaming\Azureus\tables.config
c:\users\Brett\AppData\Roaming\Azureus\tables.config.bak
c:\users\Brett\AppData\Roaming\Azureus\timingstats.dat
c:\users\Brett\AppData\Roaming\Azureus\tmp\AZU65168.tmp
c:\users\Brett\AppData\Roaming\Azureus\tmp\AZU65169.tmp
c:\users\Brett\AppData\Roaming\Azureus\tmp\AZU65170.tmp
c:\users\Brett\AppData\Roaming\Azureus\tmp\AZU65171.tmp
c:\users\Brett\AppData\Roaming\Azureus\tmp\AZU65172.tmp
c:\users\Brett\AppData\Roaming\Azureus\tmp\AZU65173.tmp
c:\users\Brett\AppData\Roaming\Azureus\tmp\AZU65174.tmp
c:\users\Brett\AppData\Roaming\Azureus\tmp\AZU65175.tmp
c:\users\Brett\AppData\Roaming\Azureus\tmp\AZU65177.tmp
c:\users\Brett\AppData\Roaming\Azureus\tmp\AZU65178.tmp
c:\users\Brett\AppData\Roaming\Azureus\tmp\AZU65180.tmp
c:\users\Brett\AppData\Roaming\Azureus\tmp\AZU65181.tmp
c:\users\Brett\AppData\Roaming\Azureus\tmp\AZU65182.tmp
c:\users\Brett\AppData\Roaming\Azureus\tmp\AZU65183.tmp
c:\users\Brett\AppData\Roaming\Azureus\torrents\1963348
c:\users\Brett\AppData\Roaming\Azureus\torrents\2204247
c:\users\Brett\AppData\Roaming\Azureus\torrents\Australia[2008]DvDrip-aXXo.torrent
c:\users\Brett\AppData\Roaming\Azureus\torrents\AZU10107.tmp
c:\users\Brett\AppData\Roaming\Azureus\torrents\AZU11729.tmp
c:\users\Brett\AppData\Roaming\Azureus\torrents\AZU1210.tmp
c:\users\Brett\AppData\Roaming\Azureus\torrents\AZU26024.tmp
c:\users\Brett\AppData\Roaming\Azureus\torrents\AZU3547.tmp
c:\users\Brett\AppData\Roaming\Azureus\torrents\AZU38299.tmp
c:\users\Brett\AppData\Roaming\Azureus\torrents\AZU43706.tmp
c:\users\Brett\AppData\Roaming\Azureus\torrents\AZU48272.tmp
c:\users\Brett\AppData\Roaming\Azureus\torrents\AZU65176.tmp
c:\users\Brett\AppData\Roaming\Azureus\torrents\AZU65179.tmp
c:\users\Brett\AppData\Roaming\Azureus\torrents\Bedtime.Stories.2008.TELESYNC.XViD-PUKKA.[Movie-Torrentz]_[mininova][1].torrent
c:\users\Brett\AppData\Roaming\Azureus\torrents\Beverly.Hills.Chihuahua[2008]DvDrip-aXXo.torrent
c:\users\Brett\AppData\Roaming\Azureus\torrents\Borat[2006]DvDrip.AC3[Eng]-aXXo.torrent
c:\users\Brett\AppData\Roaming\Azureus\torrents\Bride_Wars_2009_TELESYNC_XviD-KingBen_(Kingdom-Release)_[mininova][1].torrent
c:\users\Brett\AppData\Roaming\Azureus\torrents\City.Of.Ember[2008]DvDrip-aXXo_[mininova][1].torrent
c:\users\Brett\AppData\Roaming\Azureus\torrents\Duplicity.[2009].DvDrip..XviD.-.aXXo.torrent
c:\users\Brett\AppData\Roaming\Azureus\torrents\He s Just Not That Into You[2009]DvDrip..XviD.-.aXXo.torrent
c:\users\Brett\AppData\Roaming\Azureus\torrents\High.School.Musical.3-Senior.Year[2008]DvDrip-aXXo.torrent
c:\users\Brett\AppData\Roaming\Azureus\torrents\Knowing[2009]DvDrip..XviD.-.aXXo.torrent
c:\users\Brett\AppData\Roaming\Azureus\torrents\Madagascar-Escape.2.Africa[2008]DvDrip-aXXo.torrent
c:\users\Brett\AppData\Roaming\Azureus\torrents\Max.Payne[2008][Unrated.Edition]DvDrip-aXXo.torrent
c:\users\Brett\AppData\Roaming\Azureus\torrents\Monsters.vs.Aliens.TS.XViD-mVs.torrent
c:\users\Brett\AppData\Roaming\Azureus\torrents\Pineapple.Express[2008]DvDrip-aXXo.torrent
c:\users\Brett\AppData\Roaming\Azureus\torrents\Quantum.Of.Solace[2008]DvDrip-aXXo.torrent
c:\users\Brett\AppData\Roaming\Azureus\torrents\Saw.5[2008][Unrated.Edition]DvDrip-aXXo.torrent
c:\users\Brett\AppData\Roaming\Azureus\torrents\Slumdog Millionaire[2008]DvDrip[Eng]-FXG.torrent
c:\users\Brett\AppData\Roaming\Azureus\torrents\Taken[2008]DvDrip-aXXo.torrent
c:\users\Brett\AppData\Roaming\Azureus\torrents\The.Boy.In.The.Striped.Pyjamas[2008]DvDrip-aXXo.torrent
c:\users\Brett\AppData\Roaming\Azureus\torrents\The.Dark.Knight[2008]DvDrip-aXXo.torrent
c:\users\Brett\AppData\Roaming\Azureus\torrents\Twilight.2008.DVDRIP.XviD-ZEKTORM.torrent
c:\users\Brett\AppData\Roaming\Azureus\torrents\Twilight[2008]DvDrip-aXXo_[mininova][1].torrent
c:\users\Brett\AppData\Roaming\Azureus\torrents\W.[2008]DvDrip-aXXo.torrent
c:\users\Brett\AppData\Roaming\Azureus\torrents\Wall-E[2008]DvDrip-aXXo.torrent
c:\users\Brett\AppData\Roaming\Azureus\tracker.config
c:\users\Brett\AppData\Roaming\Azureus\tracker.config.bak
c:\users\Brett\AppData\Roaming\Azureus\unsentdata.config
c:\users\Brett\AppData\Roaming\Azureus\unsentdata.config.bak
c:\users\Brett\AppData\Roaming\Azureus\update.log
c:\users\Brett\AppData\Roaming\Azureus\update.properties
c:\users\Brett\AppData\Roaming\Azureus\v3.Friends.dat
c:\users\Brett\AppData\Roaming\Azureus\v3.Friends.dat.bak
c:\users\Brett\AppData\Roaming\Azureus\VuzeActivities.config
c:\users\Brett\AppData\Roaming\Azureus\VuzeActivities.config.bak
c:\users\Brett\AppData\Roaming\LimeWire
c:\users\Brett\AppData\Roaming\LimeWire\414splashpro.png
c:\users\Brett\AppData\Roaming\LimeWire\certificate\limewire.keystore
c:\users\Brett\AppData\Roaming\LimeWire\createtimes.cache
c:\users\Brett\AppData\Roaming\LimeWire\downloads.dat
c:\users\Brett\AppData\Roaming\LimeWire\fileurns.bak
c:\users\Brett\AppData\Roaming\LimeWire\fileurns.cache
c:\users\Brett\AppData\Roaming\LimeWire\filters.props
c:\users\Brett\AppData\Roaming\LimeWire\gnutella.net
c:\users\Brett\AppData\Roaming\LimeWire\installation.props
c:\users\Brett\AppData\Roaming\LimeWire\library.dat
c:\users\Brett\AppData\Roaming\LimeWire\limewire.props
c:\users\Brett\AppData\Roaming\LimeWire\mojito.props
c:\users\Brett\AppData\Roaming\LimeWire\promotion\promodb.backup
c:\users\Brett\AppData\Roaming\LimeWire\promotion\promodb.data
c:\users\Brett\AppData\Roaming\LimeWire\promotion\promodb.lck
c:\users\Brett\AppData\Roaming\LimeWire\promotion\promodb.log
c:\users\Brett\AppData\Roaming\LimeWire\promotion\promodb.properties
c:\users\Brett\AppData\Roaming\LimeWire\promotion\promodb.script
c:\users\Brett\AppData\Roaming\LimeWire\questions.props
c:\users\Brett\AppData\Roaming\LimeWire\responses.cache
c:\users\Brett\AppData\Roaming\LimeWire\simpp.xml
c:\users\Brett\AppData\Roaming\LimeWire\spam.dat
c:\users\Brett\AppData\Roaming\LimeWire\tables.props
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme.lwtp
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\01_star.gif
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\02_star.gif
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\03_star.gif
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\04_star.gif
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\05_star.gif
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\chat.gif
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\dir_closed.gif
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\dir_open.gif
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\forward_dn.gif
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\forward_up.gif
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\kill.gif
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\kill_on.gif
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\lime.gif
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\logo.gif
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\lw_logo.png
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\notsearching.gif
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\pause_dn.gif
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\pause_up.gif
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\play_dn.gif
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\play_up.gif
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\question.gif
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\rewind_dn.gif
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\rewind_up.gif
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\searching.gif
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\splash.png
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\splashpro.png
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\stop_dn.gif
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\stop_up.gif
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\theme.txt
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\version.txt
c:\users\Brett\AppData\Roaming\LimeWire\themes\limewirePro_theme\warning.gif
c:\users\Brett\AppData\Roaming\LimeWire\ttree.cache
c:\users\Brett\AppData\Roaming\LimeWire\ttrees.cache
c:\users\Brett\AppData\Roaming\LimeWire\ttroot.cache
c:\users\Brett\AppData\Roaming\LimeWire\version.xml
c:\users\Brett\AppData\Roaming\LimeWire\versions.props
c:\users\Brett\AppData\Roaming\LimeWire\xml\data\audio.sxml2
c:\users\Brett\AppData\Roaming\LimeWire\xml\data\delete_me
c:\users\Brett\AppData\Roaming\LimeWire\xml\data\video.sxml2
c:\users\Brett\AppData\Roaming\LimeWire\xml\misc\application.gif
c:\users\Brett\AppData\Roaming\LimeWire\xml\misc\audio.gif
c:\users\Brett\AppData\Roaming\LimeWire\xml\misc\document.gif
c:\users\Brett\AppData\Roaming\LimeWire\xml\misc\image.gif
c:\users\Brett\AppData\Roaming\LimeWire\xml\misc\video.gif
c:\users\Brett\AppData\Roaming\LimeWire\xml\schemas\application.xsd
c:\users\Brett\AppData\Roaming\LimeWire\xml\schemas\audio.xsd
c:\users\Brett\AppData\Roaming\LimeWire\xml\schemas\document.xsd
c:\users\Brett\AppData\Roaming\LimeWire\xml\schemas\image.xsd
c:\users\Brett\AppData\Roaming\LimeWire\xml\schemas\video.xsd
c:\users\Joey\AppData\Roaming\LimeWire
c:\users\Joey\AppData\Roaming\LimeWire\414splashpro.png
c:\users\Joey\AppData\Roaming\LimeWire\createtimes.cache
c:\users\Joey\AppData\Roaming\LimeWire\fileurns.bak
c:\users\Joey\AppData\Roaming\LimeWire\fileurns.cache
c:\users\Joey\AppData\Roaming\LimeWire\filters.props
c:\users\Joey\AppData\Roaming\LimeWire\gnutella.net
c:\users\Joey\AppData\Roaming\LimeWire\installation.props
c:\users\Joey\AppData\Roaming\LimeWire\library.dat
c:\users\Joey\AppData\Roaming\LimeWire\limewire.props
c:\users\Joey\AppData\Roaming\LimeWire\mojito.props
c:\users\Joey\AppData\Roaming\LimeWire\promotion\promodb.properties
c:\users\Joey\AppData\Roaming\LimeWire\promotion\promodb.script
c:\users\Joey\AppData\Roaming\LimeWire\questions.props
c:\users\Joey\AppData\Roaming\LimeWire\spam.dat
c:\users\Joey\AppData\Roaming\LimeWire\tables.props
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme.lwtp
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\01_star.gif
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\02_star.gif
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\03_star.gif
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\04_star.gif
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\05_star.gif
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\chat.gif
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\dir_closed.gif
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\dir_open.gif
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\forward_dn.gif
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\forward_up.gif
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\kill.gif
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\kill_on.gif
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\lime.gif
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\logo.gif
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\lw_logo.png
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\notsearching.gif
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\pause_dn.gif
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\pause_up.gif
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\play_dn.gif
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\play_up.gif
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\question.gif
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\rewind_dn.gif
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\rewind_up.gif
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\searching.gif
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\splash.png
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\splashpro.png
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\stop_dn.gif
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\stop_up.gif
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\theme.txt
c:\users\Joey\AppData\Roaming\LimeWire\themes\limewirePro_theme\warning.gif
c:\users\Joey\AppData\Roaming\LimeWire\versions.props
c:\users\Joey\AppData\Roaming\LimeWire\xml\data\audio.sxml2
c:\users\Joey\AppData\Roaming\LimeWire\xml\data\video.sxml2
c:\users\Joey\AppData\Roaming\LimeWire\xml\misc\application.gif
c:\users\Joey\AppData\Roaming\LimeWire\xml\misc\audio.gif
c:\users\Joey\AppData\Roaming\LimeWire\xml\misc\document.gif
c:\users\Joey\AppData\Roaming\LimeWire\xml\misc\image.gif
c:\users\Joey\AppData\Roaming\LimeWire\xml\misc\video.gif
c:\users\Joey\AppData\Roaming\LimeWire\xml\schemas\application.xsd
c:\users\Joey\AppData\Roaming\LimeWire\xml\schemas\audio.xsd
c:\users\Joey\AppData\Roaming\LimeWire\xml\schemas\document.xsd
c:\users\Joey\AppData\Roaming\LimeWire\xml\schemas\image.xsd
c:\users\Joey\AppData\Roaming\LimeWire\xml\schemas\video.xsd
c:\users\Naomi\AppData\Roaming\LimeWire
c:\users\Naomi\AppData\Roaming\LimeWire\414splashpro.png
c:\users\Naomi\AppData\Roaming\LimeWire\certificate\limewire.keystore
c:\users\Naomi\AppData\Roaming\LimeWire\createtimes.cache
c:\users\Naomi\AppData\Roaming\LimeWire\downloads.dat
c:\users\Naomi\AppData\Roaming\LimeWire\fileurns.bak
c:\users\Naomi\AppData\Roaming\LimeWire\fileurns.cache
c:\users\Naomi\AppData\Roaming\LimeWire\filters.props
c:\users\Naomi\AppData\Roaming\LimeWire\gnutella.net
c:\users\Naomi\AppData\Roaming\LimeWire\installation.props
c:\users\Naomi\AppData\Roaming\LimeWire\library.dat
c:\users\Naomi\AppData\Roaming\LimeWire\limewire.props
c:\users\Naomi\AppData\Roaming\LimeWire\mojito.props
c:\users\Naomi\AppData\Roaming\LimeWire\promotion\promodb.backup
c:\users\Naomi\AppData\Roaming\LimeWire\promotion\promodb.data
c:\users\Naomi\AppData\Roaming\LimeWire\promotion\promodb.properties
c:\users\Naomi\AppData\Roaming\LimeWire\promotion\promodb.script
c:\users\Naomi\AppData\Roaming\LimeWire\questions.props
c:\users\Naomi\AppData\Roaming\LimeWire\responses.cache
c:\users\Naomi\AppData\Roaming\LimeWire\simpp.xml
c:\users\Naomi\AppData\Roaming\LimeWire\spam.dat
c:\users\Naomi\AppData\Roaming\LimeWire\tables.props
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme.lwtp
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\01_star.gif
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\02_star.gif
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\03_star.gif
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\04_star.gif
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\05_star.gif
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\chat.gif
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\dir_closed.gif
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\dir_open.gif
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\forward_dn.gif
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\forward_up.gif
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\kill.gif
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\kill_on.gif
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\lime.gif
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\logo.gif
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\lw_logo.png
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\notsearching.gif
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\pause_dn.gif
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\pause_up.gif
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\play_dn.gif
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\play_up.gif
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\question.gif
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\rewind_dn.gif
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\rewind_up.gif
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\searching.gif
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\splash.png
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\splashpro.png
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\stop_dn.gif
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\stop_up.gif
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\theme.txt
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\version.txt
c:\users\Naomi\AppData\Roaming\LimeWire\themes\limewirePro_theme\warning.gif
c:\users\Naomi\AppData\Roaming\LimeWire\ttrees.cache
c:\users\Naomi\AppData\Roaming\LimeWire\ttroot.cache
c:\users\Naomi\AppData\Roaming\LimeWire\version.xml
c:\users\Naomi\AppData\Roaming\LimeWire\versions.props
c:\users\Naomi\AppData\Roaming\LimeWire\xml\data\audio.sxml2
c:\users\Naomi\AppData\Roaming\LimeWire\xml\data\video.sxml2
c:\users\Naomi\AppData\Roaming\LimeWire\xml\misc\application.gif
c:\users\Naomi\AppData\Roaming\LimeWire\xml\misc\audio.gif
c:\users\Naomi\AppData\Roaming\LimeWire\xml\misc\document.gif
c:\users\Naomi\AppData\Roaming\LimeWire\xml\misc\image.gif
c:\users\Naomi\AppData\Roaming\LimeWire\xml\misc\video.gif
c:\users\Naomi\AppData\Roaming\LimeWire\xml\schemas\application.xsd
c:\users\Naomi\AppData\Roaming\LimeWire\xml\schemas\audio.xsd
c:\users\Naomi\AppData\Roaming\LimeWire\xml\schemas\document.xsd
c:\users\Naomi\AppData\Roaming\LimeWire\xml\schemas\image.xsd
c:\users\Naomi\AppData\Roaming\LimeWire\xml\schemas\video.xsd
c:\users\Renae\AppData\Roaming\LimeWire
c:\users\Renae\AppData\Roaming\LimeWire\414splashpro.png
c:\users\Renae\AppData\Roaming\LimeWire\certificate\limewire.keystore
c:\users\Renae\AppData\Roaming\LimeWire\createtimes.cache
c:\users\Renae\AppData\Roaming\LimeWire\fileurns.bak
c:\users\Renae\AppData\Roaming\LimeWire\fileurns.cache
c:\users\Renae\AppData\Roaming\LimeWire\filters.props
c:\users\Renae\AppData\Roaming\LimeWire\installation.props
c:\users\Renae\AppData\Roaming\LimeWire\library.dat
c:\users\Renae\AppData\Roaming\LimeWire\limewire.props
c:\users\Renae\AppData\Roaming\LimeWire\mojito.props
c:\users\Renae\AppData\Roaming\LimeWire\promotion\promodb.data
c:\users\Renae\AppData\Roaming\LimeWire\promotion\promodb.lck
c:\users\Renae\AppData\Roaming\LimeWire\promotion\promodb.log
c:\users\Renae\AppData\Roaming\LimeWire\promotion\promodb.properties
c:\users\Renae\AppData\Roaming\LimeWire\promotion\promodb.script
c:\users\Renae\AppData\Roaming\LimeWire\questions.props
c:\users\Renae\AppData\Roaming\LimeWire\simpp.xml
c:\users\Renae\AppData\Roaming\LimeWire\tables.props
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme.lwtp
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\01_star.gif
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\02_star.gif
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\03_star.gif
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\04_star.gif
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\05_star.gif
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\chat.gif
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\dir_closed.gif
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\dir_open.gif
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\forward_dn.gif
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\forward_up.gif
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\kill.gif
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\kill_on.gif
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\lime.gif
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\logo.gif
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\lw_logo.png
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\notsearching.gif
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\pause_dn.gif
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\pause_up.gif
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\play_dn.gif
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\play_up.gif
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\question.gif
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\rewind_dn.gif
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\rewind_up.gif
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\searching.gif
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\splash.png
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\splashpro.png
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\stop_dn.gif
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\stop_up.gif
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\theme.txt
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\version.txt
c:\users\Renae\AppData\Roaming\LimeWire\themes\limewirePro_theme\warning.gif
c:\users\Renae\AppData\Roaming\LimeWire\version.xml
c:\users\Renae\AppData\Roaming\LimeWire\versions.props
c:\users\Renae\AppData\Roaming\LimeWire\xml\data\audio.sxml2
c:\users\Renae\AppData\Roaming\LimeWire\xml\misc\application.gif
c:\users\Renae\AppData\Roaming\LimeWire\xml\misc\audio.gif
c:\users\Renae\AppData\Roaming\LimeWire\xml\misc\document.gif
c:\users\Renae\AppData\Roaming\LimeWire\xml\misc\image.gif
c:\users\Renae\AppData\Roaming\LimeWire\xml\misc\video.gif
c:\users\Renae\AppData\Roaming\LimeWire\xml\schemas\application.xsd
c:\users\Renae\AppData\Roaming\LimeWire\xml\schemas\audio.xsd
c:\users\Renae\AppData\Roaming\LimeWire\xml\schemas\document.xsd
c:\users\Renae\AppData\Roaming\LimeWire\xml\schemas\image.xsd
c:\users\Renae\AppData\Roaming\LimeWire\xml\schemas\video.xsd

.
((((((((((((((((((((((((( Files Created from 2009-03-24 to 2009-04-24 )))))))))))))))))))))))))))))))
.

2009-04-23 09:36 . 2009-04-23 09:36 -------- d-----w c:\users\All Users\NortonInstaller
2009-04-23 09:36 . 2009-04-23 09:36 -------- d-----w c:\programdata\NortonInstaller
2009-04-21 12:20 . 2009-04-21 12:20 -------- d-----w c:\users\Naomi\AppData\Roaming\Malwarebytes
2009-04-21 10:15 . 2009-04-21 10:15 -------- d-----w c:\users\All Users\SUPERAntiSpyware.com
2009-04-21 10:15 . 2009-04-21 10:15 -------- d-----w c:\programdata\SUPERAntiSpyware.com
2009-04-21 05:19 . 2009-04-21 05:19 -------- d-----w c:\users\Renae\AppData\Roaming\BitDefender
2009-04-20 13:27 . 2009-04-21 20:38 -------- d-----w c:\program files\SUPERAntiSpyware
2009-04-20 13:27 . 2009-04-20 13:27 -------- d-----w c:\users\Brett\AppData\Roaming\SUPERAntiSpyware.com
2009-04-20 13:04 . 2009-04-20 13:04 -------- d-----w c:\users\Brett\AppData\Roaming\Malwarebytes
2009-04-19 21:55 . 2009-04-19 21:54 410984 ----a-w c:\windows\system32\deploytk.dll
2009-04-19 09:45 . 2009-04-06 05:32 15504 ----a-w c:\windows\system32\drivers\mbam.sys
2009-04-19 09:45 . 2009-04-06 05:32 38496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys
2009-04-19 09:45 . 2009-04-20 13:04 -------- d-----w c:\program files\Malwarebytes' Anti-Malware
2009-04-19 09:45 . 2009-04-19 09:45 -------- d-----w c:\users\All Users\Malwarebytes
2009-04-19 09:45 . 2009-04-19 09:45 -------- d-----w c:\programdata\Malwarebytes
2009-04-18 07:33 . 2009-04-24 09:24 121 ----a-w c:\windows\bdagent.INI
2009-04-17 21:39 . 2009-04-17 21:39 -------- d-----w c:\users\Joey\AppData\Roaming\BitDefender
2009-04-17 11:23 . 2009-04-17 11:23 -------- d-----w c:\users\Naomi\AppData\Roaming\BitDefender
2009-04-17 10:34 . 2009-04-17 10:34 132 ----a-w C:\httpdwl.dat
2009-04-17 10:13 . 2009-04-18 07:31 -------- d-----w c:\users\Brett\AppData\Local\ApplicationHistory
2009-04-17 09:29 . 2009-04-17 09:29 -------- d-----w c:\users\Brett\AppData\Roaming\BitDefender
2009-04-17 09:29 . 2009-04-17 09:29 -------- d-----w C:\Binaries
2009-04-16 11:14 . 2009-04-16 11:14 -------- d-----w c:\windows\system32\URTTEMP
2009-04-16 11:13 . 2009-04-17 09:28 -------- d-----w c:\program files\Common Files\BitDefender
2009-04-15 09:19 . 2009-04-15 12:38 -------- d-----w c:\program files\EsetOnlineScanner
2009-04-14 20:52 . 2009-04-14 20:52 691 ----a-w c:\users\Naomi\AppData\Roaming\GetValue.vbs
2009-04-14 20:52 . 2009-04-14 20:52 35 ----a-w c:\users\Naomi\AppData\Roaming\SetValue.bat
2009-04-14 20:41 . 2009-03-03 02:27 1383424 ----a-w c:\windows\system32\mshtml.tlb
2009-04-10 04:40 . 2009-04-10 04:40 -------- d-----w c:\users\Brett\AppData\Roaming\Media Player Classic
2009-04-10 04:39 . 2009-04-11 07:40 -------- d-----w C:\Amadis Video Converter Output
2009-04-10 04:13 . 2009-04-10 04:13 -------- d-----w C:\temp
2009-04-09 10:55 . 2009-04-09 10:55 -------- d-----w c:\program files\Amadis Software
2009-04-04 03:55 . 2009-04-04 03:55 -------- d-----w c:\program files\WinAVI MP4 Converter
2009-04-02 10:30 . 2009-04-11 07:32 -------- d-----w c:\program files\AviSynth 2.5

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-04-24 09:28 . 2008-07-04 08:57 -------- d-----w c:\programdata\BOC426
2009-04-24 00:29 . 2009-04-16 21:46 81984 ----a-w c:\windows\System32\bdod.bin
2009-04-23 21:12 . 2008-11-13 09:26 -------- d-----w c:\programdata\Spybot - Search & Destroy
2009-04-23 20:17 . 2009-01-14 10:07 -------- d-----w c:\program files\Vuze
2009-04-23 09:41 . 2007-04-17 00:52 -------- d-----w c:\program files\Common Files\Symantec Shared
2009-04-21 11:02 . 2008-07-06 03:18 310 ----a-w c:\program files\action.log
2009-04-20 13:10 . 2008-11-13 09:26 -------- d-----w c:\program files\Spybot - Search & Destroy
2009-04-19 21:54 . 2008-06-28 23:10 -------- d-----w c:\program files\Java
2009-04-18 07:55 . 2009-04-17 09:28 -------- d-----w c:\programdata\BitDefender
2009-04-17 10:45 . 2008-11-13 12:11 -------- d-----w c:\users\Brett\AppData\Roaming\U3
2009-04-17 09:51 . 2008-04-23 08:34 192512 ----a-w c:\windows\System32\txmlutil.dll
2009-04-17 09:51 . 2008-08-14 08:54 104328 ----a-w c:\windows\system32\drivers\bdfndisf.sys
2009-04-17 09:51 . 2008-08-12 08:40 242184 ----a-w c:\windows\system32\drivers\bdfsfltr.sys
2009-04-17 09:51 . 2008-08-12 08:40 111112 ----a-w c:\windows\system32\drivers\bdfm.sys
2009-04-17 09:51 . 2008-07-02 03:07 82696 ----a-w c:\windows\system32\drivers\BDVEDISK.sys
2009-04-17 09:30 . 2006-11-02 10:25 86016 ----a-w c:\windows\Inf\infstor.dat
2009-04-17 09:30 . 2006-11-02 10:25 51200 ----a-w c:\windows\Inf\infpub.dat
2009-04-17 09:30 . 2006-11-02 10:25 143360 ----a-w c:\windows\Inf\infstrng.dat
2009-04-17 09:28 . 2009-04-16 11:15 -------- d-----w c:\program files\BitDefender
2009-04-16 21:17 . 2007-04-17 01:00 -------- d-----w c:\programdata\Microsoft Help
2009-04-14 21:03 . 2006-11-02 11:18 -------- d-----w c:\program files\Windows Mail
2009-04-14 20:53 . 2009-04-14 20:51 2305 ----a-w C:\rapport.txt
2009-04-14 10:18 . 2008-06-18 05:48 8160 ----a-w c:\users\Brett\AppData\Local\d3d9caps.dat
2009-04-10 04:26 . 2009-04-04 03:55 50611 ----a-w C:\MP4debug.log
2009-03-30 10:38 . 2008-08-16 03:08 -------- d-----w c:\program files\Common Files\Adobe
2009-03-17 03:38 . 2009-04-14 20:42 40960 ----a-w c:\windows\AppPatch\apihex86.dll
2009-03-17 03:38 . 2009-04-14 20:42 13824 ----a-w c:\windows\System32\apilogen.dll
2009-03-17 03:38 . 2009-04-14 20:42 24064 ----a-w c:\windows\System32\amxread.dll
2009-03-07 08:40 . 2008-06-29 09:52 -------- d-----w c:\programdata\DVD Shrink
2009-03-03 04:46 . 2009-04-14 20:42 3599328 ----a-w c:\windows\System32\ntkrnlpa.exe
2009-03-03 04:46 . 2009-04-14 20:42 3547632 ----a-w c:\windows\System32\ntoskrnl.exe
2009-03-03 04:40 . 2009-04-14 20:42 827392 ----a-w c:\windows\System32\wininet.dll
2009-03-03 04:39 . 2009-04-14 20:42 183296 ----a-w c:\windows\System32\sdohlp.dll
2009-03-03 04:39 . 2009-04-14 20:42 551424 ----a-w c:\windows\System32\rpcss.dll
2009-03-03 04:39 . 2009-04-14 20:42 26112 ----a-w c:\windows\System32\printfilterpipelineprxy.dll
2009-03-03 04:37 . 2009-04-14 20:42 78336 ----a-w c:\windows\System32\ieencode.dll
2009-03-03 04:37 . 2009-04-14 20:42 98304 ----a-w c:\windows\System32\iasrecst.dll
2009-03-03 04:37 . 2009-04-14 20:42 54784 ----a-w c:\windows\System32\iasads.dll
2009-03-03 04:37 . 2009-04-14 20:42 44032 ----a-w c:\windows\System32\iasdatastore.dll
2009-03-03 03:04 . 2009-04-14 20:42 666624 ----a-w c:\windows\System32\printfilterpipelinesvc.exe
2009-03-03 02:38 . 2009-04-14 20:42 17408 ----a-w c:\windows\System32\iashost.exe
2009-03-03 02:28 . 2009-04-14 20:42 26624 ----a-w c:\windows\System32\ieUnatt.exe
2009-02-27 21:51 . 2008-07-11 09:38 -------- d-----w c:\program files\Microsoft Silverlight
2009-02-27 05:25 . 2008-06-20 05:58 104448 ----a-w c:\users\Renae\AppData\Local\GDIPFONTCACHEV1.DAT
2009-02-25 07:37 . 2008-06-18 08:47 104448 ----a-w c:\users\Joey\AppData\Local\GDIPFONTCACHEV1.DAT
2009-02-24 21:00 . 2008-06-18 06:58 104448 ----a-w c:\users\Naomi\AppData\Local\GDIPFONTCACHEV1.DAT
2009-02-24 11:14 . 2008-06-18 05:49 104448 ----a-w c:\users\Brett\AppData\Local\GDIPFONTCACHEV1.DAT
2009-02-13 08:49 . 2009-04-14 20:42 72704 ----a-w c:\windows\System32\secur32.dll
2009-02-13 08:49 . 2009-04-14 20:42 1255936 ----a-w c:\windows\System32\lsasrv.dll
2009-02-09 03:10 . 2009-03-11 10:36 2033152 ----a-w c:\windows\System32\win32k.sys
2009-01-13 09:28 . 2009-01-13 09:28 680 ----a-w c:\users\Naomi\AppData\Local\d3d9caps.dat
2008-08-04 12:07 . 2008-07-06 03:17 235 ----a-w c:\program files\order.ord
2008-06-29 12:34 . 2008-06-29 12:34 0 ----a-w c:\users\Brett\AppData\Roaming\wklnhst.dat
2008-06-29 04:29 . 2006-11-02 12:50 174 --sha-w c:\program files\desktop.ini
2008-06-28 23:31 . 2008-06-28 23:31 680 ----a-w c:\users\Renae\AppData\Local\d3d9caps.dat
2008-06-20 12:36 . 2008-06-20 12:36 3222 ----a-w c:\users\All Users\xml4A78.tmp
2008-06-20 12:36 . 2008-06-20 12:36 3222 ----a-w c:\programdata\xml4A78.tmp
2008-06-20 12:36 . 2008-06-20 12:36 18406 ----a-w c:\users\All Users\xml3CE0.tmp
2008-06-20 12:36 . 2008-06-20 12:36 18406 ----a-w c:\programdata\xml3CE0.tmp
.

((((((((((((((((((((((((((((( SnapShot@2009-04-22_11.19.36 )))))))))))))))))))))))))))))))))))))))))
.
+ 2007-04-17 00:53 . 2009-04-22 21:07 57286 c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2006-11-02 13:05 . 2009-04-24 00:32 77096 c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
- 2008-02-29 17:56 . 2009-04-22 11:09 16384 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2008-02-29 17:56 . 2009-04-24 09:25 16384 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2008-02-29 17:56 . 2009-04-22 11:09 49152 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2008-02-29 17:56 . 2009-04-24 09:25 49152 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2008-02-29 17:56 . 2009-04-22 11:09 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-02-29 17:56 . 2009-04-24 09:25 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-06-19 02:28 . 2009-04-24 00:32 9548 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2413795696-3658026189-2771670509-1001_UserData.bin
+ 2008-06-18 05:47 . 2009-04-23 09:45 9634 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2413795696-3658026189-2771670509-1000_UserData.bin
+ 2009-04-24 00:30 . 2009-04-24 00:30 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2009-04-22 11:09 . 2009-04-22 11:09 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2009-04-24 00:30 . 2009-04-24 00:30 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2009-04-22 11:09 . 2009-04-22 11:09 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2006-11-02 10:33 . 2009-04-24 00:36 611614 c:\windows\System32\perfh009.dat
- 2006-11-02 10:33 . 2009-04-22 11:16 611614 c:\windows\System32\perfh009.dat
+ 2006-11-02 10:33 . 2009-04-24 00:36 110318 c:\windows\System32\perfc009.dat
- 2006-11-02 10:33 . 2009-04-22 11:16 110318 c:\windows\System32\perfc009.dat
- 2006-11-02 12:47 . 2009-04-22 11:19 1835008 c:\windows\ServiceProfiles\NetworkService\ntuser.dat
+ 2006-11-02 12:47 . 2009-04-24 09:40 1835008 c:\windows\ServiceProfiles\NetworkService\ntuser.dat
- 2006-11-02 12:47 . 2009-04-22 11:10 1835008 c:\windows\ServiceProfiles\LocalService\ntuser.dat
+ 2006-11-02 12:47 . 2009-04-24 00:31 1835008 c:\windows\ServiceProfiles\LocalService\ntuser.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WPCUMI"="c:\windows\system32\WpcUmi.exe" [2006-11-02 176128]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-04-19 148888]
"BOC-426"="c:\progra~1\Comodo\CBOClean\BOC426.exe" [2008-04-10 351480]
"BDAgent"="c:\program files\BitDefender\BitDefender 2009\bdagent.exe" [2009-04-17 778240]
"BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2009\IEShow.exe" [2009-04-17 69632]
"RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2007-07-06 4669440]

c:\users\Joey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2007-12-7 101440]

c:\users\Naomi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 Screen Clipper and Launcher.lnk.disabled [2008-6-23 1115]

c:\users\Renae\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2007-12-7 101440]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
[BU]

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32
"wave2"= serwvdrv.dll

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"SpybotSD TeaTimer"=c:\program files\Spybot - Search & Destroy\TeaTimer.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Acer Empowering Technology Monitor"=c:\acer\Empowering Technology\SysMonitor.exe
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
"AppleSyncNotifier"=c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001
"InternetSettingsDisableNotify"=dword:00000001
"AutoUpdateDisableNotify"=dword:00000001
"AntiVirusDisableNotify"="0x00000000"
"UpdatesDisableNotify"="0x00000000"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile\AuthorizedApplications\List]
"c:\\Program Files\\Logitech\\Logitech Harmony Remote Software 7\\HarmonyRemote.exe"= c:\program files\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe:*:Enabled:Logitech Harmony Remote Software 7

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{ED1E9675-5C5C-4552-8979-8FFBD704C996}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{C5A6A6A0-D297-4AA6-9383-21A16C3F9929}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{72054225-EE28-47DF-B2B8-F3B9C93964A3}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
"{793FE12F-5ADA-48C0-A6C2-2F64F67F5139}"= UDP:c:\program files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
"{6CCF7CF8-77F5-4804-B894-0A15F1C4201D}"= TCP:c:\program files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
"{4BDB85EB-3D9F-4E05-9520-D65F8A66F7BF}"= UDP:f:\program files\SiSoftware\SiSoftware Sandra Professional Business XIb\RpcSandraSrv.exe:SiSoftware Sandra Agent Service
"{BE8147AD-FC69-4E8A-BBCA-642A052C5F53}"= TCP:f:\program files\SiSoftware\SiSoftware Sandra Professional Business XIb\RpcSandraSrv.exe:SiSoftware Sandra Agent Service
"{F60E4F0C-7DAD-45E5-BB26-0584F22B3E8B}"= UDP:c:\windows\System32\muzapp.exe:MUZ AOD APP player
"{7F03506F-C21D-424B-8EE0-7EEDB9600CDA}"= TCP:c:\windows\System32\muzapp.exe:MUZ AOD APP player
"{26BF0D4E-BB39-4CBF-8A2B-C5BBD4271537}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{4BD78FA3-78E6-4649-BBDD-7A7FBCC7DCAC}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{643D283F-91CA-4592-A463-F5FF2D66A42D}"= UDP:18380:BitComet 18380 TCP
"{770EC11C-6E5D-4937-A426-7D5C7DC8676B}"= TCP:18380:BitComet 18380 UDP
"{763DB909-DC4B-4F03-AFCD-675A3D2D590F}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
"{887A0C2F-5494-43A9-9541-D4C538BD0A78}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List]
"c:\\Acer\\Empowering Technology\\eDataSecurity\\eDSfsu.exe"= c:\acer\Empowering Technology\eDataSecurity\eDSfsu.exe:*:Enabled:eDSfsu
"c:\\Acer\\Empowering Technology\\eDataSecurity\\encryption.exe"= c:\acer\Empowering Technology\eDataSecurity\encryption.exe:*:Enabled:encryption
"c:\\Acer\\Empowering Technology\\eDataSecurity\\decryption.exe"= c:\acer\Empowering Technology\eDataSecurity\decryption.exe:*:Enabled:decryption
"c:\\Program Files\\Logitech\\Logitech Harmony Remote Software 7\\HarmonyRemote.exe"= c:\program files\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe:*:Enabled:Logitech Harmony Remote Software 7

R1 SASKUTIL;SASKUTIL; [x]
R3 Arrakis3;BitDefender Arrakis Server;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe [2008-07-17 118784]
R3 getPlus(R) Helper;getPlus(R) Helper;c:\program files\NOS\bin\getPlus_HelperSvc.exe [2008-06-26 31592]
S2 BDVEDISK;BDVEDISK;c:\program files\BitDefender\BitDefender 2009\BDVEDISK.sys [2009-04-17 82696]
S2 BOCore;BOCore;c:\program files\Comodo\CBOClean\BOCORE.exe [2008-03-27 73464]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S3 bdfm;bdfm;c:\windows\system32\drivers\bdfm.sys [2009-04-17 111112]
S3 Bdfndisf;BitDefender Firewall NDIS Filter Service;c:\windows\system32\DRIVERS\bdfndisf.sys [2009-04-17 104328]
S3 TfBulk;TfBulk;c:\windows\system32\DRIVERS\TfBulk.sys [2007-05-31 13312]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bdx REG_MULTI_SZ scan

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9e5ab778-40f6-11dd-bc8b-001c25881c9d}]
\shell\AutoRun\command - K:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ec47aee1-9641-11dd-ac11-001c25881c9d}]
\shell\AutoRun\command - L:\LaunchU3.exe -a
.
Contents of the 'Scheduled Tasks' folder

2009-04-22 c:\windows\Tasks\Spybot - Search & Destroy - Scheduled Task.job
- c:\program files\Spybot - Search & Destroy\SbSD.exe [2009-04-13 05:31]

2009-04-22 c:\windows\Tasks\Spybot - Search & Destroy Updater - Scheduled Task.job
- c:\program files\Spybot - Search & Destroy\SDUpdate.exe [2009-04-13 05:31]

2009-04-24 c:\windows\Tasks\User_Feed_Synchronization-{5BAAAF56-1351-453D-8D8A-4B3FC76EDE93}.job
- c:\windows\system32\msfeedssync.exe [2008-06-20 07:33]

2009-04-23 c:\windows\Tasks\User_Feed_Synchronization-{93E7DC4F-24FD-4BAE-B9CA-738C5562A473}.job
- c:\windows\system32\msfeedssync.exe [2008-06-20 07:33]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com.au/
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://au.rd.yahoo.com/customize/ycomp/defaults/su/*http://au.yahoo.com
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
.

**************************************************************************
scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files:

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\System\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
Completion time: 2009-04-24 19:43
ComboFix-quarantined-files.txt 2009-04-24 09:43
ComboFix2.txt 2009-04-22 11:23

Pre-Run: 163,473,465,344 bytes free
Post-Run: 163,480,440,832 bytes free

782 --- E O F --- 2009-04-21 23:00

**Shaba** · 2009-04-24, 18:10

Delete this folder as well:

c:\program files\Vuze

Empty Recycle Bin.

Please go to Kaspersky website and perform an online antivirus scan.

Note: If you are using Windows Vista, open your browser by right-clicking on its icon and select 'Run as administrator' to perform this scan.

Read through the requirements and privacy statement and click on Accept button.
It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
When the downloads have finished, click on Settings.
Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
- Spyware, Adware, Dialers, and other potentially dangerous programs
  Archives
Click on My Computer under Scan.
Once the scan is complete, it will display the results. Click on View Scan Report.
You will see a list of infected items there. Click on Save Report As....
Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.
Please post this log in your next reply along with a fresh HijackThis log.

If you need a tutorial, see here

**Brinesy** · 2009-04-25, 00:32

Hi Shaba

This is the online scan log, but I just noticed that it scanned Critical Objects by default. Do you want me to do it again for 'My Computer'?

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7.0 REPORT
Saturday, April 25, 2009
Operating System: Microsoft Windows Vista Home Premium Edition, 32-bit Service Pack 1 (build 6001)
Kaspersky Online Scanner version: 7.0.26.13
Program database last update: Friday, April 24, 2009 08:11:47
Records in database: 2074498
--------------------------------------------------------------------------------

Scan settings:
Scan using the following database: extended
Scan archives: yes
Scan mail databases: yes

Scan area - Critical Areas:
C:\Program Files
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
C:\Users\Brett\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
C:\Windows

Scan statistics:
Files scanned: 94696
Threat name: 0
Infected objects: 0
Suspicious objects: 0
Duration of the scan: 01:17:50

No malware has been detected. The scan area is clean.

The selected area was scanned.

**Shaba** · 2009-04-25, 10:43

Yes, please

**Brinesy** · 2009-04-26, 03:11

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7.0 REPORT
Sunday, April 26, 2009
Operating System: Microsoft Windows Vista Home Premium Edition, 32-bit Service Pack 1 (build 6001)
Kaspersky Online Scanner version: 7.0.26.13
Program database last update: Saturday, April 25, 2009 21:25:15
Records in database: 2078794
--------------------------------------------------------------------------------

Scan settings:
Scan using the following database: extended
Scan archives: yes
Scan mail databases: yes

Scan area - My Computer:
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\
M:\

Scan statistics:
Files scanned: 222684
Threat name: 5
Infected objects: 11
Suspicious objects: 0
Duration of the scan: 03:37:22

File name / Threat name / Threats count
C:\Qoobox\Quarantine\C\Windows\System32\gxvxcrcqercnnottxbpwvihqroqlnlikhcpoe.dll.vir Infected: Trojan.Win32.Agent2.hoq 1
C:\Users\Brett\AppData\Local\Microsoft\Outlook\archive.pst Infected: Trojan.Win32.Genome.hdr 1
C:\Users\Brett\Documents\My Documents\Documents and Settings\brett1\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst Infected: Email-Worm.Win32.Bagle.p 4
F:\Documents and Settings\Brett\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst Infected: not-a-virus:PSWTool.Win32.RAS.a 2
F:\Documents and Settings\Brett\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst Infected: Trojan-Downloader.Win32.INService.gen 3

The selected area was scanned.

Thread: Spybot Search & Destroy has stopped working

Thread Tools

Display

HJT Uninstall List

Done

Log as requested

New Kaspersky Log

Posting Permissions