Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ComboFix 13-04-12.02 - RWBoyle 04/12/2013 16:06:54.1.2 - x86
- Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.3317.2676 [GMT -5:00]
- Running from: E:\ComboFix.exe
- AV: Norton 360 *Disabled/Updated* {E10A9785-9598-4754-B552-92431C1C35F8}
- FW: Norton 360 *Disabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}
- .
- .
- ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
- .
- .
- c:\documents and settings\All Users\Application Data\BrowserZinc
- c:\documents and settings\All Users\Start Menu\PersonSecurity
- c:\documents and settings\All Users\Start Menu\PersonSecurity\Computer Scan.lnk
- c:\documents and settings\All Users\Start Menu\PersonSecurity\Personal Security.lnk
- c:\documents and settings\All Users\Start Menu\PersonSecurity\Registration.lnk
- c:\documents and settings\All Users\Start Menu\PersonSecurity\Security Center.lnk
- c:\documents and settings\All Users\Start Menu\PersonSecurity\Settings.lnk
- c:\documents and settings\All Users\Start Menu\PersonSecurity\Update.lnk
- c:\documents and settings\RWBoyle\Application Data\PriceGong
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\1.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\2229.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\3620.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\4489.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\450.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\a.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\b.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\c.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\d.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\e.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\f.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\g.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\h.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\i.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\j.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\k.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\l.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\m.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\n.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\o.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\p.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\q.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\r.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\s.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\t.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\u.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\v.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\w.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\wlu.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\x.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\y.txt
- c:\documents and settings\RWBoyle\Application Data\PriceGong\Data\z.txt
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\config.md
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\ipdata.md
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100111-194706.406.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100111-205309.609.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100112-012740.843.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100112-163000.250.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100112-195526.687.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100115-025432.171.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100116-091836.906.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100122-050640.906.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100125-062621.906.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100125-143349.953.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100126-071954.093.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100126-184019.781.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100126-184109.921.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100127-113005.562.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100127-113020.906.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100128-004651.265.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100128-004820.390.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100128-004853.296.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100128-071419.390.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100128-094610.750.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100128-203454.500.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100128-221828.640.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100128-221930.140.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100129-171207.484.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100201-194525.359.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100202-151929.750.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100202-151954.546.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100205-090443.359.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100216-092802.312.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100216-094720.187.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100216-194733.812.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100216-202126.812.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100216-223037.171.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100218-210056.640.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100219-144148.234.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100220-164916.984.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100220-165427.406.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100220-165818.140.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100224-073842.343.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100301-155015.828.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100308-160513.531.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100308-160600.359.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100308-160642.593.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100316-091545.640.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100317-172457.406.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100323-202858.411.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100323-203235.474.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100324-081914.093.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100325-170552.046.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100325-171712.328.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100329-112314.062.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100331-081526.953.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100331-135953.109.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100404-172739.562.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100408-145510.390.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100413-215135.066.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100419-103149.203.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100420-081823.359.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100421-074441.781.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100427-081953.093.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100429-073306.070.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\NP_20100501-094449.734.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Automated Content Enhancer\4.2.0.5360\rstatus.md
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\config.md
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100111-194716.968.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100111-205311.546.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100112-012741.843.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100112-163001.203.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100112-195527.968.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100115-025433.812.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100116-091838.125.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100122-050642.421.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100125-062623.078.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100125-143351.140.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100126-071955.265.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100126-184021.031.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100126-184111.281.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100127-113007.296.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100127-113022.015.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100128-004652.468.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100128-004821.171.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100128-004854.031.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100128-071420.156.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100128-094611.484.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100128-203458.765.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100128-221833.078.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100128-221932.578.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100129-171209.312.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100201-194527.484.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100202-151930.921.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100202-151955.875.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100205-090445.031.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100216-092803.890.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100216-094721.390.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100216-194734.984.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100216-202128.078.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100216-223038.390.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100218-210057.828.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100219-144149.343.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100220-164918.859.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100220-165428.421.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100220-165819.593.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100224-073843.921.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100301-155018.500.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100308-160515.578.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100308-160602.218.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100308-160644.187.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100316-091547.453.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100317-172459.312.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100323-202901.083.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100323-203236.646.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100324-081916.437.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100325-170553.328.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100325-171713.421.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100329-112317.468.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100331-081529.828.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100331-135954.156.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100404-172741.593.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100408-145512.984.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100413-215137.566.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100419-103151.078.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100420-081825.031.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100421-074444.609.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100427-081955.406.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100429-073308.664.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\HJHP_20100501-094452.406.log
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\ipdata.md
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Customized Platform Advancer\4.2.0.2050\rstatus.md
- c:\documents and settings\RWBoyle\Local Settings\Application Data\I Want This
- c:\documents and settings\RWBoyle\Local Settings\Application Data\I Want This\Chrome\I Want This.crx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Internet Today
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Data\Module_Logo.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Data\Module_Option.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Data\Module_RSS.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Data\Module_Search.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Data\Module_Smiley_Config.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Data\Module_Smiley_TellAFriend.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Data\Module_WebDropdown_01.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Data\Module_WebDropdown_02.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Data\Module_WebDropdown_03.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Data\Module_WebDropdown_04.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Data\Module_WebDropdown_05.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Data\Module_WebDropdown_06.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Data\Module_WebDropdown_07.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Data\Module_WebDropdown_08.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Data\Module_WebDropdown_09.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Data\Module_WebDropdown_10.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Data\Module_WebDropdown_11.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Data\Module_WebDropdown_12.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Data\Module_WebDropdown_13.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Data\Module_WebDropdown_14.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Data\pixel.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Data\ProductInfo.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Data\profile.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Data\SearchEngineList.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Data\tbcore.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Data\ToolbarLayout.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Data\UpdateCentre.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Data\UpdateCentreBk.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\About.mg
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Component_ComboBox.mg
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_Logo.mg
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_Option.mg
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_Option_Menu.mg
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_RSS.mg
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_RSS.png
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_RSS_Menu.mg
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_RSS_Menu.png
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_Search.mg
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_01.mg
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_01.png
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_02.mg
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_02.png
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_03.mg
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_03.png
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_04.mg
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_04.png
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_05.mg
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_05.png
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_06.mg
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_06.png
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_07.mg
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_07.png
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_08.mg
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_09.mg
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_10.mg
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_11.mg
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_12.mg
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_13.mg
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_14.mg
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Skins\myskin1.skf
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Skins\myskin2.skf
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Skins\myskin3.skf
- c:\documents and settings\RWBoyle\Local Settings\Application Data\PornaZtar Toolbar\2.2.1.8460\Skins\myskin4.skf
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Textual Content Provider
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Textual Content Provider\1.2.0.2040\Data\TP_Config.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Textual Content Provider\1.2.0.2040\Data\TP_Data.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Textual Content Provider\1.2.0.2040\Data\TP_DomainExcludeList.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Textual Content Provider\1.2.0.2040\Data\TP_DomainInterval.mx
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Web Search Operator
- c:\documents and settings\RWBoyle\Local Settings\Application Data\Web Search Operator\4.2.0.2150\config.md
- c:\documents and settings\RWBoyle\ntuser.tmp
- c:\program files\Automated Content Enhancer
- c:\program files\Automated Content Enhancer\4.2.0.5360\ACECommon.dll
- c:\program files\Automated Content Enhancer\4.2.0.5360\ACEIeaddon.dll
- c:\program files\Automated Content Enhancer\4.2.0.5360\Data\config.md
- c:\program files\Automated Content Enhancer\4.2.0.5360\FF\chrome.manifest
- c:\program files\Automated Content Enhancer\4.2.0.5360\FF\chrome\ACEAddOn.jar
- c:\program files\Automated Content Enhancer\4.2.0.5360\FF\chrome\content\ACEAddOn.js
- c:\program files\Automated Content Enhancer\4.2.0.5360\FF\chrome\content\ACEAddOn.xul
- c:\program files\Automated Content Enhancer\4.2.0.5360\FF\components\ACEFFAddOn.xpt
- c:\program files\Automated Content Enhancer\4.2.0.5360\FF\components\ACEFFHelperComponent.js
- c:\program files\Automated Content Enhancer\4.2.0.5360\FF\install.rdf
- c:\program files\Automated Content Enhancer\4.2.0.5360\unins000.dat
- c:\program files\Automated Content Enhancer\4.2.0.5360\unins000.exe
- c:\program files\BrowserCompanion
- c:\program files\BrowserCompanion\BCHelper.exe
- c:\program files\BrowserCompanion\blabbers-ch.crx
- c:\program files\BrowserCompanion\blabbers-ff-full.xpi
- c:\program files\BrowserCompanion\jsloader.dll
- c:\program files\BrowserCompanion\logo.ico
- c:\program files\BrowserCompanion\sqlite3.dll
- c:\program files\BrowserCompanion\tdataprotocol.dll
- c:\program files\BrowserCompanion\toolbar.dll
- c:\program files\BrowserCompanion\uninstall.exe
- c:\program files\BrowserCompanion\updatebhoWin32.dll
- c:\program files\BrowserCompanion\updater.ini
- c:\program files\BrowserCompanion\widgetserv.exe
- c:\program files\BrowserZinc
- c:\program files\BrowserZinc\uninstall.exe
- c:\program files\Common Files\PersonSecurityUninstall
- c:\program files\Common Files\PersonSecurityUninstall\Uninstall.lnk
- c:\program files\Content Management Wizard
- c:\program files\Content Management Wizard\1.2.0.2080\CMWIE.dll
- c:\program files\Content Management Wizard\1.2.0.2080\cmwsh.dll
- c:\program files\Content Management Wizard\1.2.0.2080\config.mx
- c:\program files\Content Management Wizard\1.2.0.2080\data.mx
- c:\program files\Content Management Wizard\1.2.0.2080\exclude.mx
- c:\program files\Content Management Wizard\1.2.0.2080\MatchingData.zd5
- c:\program files\Content Management Wizard\1.2.0.2080\pxtmpdata.mx
- c:\program files\Content Management Wizard\1.2.0.2080\unins000.dat
- c:\program files\Content Management Wizard\1.2.0.2080\unins000.exe
- c:\program files\Customized Platform Advancer
- c:\program files\Customized Platform Advancer\4.2.0.2050\CPAIEAddOn.dll
- c:\program files\Customized Platform Advancer\4.2.0.2050\Data\config.md
- c:\program files\Customized Platform Advancer\4.2.0.2050\FF\chrome.manifest
- c:\program files\Customized Platform Advancer\4.2.0.2050\FF\chrome\content\CPAAddOn.js
- c:\program files\Customized Platform Advancer\4.2.0.2050\FF\chrome\content\CPAAddOn.xul
- c:\program files\Customized Platform Advancer\4.2.0.2050\FF\chrome\CPAAddOn.jar
- c:\program files\Customized Platform Advancer\4.2.0.2050\FF\components\CPAFFAddOn.xpt
- c:\program files\Customized Platform Advancer\4.2.0.2050\FF\components\CPAFFHelperComponent.js
- c:\program files\Customized Platform Advancer\4.2.0.2050\FF\install.rdf
- c:\program files\Customized Platform Advancer\4.2.0.2050\unins000.dat
- c:\program files\Customized Platform Advancer\4.2.0.2050\unins000.exe
- c:\program files\I Want This
- c:\program files\I Want This\I Want This.ico
- c:\program files\I Want This\I Want This.ini
- c:\program files\I Want This\I Want ThisGui.exe
- c:\program files\I Want This\I Want ThisInstaller.log
- c:\program files\I Want This\json.js
- c:\program files\I Want This\Uninstall.exe
- c:\program files\Internet Today
- c:\program files\Internet Today\1.2.0.1420\InternetToday.ico
- c:\program files\Internet Today\1.2.0.1420\InternetToday.skf
- c:\program files\Internet Today\1.2.0.1420\mfc80.dll
- c:\program files\Internet Today\1.2.0.1420\Microsoft.VC80.CRT.manifest
- c:\program files\Internet Today\1.2.0.1420\Microsoft.VC80.MFC.manifest
- c:\program files\Internet Today\1.2.0.1420\msvcr80.dll
- c:\program files\Internet Today\1.2.0.1420\SkinCrafterDll.dll
- c:\program files\Internet Today\1.2.0.1420\unins000.dat
- c:\program files\Internet Today\1.2.0.1420\unins000.exe
- c:\program files\PersonSecurity
- c:\program files\PornaZtar Toolbar
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Data\Module_Logo.mx
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Data\Module_Option.mx
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Data\Module_RSS.mx
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Data\Module_Search.mx
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Data\Module_Smiley_Config.mx
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Data\Module_WebDropdown_01.mx
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Data\Module_WebDropdown_02.mx
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Data\Module_WebDropdown_03.mx
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Data\Module_WebDropdown_04.mx
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Data\Module_WebDropdown_05.mx
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Data\Module_WebDropdown_06.mx
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Data\pixel.mx
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Data\ProductInfo.mx
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Data\profile.mx
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Data\SearchEngineList.mx
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Data\tbcore.mx
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Data\ToolbarLayout.mx
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Data\UpdateCentre.mx
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Data\UpdateCentreBk.mx
- c:\program files\PornaZtar Toolbar\2.2.1.8460\FFToolbar\chrome.manifest
- c:\program files\PornaZtar Toolbar\2.2.1.8460\FFToolbar\chrome\locale\en-US\global.dtd
- c:\program files\PornaZtar Toolbar\2.2.1.8460\FFToolbar\chrome\MVBToolbarToolbar.jar
- c:\program files\PornaZtar Toolbar\2.2.1.8460\FFToolbar\components\IMVBCore.xpt
- c:\program files\PornaZtar Toolbar\2.2.1.8460\FFToolbar\components\MVBCore.dll
- c:\program files\PornaZtar Toolbar\2.2.1.8460\FFToolbar\components\MVBTBFFHelper.js
- c:\program files\PornaZtar Toolbar\2.2.1.8460\FFToolbar\components\MVBToolbarAutoComplete.js
- c:\program files\PornaZtar Toolbar\2.2.1.8460\FFToolbar\install.rdf
- c:\program files\PornaZtar Toolbar\2.2.1.8460\FFToolbar\searchplugins\mvbtoolbarsearchplugins.xml
- c:\program files\PornaZtar Toolbar\2.2.1.8460\gdiplus.dll
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Icons\About.mg
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Icons\Component_ComboBox.mg
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Icons\Module_Logo.mg
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Icons\Module_Option.mg
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Icons\Module_Option_Menu.mg
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Icons\Module_RSS.mg
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Icons\Module_RSS.png
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Icons\Module_RSS_Menu.mg
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Icons\Module_RSS_Menu.png
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Icons\Module_Search.mg
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_01.mg
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_01.png
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_02.mg
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_02.png
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_03.mg
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_03.png
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_04.mg
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_04.png
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_05.mg
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_05.png
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_06.mg
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Icons\Module_WebDropdown_06.png
- c:\program files\PornaZtar Toolbar\2.2.1.8460\mfc80.dll
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Microsoft.VC80.CRT.manifest
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Microsoft.VC80.MFC.manifest
- c:\program files\PornaZtar Toolbar\2.2.1.8460\msvcr80.dll
- c:\program files\PornaZtar Toolbar\2.2.1.8460\SkinCrafterDll.dll
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Skins\myskin1.skf
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Skins\myskin2.skf
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Skins\myskin3.skf
- c:\program files\PornaZtar Toolbar\2.2.1.8460\Skins\myskin4.skf
- c:\program files\Textual Content Provider
- c:\program files\Textual Content Provider\1.2.0.2040\data\pxtmpdata.mx
- c:\program files\Textual Content Provider\1.2.0.2040\data\TP_Config.mx
- c:\program files\Textual Content Provider\1.2.0.2040\data\TP_Data.mx
- c:\program files\Textual Content Provider\1.2.0.2040\data\TP_DomainExcludeList.mx
- c:\program files\Textual Content Provider\1.2.0.2040\data\TP_DomainInterval.mx
- c:\program files\Textual Content Provider\1.2.0.2040\data\TP_KeywordInterval.mx
- c:\program files\Textual Content Provider\1.2.0.2040\TCPIe.dll
- c:\program files\Textual Content Provider\1.2.0.2040\unins000.dat
- c:\program files\Textual Content Provider\1.2.0.2040\unins000.exe
- c:\program files\Web Search Operator
- c:\program files\Web Search Operator\4.2.0.2150\Data\config.md
- c:\program files\Web Search Operator\4.2.0.2150\FF\chrome.manifest
- c:\program files\Web Search Operator\4.2.0.2150\FF\chrome\content\WSOAddOn.js
- c:\program files\Web Search Operator\4.2.0.2150\FF\chrome\content\WSOAddOn.xul
- c:\program files\Web Search Operator\4.2.0.2150\FF\chrome\WSOAddOn.jar
- c:\program files\Web Search Operator\4.2.0.2150\FF\components\WSOFFAddOn.xpt
- c:\program files\Web Search Operator\4.2.0.2150\FF\components\WSOFFHelperComponent.js
- c:\program files\Web Search Operator\4.2.0.2150\FF\install.rdf
- c:\program files\Web Search Operator\4.2.0.2150\unins000.dat
- c:\program files\Web Search Operator\4.2.0.2150\unins000.exe
- c:\windows\Downloaded Program Files\f3initialsetup1.0.1.1.inf
- c:\windows\system32\1892868562.dat
- c:\windows\system32\spool\prtprocs\w32x86\LXAIPP5C.DLL
- c:\windows\system32\spool\prtprocs\w32x86\pcldll6l.dll
- c:\windows\system32\spool\prtprocs\w32x86\zpp.dll
- c:\windows\system32\spool\prtprocs\w32x86\zpppcl.dll
- c:\windows\system32\URTTemp
- c:\windows\system32\URTTemp\fusion.dll
- c:\windows\system32\URTTemp\mscoree.dll
- c:\windows\system32\URTTemp\mscorsn.dll
- c:\windows\system32\URTTemp\mscorwks.dll
- c:\windows\system32\URTTemp\msvcr71.dll
- c:\windows\system32\URTTemp\regtlib.exe
- .
- .
- ((((((((((((((((((((((((( Files Created from 2013-03-12 to 2013-04-12 )))))))))))))))))))))))))))))))
- .
- .
- 2013-04-12 20:47 . 2013-04-12 20:47 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
- 2013-04-12 11:29 . 2013-04-12 14:39 -------- d---a-w- C:\Kaspersky Rescue Disk 10.0
- 2013-03-19 15:54 . 2013-02-12 00:32 12928 ------w- c:\windows\system32\dllcache\usb8023x.sys
- 2013-03-19 15:54 . 2013-02-12 00:32 12928 ------w- c:\windows\system32\dllcache\usb8023.sys
- .
- .
- .
- (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
- .
- 2013-03-13 15:41 . 2012-12-27 23:25 693976 ----a-w- c:\windows\system32\FlashPlayerApp.exe
- 2013-03-13 15:41 . 2012-12-27 23:25 73432 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
- 2013-03-08 08:36 . 2004-08-10 17:51 293376 ----a-w- c:\windows\system32\winsrv.dll
- 2013-03-07 01:32 . 2004-08-10 17:51 2149888 ----a-w- c:\windows\system32\ntoskrnl.exe
- 2013-03-07 00:50 . 2004-08-04 03:59 2028544 ----a-w- c:\windows\system32\ntkrnlpa.exe
- 2013-03-06 10:38 . 2013-03-05 23:09 770384 ----a-w- c:\windows\system32\msvcr100.dll
- 2013-03-06 10:38 . 2013-03-05 23:09 421200 ----a-w- c:\windows\system32\msvcp100.dll
- 2013-03-02 02:06 . 2004-08-10 17:51 916480 ----a-w- c:\windows\system32\wininet.dll
- 2013-03-02 02:06 . 2004-08-10 17:51 43520 ------w- c:\windows\system32\licmgr10.dll
- 2013-03-02 02:06 . 2004-08-10 17:51 1469440 ------w- c:\windows\system32\inetcpl.cpl
- 2013-03-02 01:25 . 2004-08-10 17:51 1867264 ----a-w- c:\windows\system32\win32k.sys
- 2013-03-02 01:08 . 2004-08-10 17:51 385024 ------w- c:\windows\system32\html.iec
- 2013-02-27 07:56 . 2004-08-10 18:01 2067456 ----a-w- c:\windows\system32\mstscax.dll
- 2013-02-12 00:32 . 2008-08-02 20:00 12928 ------w- c:\windows\system32\drivers\usb8023x.sys
- 2013-02-12 00:32 . 2004-08-10 17:51 12928 ----a-w- c:\windows\system32\drivers\usb8023.sys
- 2013-01-26 03:55 . 2004-08-10 17:51 552448 ----a-w- c:\windows\system32\oleaut32.dll
- 2009-01-05 17:08 . 2009-01-05 17:08 122880 ----a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
- 2007-11-28 19:12 . 2007-12-18 06:11 67696 ----a-w- c:\program files\mozilla firefox\components\jar50.dll
- 2007-11-28 19:12 . 2007-12-18 06:11 54376 ----a-w- c:\program files\mozilla firefox\components\jsd3250.dll
- 2007-11-28 19:12 . 2007-12-18 06:11 34952 ----a-w- c:\program files\mozilla firefox\components\myspell.dll
- 2007-11-28 19:12 . 2007-12-18 06:11 46720 ----a-w- c:\program files\mozilla firefox\components\spellchk.dll
- 2007-11-28 19:12 . 2007-12-18 06:11 172144 ----a-w- c:\program files\mozilla firefox\components\xpinstal.dll
- .
- .
- ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
- .
- .
- *Note* empty entries & legit default entries are not shown
- REGEDIT4
- .
- [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
- "{b260ae58-13e8-4298-a7b5-48885939ff5a}"= "c:\program files\TV_Bar_2_B\prxtbTV_0.dll" [2013-03-05 231168]
- .
- [HKEY_CLASSES_ROOT\clsid\{b260ae58-13e8-4298-a7b5-48885939ff5a}]
- .
- [HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{b260ae58-13e8-4298-a7b5-48885939ff5a}]
- 2013-03-05 13:37 231168 ----a-w- c:\program files\TV_Bar_2_B\prxtbTV_0.dll
- .
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
- "{b260ae58-13e8-4298-a7b5-48885939ff5a}"= "c:\program files\TV_Bar_2_B\prxtbTV_0.dll" [2013-03-05 231168]
- .
- [HKEY_CLASSES_ROOT\clsid\{b260ae58-13e8-4298-a7b5-48885939ff5a}]
- .
- [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
- "{B260AE58-13E8-4298-A7B5-48885939FF5A}"= "c:\program files\TV_Bar_2_B\prxtbTV_0.dll" [2013-03-05 231168]
- .
- [HKEY_CLASSES_ROOT\clsid\{b260ae58-13e8-4298-a7b5-48885939ff5a}]
- .
- [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
- "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-10-04 68856]
- "GameXN GO"="c:\documents and settings\All Users\Application Data\GameXN\GameXNGO.exe" [2012-02-29 347008]
- "SearchProtect"="c:\documents and settings\RWBoyle\Application Data\SearchProtect\bin\cltmng.exe" [2013-03-06 2731296]
- .
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
- "HostManager"="c:\program files\Common Files\AOL\1119759799\ee\AOLSoftware.exe" [2010-03-08 41800]
- "ioloDelayModule"="c:\program files\iolo\System Mechanic Professional 6\delay.exe" [2005-06-09 96256]
- "dellsupportcenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2009-05-21 206064]
- "dscactivate"="c:\program files\Dell Support Center\gs_agent\custom\dsca.exe" [2007-11-15 16384]
- "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-11-04 413696]
- "LifeCam"="c:\program files\Microsoft LifeCam\LifeExp.exe" [2009-03-17 157552]
- "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2011-08-31 40368]
- "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
- "SearchProtectAll"="c:\program files\SearchProtect\bin\cltmng.exe" [2013-02-20 2674464]
- .
- c:\documents and settings\All Users\Start Menu\Programs\Startup\
- HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2006-2-19 288472]
- .
- [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
- BootExecute REG_MULTI_SZ autocheck autochk *\0smrgdf c:\program files\iolo\System Mechanic Professional 6\
- .
- [HKEY_LOCAL_MACHINE\software\microsoft\security center]
- "AntiVirusOverride"=dword:00000001
- "FirewallOverride"=dword:00000001
- .
- [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
- "%windir%\\system32\\sessmgr.exe"=
- "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
- .
- [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
- "1723:TCP"= 1723:TCP:@xpsp2res.dll,-22015
- "1701:UDP"= 1701:UDP:@xpsp2res.dll,-22016
- "500:UDP"= 500:UDP:@xpsp2res.dll,-22017
- .
- R0 SymDS;Symantec Data Store;c:\windows\system32\drivers\N360\0604010.00E\symds.sys [2/5/2013 10:35 PM 340088]
- R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360\0604010.00E\symefa.sys [2/5/2013 10:35 PM 924320]
- R1 BHDrvx86;BHDrvx86;c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.0.1.2\Definitions\BASHDefs\20130322.001\BHDrvx86.sys [3/21/2013 8:52 PM 997464]
- R1 ccSet_N360;Norton 360 Settings Manager;c:\windows\system32\drivers\N360\0604010.00E\ccsetx86.sys [2/5/2013 10:35 PM 132768]
- R1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\N360\0604010.00E\ironx86.sys [2/5/2013 10:35 PM 149624]
- R2 BBSvc;BingBar Service;c:\program files\Microsoft\BingBar\7.1.391.0\BBSvc.EXE [6/11/2012 4:22 PM 193616]
- R2 CltMngSvc;Search Protect by Conduit Updater;c:\program files\SearchProtect\bin\CltMngSvc.exe [2/20/2013 7:38 AM 93984]
- R2 N360;Norton 360;c:\program files\Norton 360\Engine\6.4.1.14\ccsvchst.exe [2/5/2013 10:35 PM 138272]
- R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [8/15/2012 1:55 AM 106656]
- R3 IDSxpx86;IDSxpx86;c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.0.1.2\Definitions\IPSDefs\20130411.001\IDSXpx86.sys [4/12/2013 3:35 PM 373728]
- S2 gupdate1c9c875a563d2a2;Google Update Service (gupdate1c9c875a563d2a2);c:\program files\Google\Update\GoogleUpdate.exe [4/28/2009 9:53 PM 133104]
- S2 ITGrdEngine;Guard Service;c:\documents and settings\PastorBoyle\Local Settings\Application Data\Microsoft\Windows\services.exe --> c:\documents and settings\PastorBoyle\Local Settings\Application Data\Microsoft\Windows\services.exe [?]
- S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [11/9/2012 12:21 PM 160944]
- S3 BBUpdate;BBUpdate;c:\program files\Microsoft\BingBar\7.1.391.0\SeaPort.EXE [6/11/2012 4:22 PM 240208]
- S3 GoogleDesktopManager-061008-081103;Google Desktop Manager 5.7.806.10245;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [10/1/2007 7:18 PM 29744]
- S3 LLUSBFLT;LLUSBFLT;c:\windows\system32\drivers\llusbflt.sys [8/3/2005 4:59 PM 4736]
- S3 PLUsbbc2;High-Speed USB Bridge Cable Driver;c:\windows\system32\drivers\usbbc2.sys [8/3/2005 4:59 PM 8960]
- S3 PortAcc;Spearit Port Access;c:\program files\Laplink\PCmover\PortAcc.sys [11/1/2007 7:49 AM 16176]
- S3 SGUARD;SGUARD;\??\c:\windows\system32\drivers\SGuard.sys --> c:\windows\system32\drivers\SGuard.sys [?]
- .
- [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
- HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
- .
- [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
- 2013-04-09 18:02 1642448 ----a-w- c:\program files\Google\Chrome\Application\26.0.1410.64\Installer\chrmstp.exe
- .
- Contents of the 'Scheduled Tasks' folder
- .
- 2013-04-11 c:\windows\Tasks\Adobe Flash Player Updater.job
- - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-12-27 15:41]
- .
- 2013-04-06 c:\windows\Tasks\AppleSoftwareUpdate.job
- - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 18:34]
- .
- 2013-04-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- - c:\program files\Google\Update\GoogleUpdate.exe [2009-04-29 02:53]
- .
- 2013-04-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- - c:\program files\Google\Update\GoogleUpdate.exe [2009-04-29 02:53]
- .
- 2013-04-12 c:\windows\Tasks\User_Feed_Synchronization-{DE4093C8-BBA6-41FB-B26D-0C2ABFDC9964}.job
- - c:\windows\system32\msfeedssync.exe [2007-08-13 09:31]
- .
- .
- ------- Supplementary Scan -------
- .
- uStart Page = hxxp://search.conduit.com/?ctid=CT3282132&octid=CT3282132&SearchSource=61&CUI=UN30572269646709271&UM=UM_ID&UP=SPB0452B1E-805E-4EBB-8176-57DAB5EEEED3
- mSearchURL = hxxp://4-counter.com/?a=2
- IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
- TCP: DhcpNameServer = 192.168.1.1
- FF - ProfilePath -
- .
- .
- ------- File Associations -------
- .
- JSEFile=NOTEPAD.EXE %1
- .
- - - - - ORPHANS REMOVED - - - -
- .
- HKLM-Run-Browser companion helper - c:\program files\BrowserCompanion\BCHelper.exe
- SharedTaskScheduler-IPC Configuration Utility - (no file)
- AddRemove-BrowserCompanion - c:\program files\BrowserCompanion\uninstall.exe
- AddRemove-BrowserZinc - c:\program files\BrowserZinc\uninstall.exe
- AddRemove-I Want This - c:\program files\I Want This\Uninstall.exe
- AddRemove-PersonSecurity - c:\program files\PersonSecurity\psecurity.exe
- .
- .
- .
- **************************************************************************
- .
- catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
- Rootkit scan 2013-04-12 16:18
- Windows 5.1.2600 Service Pack 3 NTFS
- .
- scanning hidden processes ...
- .
- scanning hidden autostart entries ...
- .
- scanning hidden files ...
- .
- scan completed successfully
- hidden files: 0
- .
- **************************************************************************
- .
- [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\N360]
- "ImagePath"="\"c:\program files\Norton 360\Engine\6.4.1.14\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files\Norton 360\Engine\6.4.1.14\diMaster.dll\" /prefetch:1"
- .
- --------------------- LOCKED REGISTRY KEYS ---------------------
- .
- [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
- @Denied: (A 2) (Everyone)
- @="FlashBroker"
- "LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe,-101"
- .
- [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
- "Enabled"=dword:00000001
- .
- [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
- @="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe"
- .
- [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
- @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
- .
- [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
- @Denied: (A 2) (Everyone)
- @="IFlashBroker5"
- .
- [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
- @="{00020424-0000-0000-C000-000000000046}"
- .
- [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
- @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
- "Version"="1.0"
- .
- --------------------- DLLs Loaded Under Running Processes ---------------------
- .
- - - - - - - - > 'explorer.exe'(3548)
- c:\windows\system32\WININET.dll
- c:\windows\system32\ieframe.dll
- c:\windows\system32\webcheck.dll
- c:\windows\system32\WPDShServiceObj.dll
- c:\program files\Common Files\aolshare\aolshcpy.dll
- c:\windows\system32\PortableDeviceTypes.dll
- c:\windows\system32\PortableDeviceApi.dll
- .
- ------------------------ Other Running Processes ------------------------
- .
- c:\program files\Common Files\Acronis\Schedule2\schedul2.exe
- c:\program files\Common Files\AOL\ACS\AOLAcsd.exe
- c:\program files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
- c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
- c:\program files\Common Files\AOL\TopSpeed\2.0\aoltpspd.exe
- c:\program files\Bonjour\mDNSResponder.exe
- c:\program files\Executive Software\Diskeeper\DkService.exe
- c:\program files\Dell Network Assistant\hnm_svc.exe
- c:\program files\Microsoft LifeCam\MSCamS32.exe
- c:\program files\Dell Support Center\bin\sprtsvc.exe
- c:\windows\system32\wbem\unsecapp.exe
- c:\program files\HP\Digital Imaging\bin\hpqnrs08.exe
- c:\program files\HP\Digital Imaging\bin\hpqSTE08.exe
- c:\windows\System32\rundll32.exe
- .
- **************************************************************************
- .
- Completion time: 2013-04-12 16:23:12 - machine was rebooted
- ComboFix-quarantined-files.txt 2013-04-12 21:23
- .
- Pre-Run: 41,963,008,000 bytes free
- Post-Run: 42,130,194,432 bytes free
- .
- WindowsXP-KB310994-SP2-Home-BootDisk-ENU.exe
- [boot loader]
- timeout=2
- default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
- [operating systems]
- c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
- UnsupportedDebug="do not select this" /debug
- multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
- .
- - - End Of File - - B82AC16D9A194FA83F4B38497E0EC66A
Advertisement
Add Comment
Please, Sign In to add comment