SDFix completed. Here is the log...


SDFix: Version 1.240
Run by Mark on Tue 02/03/2009 at 07:22 PM

Microsoft Windows XP [Version 5.1.2600]
Running From: C:\SDFix

Checking Services :


Restoring Default Security Values
Restoring Default Hosts File

Rebooting


Checking Files :

Trojan Files Found:

C:\autorun.inf - Deleted
C:\DOCUME~1\MARK~1.BAR\LOCALS~1\Temp\tmp2.tmp - Deleted
C:\DOCUME~1\MARK~1.BAR\LOCALS~1\Temp\tmp3.tmp - Deleted
C:\DOCUME~1\MARK~1.BAR\LOCALS~1\Temp\tmp4.tmp - Deleted
C:\DOCUME~1\MARK~1.BAR\LOCALS~1\Temp\tmp5.tmp - Deleted
C:\DOCUME~1\MARK~1.BAR\LOCALS~1\Temp\tmp6.tmp - Deleted
C:\DOCUME~1\MARK~1.BAR\LOCALS~1\Temp\tmp7.tmp - Deleted
C:\DOCUME~1\MARK~1.BAR\LOCALS~1\Temp\tmp8.tmp - Deleted
C:\DOCUME~1\MARK~1.BAR\LOCALS~1\Temp\tmp9.tmp - Deleted
C:\DOCUME~1\MARK~1.BAR\LOCALS~1\Temp\tmpA.tmp - Deleted
C:\DOCUME~1\MARK~1.BAR\LOCALS~1\Temp\tmpB.tmp - Deleted
C:\DOCUME~1\MARK~1.BAR\LOCALS~1\Temp\tmpC.tmp - Deleted
C:\DOCUME~1\MARK~1.BAR\LOCALS~1\Temp\tmpD.tmp - Deleted





Removing Temp Files

ADS Check :



Final Check :

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-03 19:37:00
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\gaopdxserv.sys]
"start"=dword:00000001
"type"=dword:00000001
"imagepath"=str(2):"\systemroot\system32\drivers\g aopdxoqodsril.sys"
"group"="file system"
"userdata"=dword:ffffffff

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\gaopdxserv.sys\modules]
"gaopdxserv"="\\?\globalroot\systemroot\system32\d rivers\gaopdxoqodsril.sys"
"gaopdxl"="\\?\globalroot\systemroot\system32\gaop dxmtebukpb.dll"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sptd\Cfg]
"s1"=dword:2df9c43f
"s2"=dword:110480d0
"h0"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"khjeh"=hex:37,6a,09,6e,3c,9f,07,96,c9,42,d1,15,c4 ,8d,25,52,b5,5f,0c,0f,10,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000 001]
"a0"=hex:20,01,00,00,2d,43,96,01,4a,1f,98,0b,fd,e1 ,23,f6,bb,3e,ff,44,53,..
"khjeh"=hex:78,74,de,ac,f8,cd,d4,68,41,35,f2,b3,ca ,34,5d,3c,f4,e6,38,55,48,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000 001\0Jf40]
"khjeh"=hex:9d,04,b1,3f,ad,3b,bd,2e,ce,a6,1a,9c,39 ,e7,3c,bd,8f,63,53,36,31,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000 001\0Jf41]
"khjeh"=hex:80,f9,d9,71,f1,81,bd,91,57,5e,ec,b0,15 ,10,4c,d6,0f,a8,52,d6,46,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000 001\0Jf42]
"khjeh"=hex:ee,39,74,e4,89,6b,38,c8,59,51,0b,ef,2c ,cc,58,bd,ce,d0,14,55,26,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000 001\0Jf43]
"khjeh"=hex:ee,39,74,e4,89,6b,38,c8,59,51,0b,ef,2c ,cc,58,bd,ce,d0,14,55,26,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\g aopdxserv.sys]
"start"=dword:00000001
"type"=dword:00000001
"imagepath"=str(2):"\systemroot\system32\drivers\g aopdxoqodsril.sys"
"group"="file system"
"userdata"=dword:ffffffff

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\g aopdxserv.sys\modules]
"gaopdxserv"="\\?\globalroot\systemroot\system32\d rivers\gaopdxoqodsril.sys"
"gaopdxl"="\\?\globalroot\systemroot\system32\gaop dxmtebukpb.dll"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\s ptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"khjeh"=hex:37,6a,09,6e,3c,9f,07,96,c9,42,d1,15,c4 ,8d,25,52,b5,5f,0c,0f,10,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\s ptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,2d,43,96,01,4a,1f,98,0b,fd,e1 ,23,f6,bb,3e,ff,44,53,..
"khjeh"=hex:78,74,de,ac,f8,cd,d4,68,41,35,f2,b3,ca ,34,5d,3c,f4,e6,38,55,48,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\s ptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\ 0Jf40]
"khjeh"=hex:9d,04,b1,3f,ad,3b,bd,2e,ce,a6,1a,9c,39 ,e7,3c,bd,8f,63,53,36,31,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\s ptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\ 0Jf41]
"khjeh"=hex:80,f9,d9,71,f1,81,bd,91,57,5e,ec,b0,15 ,10,4c,d6,0f,a8,52,d6,46,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\s ptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\ 0Jf42]
"khjeh"=hex:ee,39,74,e4,89,6b,38,c8,59,51,0b,ef,2c ,cc,58,bd,ce,d0,14,55,26,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\s ptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\ 0Jf43]
"khjeh"=hex:ee,39,74,e4,89,6b,38,c8,59,51,0b,ef,2c ,cc,58,bd,ce,d0,14,55,26,..

scanning hidden registry entries ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="zvnmsi.dll"
"DeviceNotSelectedTimeout"="15"
"GDIProcessHandleQuota"=dword:00002710
"Spooler"="yes"
"swapdisk"=""
"TransmissionRetryTimeout"="90"
"USERProcessHandleQuota"=dword:00002710
"LoadAppInit_DLLs"=dword:00000001

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Remaining Services :




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\servic es\sharedaccess\parameters\firewallpolicy\standard profile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\syste m32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\NVIDIA Corporation\\NetworkAccessManager\\Apache Group\\Apache2\\bin\\Apache.exe"="C:\\Program Files\\NVIDIA Corporation\\NetworkAccessManager\\Apache Group\\Apache2\\bin\\Apache.exe:*:Enabled:Apache HTTP Server"
"C:\\Program Files\\Grisoft\\AVG7\\avginet.exe"="C:\\Program Files\\Grisoft\\AVG7\\avginet.exe:*:Enabled:avgine t.exe"
"C:\\Program Files\\Grisoft\\AVG7\\avgamsvr.exe"="C:\\Program Files\\Grisoft\\AVG7\\avgamsvr.exe:*:Enabled:avgam svr.exe"
"C:\\Program Files\\Grisoft\\AVG7\\avgcc.exe"="C:\\Program Files\\Grisoft\\AVG7\\avgcc.exe:*:Enabled:avgcc.ex e"
"C:\\Program Files\\FlashGet\\flashget.exe"="C:\\Program Files\\FlashGet\\flashget.exe:*:Enabled:Flashget"
"C:\\WINDOWS\\system32\\dpvsetup.exe"="C:\\WINDOWS \\system32\\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\\Program Files\\Microsoft Hardware\\Game Voice\\GameVoice.exe"="C:\\Program Files\\Microsoft Hardware\\Game Voice\\GameVoice.exe:*:Enabled:Game Voice"
"C:\\Program Files\\EA GAMES\\Battlefield 2\\BF2.exe"="C:\\Program Files\\EA GAMES\\Battlefield 2\\BF2.exe:*:Enabled:Battlefield 2"
"C:\\WINDOWS\\system32\\rundll32.exe"="C:\\WINDOWS \\system32\\rundll32.exe:*:Enabled:Run a DLL as an App"
"C:\\Program Files\\Shareaza\\Shareaza.exe"="C:\\Program Files\\Shareaza\\Shareaza.exe:*:Enabled:Shareaza"
"C:\\Program Files\\Microsoft Games\\Links 2003 Demo\\LinksMMIII.exe"="C:\\Program Files\\Microsoft Games\\Links 2003 Demo\\LinksMMIII.exe:*:Enabled:Links 2003"
"D:\\Installation\\Setupx.exe"="D:\\Installation\\ Setupx.exe:*:Enabled:Nero ProductSetup"
"C:\\Program Files\\Nero\\Nero 7\\Nero Home\\NeroHome.exe"="C:\\Program Files\\Nero\\Nero 7\\Nero Home\\NeroHome.exe:*:Enabled:Nero Home"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\1701 A.D\\1701.exe"="C:\\Program Files\\1701 A.D\\1701.exe:*:Enabled:1701 A.D."
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"="C:\\Program Files\\Mozilla Firefox\\firefox.exe:*:Enabled:Firefox"
"G:\\Program Files\\Microsoft Games\\Crimson Skies Trial\\crimson.exe"="G:\\Program Files\\Microsoft Games\\Crimson Skies Trial\\crimson.exe:*isabled:Crimson"
"C:\\WINDOWS\\system32\\msiexec.exe"="C:\\WINDOWS\ \system32\\msiexec.exe:*:Enabled:Windowsr installer"
"C:\\Program Files\\Real\\RealPlayer\\realplay.exe"="C:\\Progra m Files\\Real\\RealPlayer\\realplay.exe:*:Enabled:Re alPlayer"
"G:\\Program Files\\Xfire\\Xfire.exe"="G:\\Program Files\\Xfire\\Xfire.exe:*:Enabled:Xfire"
"C:\\Program Files\\AVG\\AVG8\\avgupd.exe"="C:\\Program Files\\AVG\\AVG8\\avgupd.exe:*:Enabled:avgupd.exe"
"C:\\Program Files\\AVG\\AVG8\\avgemc.exe"="C:\\Program Files\\AVG\\AVG8\\avgemc.exe:*:Enabled:avgemc.exe"
"C:\\Program Files\\Winamp\\winamp.exe"="C:\\Program Files\\Winamp\\winamp.exe:*:Enabled:winamp"
"C:\\Program Files\\Electronic Arts\\EADM\\Core.exe"="C:\\Program Files\\Electronic Arts\\EADM\\Core.exe:*:Enabled:EA Download Manager"
"G:\\Program Files\\Games\\Crimson Skies\\crimson.icd"="G:\\Program Files\\Games\\Crimson Skies\\crimson.icd:*:Enabled:Crimson Skies Executable"
"C:\\Program Files\\NBC Direct\\StoreFrontPlayer.exe"="C:\\Program Files\\NBC Direct\\StoreFrontPlayer.exe:*:Enabled:NBC Direct Beta"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\Winamp Remote\\bin\\Orb.exe"="C:\\Program Files\\Winamp Remote\\bin\\Orb.exe:*:Enabled:Orb"
"C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"="C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe:*:Enabled:OrbTray"
"C:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"="C:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe:*:Enabled:Orb Stream Client"
"C:\\Program Files\\Trillian\\trillian.exe"="C:\\Program Files\\Trillian\\trillian.exe:*:Enabled:Trillian"
"C:\\Program Files\\Steam\\steamapps\\meathook\\age of chivalry\\hl2.exe"="C:\\Program Files\\Steam\\steamapps\\meathook\\age of chivalry\\hl2.exe:*:Enabled:hl2"
"C:\\Program Files\\Steam\\steamapps\\meathook\\team fortress 2\\hl2.exe"="C:\\Program Files\\Steam\\steamapps\\meathook\\team fortress 2\\hl2.exe:*:Enabled:hl2"
"C:\\Program Files\\Steam\\steamapps\\meathook\\insurgency\\hl2 .exe"="C:\\Program Files\\Steam\\steamapps\\meathook\\insurgency\\hl2 .exe:*:Enabled:hl2"
"C:\\Program Files\\Steam\\steamapps\\meathook\\synergy\\hl2.ex e"="C:\\Program Files\\Steam\\steamapps\\meathook\\synergy\\hl2.ex e:*:Enabled:hl2"
"C:\\Program Files\\Steam\\steamapps\\meathook\\diprip warm up\\hl2.exe"="C:\\Program Files\\Steam\\steamapps\\meathook\\diprip warm up\\hl2.exe:*:Enabled:hl2"
"C:\\Program Files\\Steam\\steamapps\\meathook\\zombie panic! source\\hl2.exe"="C:\\Program Files\\Steam\\steamapps\\meathook\\zombie panic! source\\hl2.exe:*:Enabled:hl2"
"E:\\Installation\\Setupx.exe"="E:\\Installation\\ Setupx.exe:*:Enabled:Nero ProductSetup"
"G:\\Program Files\\Nero 7\\Nero Home\\NeroHome.exe"="G:\\Program Files\\Nero 7\\Nero Home\\NeroHome.exe:*:Enabled:Nero Home"
"G:\\Program Files\\FrostWire\\FrostWire.exe"="G:\\Program Files\\FrostWire\\FrostWire.exe:*:Enabled:FrostWir e"
"G:\\Program Files\\LimeWire\\LimeWire.exe"="G:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"C:\\WINDOWS\\system32\\dxdiag.exe"="C:\\WINDOWS\\ system32\\dxdiag.exe:*:Enabled:Microsoft DirectX Diagnostic Tool"
"C:\\WINDOWS\\system32\\dpnsvr.exe"="C:\\WINDOWS\\ system32\\dpnsvr.exe:*:Enabled:Microsoft DirectPlay8 Server"
"G:\\Downloads\\utorrent.exe"="G:\\Downloads\\utor rent.exe:*:Enabled:æTorrent"
"G:\\Program Files\\Microsoft Games\\Age of Empires III\\age3x.exe"="G:\\Program Files\\Microsoft Games\\Age of Empires III\\age3x.exe:*:Enabled:Age of Empires III - The WarChiefs"
"G:\\Program Files\\Microsoft Games\\Age of Empires III\\age3y.exe"="G:\\Program Files\\Microsoft Games\\Age of Empires III\\age3y.exe:*:Enabled:Age of Empires III - The Asian Dynasties"
"G:\\Downloads\\Installed Software\\utorrent.exe"="G:\\Downloads\\Installed Software\\utorrent.exe:*:Enabled:æTorrent"
"G:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaWmp.exe"="G:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaWmp.exe:*:Enabled:Call of Duty(R) - World at War(TM)"
"G:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaW.exe"="G:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaW.exe:*:Enabled:Call of Duty(R) - World at War(TM)"
"C:\\Program Files\\Graboid\\GraboidVideo\\1.3.0.0\\GraboidClie nt.exe"="C:\\Program Files\\Graboid\\GraboidVideo\\1.3.0.0\\GraboidClie nt.exe:*:Enabled: "
"G:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaW_LANFixed.exe"="G:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaW_LANFixed.exe:*:Enabled:Call of Duty(R): World at War Campaign/Coop"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\servic es\sharedaccess\parameters\firewallpolicy\domainpr ofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\syste m32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

Remaining Files :


File Backups: - C:\SDFix\backups\backups.zip

Files with Hidden Attributes :

Thu 24 Apr 2008 1,613,824 A..H. --- "C:\My Games\Can You See What I See\CanYouSee.exe"
Wed 10 Sep 2008 2,389,320 ...H. --- "C:\Program Files\Atlantis Sky Patrol\AtlantisSkyPatrol.exe"
Thu 10 Jan 2008 2,229,576 ...H. --- "C:\Program Files\Bengal - Game of Gods\Bengal - Game of Gods.exe"
Thu 23 Oct 2008 3,568,976 ...H. --- "C:\Program Files\Dr. Lynch - Grave Secrets\gravesecrets.exe"
Mon 6 Oct 2008 24,450,376 ...H. --- "C:\Program Files\Flip Words 2\Flip Words 2.exe"
Mon 6 Oct 2008 6,509,896 ...H. --- "C:\Program Files\Flip Words\Flip Words.exe"
Thu 17 Jul 2008 43,865,624 ...H. --- "C:\Program Files\Forgotten Riddles - The Moonlight Sonatas\Forgotten Riddles - The Moonlight Sonatas.exe"
Wed 5 Nov 2008 2,368,856 ...H. --- "C:\Program Files\Hawaiian Explorer 2 - Lost Island\LostIsland.exe"
Fri 11 Jan 2008 13,579,592 ...H. --- "C:\Program Files\Hidden Relics\Hidden Relics.exe"
Wed 16 Jul 2008 6,829,384 ...H. --- "C:\Program Files\Hidden Expedition - Amazon\Hidden Expedition Amazon.exe"
Thu 10 Jan 2008 2,159,944 ...H. --- "C:\Program Files\Inca Ball\IncaBall.exe"
Wed 10 Sep 2008 1,070,408 ...H. --- "C:\Program Files\Luxor 2\Luxor 2.exe"
Thu 20 Mar 2008 14,210,376 ...H. --- "C:\Program Files\Mystery Case Files - Madame Fate\Madame Fate.exe"
Fri 11 Jan 2008 1,758,536 ...H. --- "C:\Program Files\Mystery P.I. - The Lottery Ticket\MysteryPI.exe"
Wed 23 Apr 2008 12,330,312 ...H. --- "C:\Program Files\Mystery Case Files - Prime Suspects\PrimeSuspects.exe"
Fri 11 Jan 2008 1,975,624 ...H. --- "C:\Program Files\Mystery in London\MysteryInLondon.exe"
Sun 13 Apr 2008 60,416 A.SH. --- "C:\Program Files\Outlook Express\msimn.exe"
Thu 10 Jan 2008 3,489,792 ...H. --- "C:\Program Files\Peggle Deluxe\Peggle.exe"
Mon 23 Jun 2008 2,442,568 ...H. --- "C:\Program Files\PictoWords\PictoWords.exe"
Thu 10 Jan 2008 3,044,680 ...H. --- "C:\Program Files\Pirate Poppers\Pirate Poppers.exe"
Wed 22 Oct 2008 949,072 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\advcheck.dll"
Mon 15 Sep 2008 1,562,960 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SDHelper.dll"
Mon 28 Jan 2008 1,404,240 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SDUpdate.exe"
Mon 28 Jan 2008 5,146,448 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe"
Tue 16 Sep 2008 1,833,296 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
Wed 22 Oct 2008 962,896 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\Tools.dll"
Thu 10 Jan 2008 1,783,112 ...H. --- "C:\Program Files\Svetlograd\Svetlograd.exe"
Fri 1 Aug 2008 1,271,112 ...H. --- "C:\Program Files\The Race\TheRace.exe"
Fri 29 Feb 2008 2,848,072 ...H. --- "C:\Program Files\The Count of Monte Cristo\MONTECRISTO.exe"
Mon 9 Jun 2008 1,885,512 ...H. --- "C:\Program Files\The Secret of Margrave Manor\Margrave Manor.exe"
Mon 18 Aug 2008 2,479,432 ...H. --- "C:\Program Files\Yard Sale Hidden Treasures - Sunnyville\yardsale.exe"
Thu 10 Jan 2008 1,955,144 ...H. --- "C:\Program Files\Zuma Deluxe\Zuma Deluxe.exe"
Wed 16 Apr 2008 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Wed 7 Jun 2000 45,056 A..H. --- "C:\Program Files\Microsoft Hardware\Game Voice\WebUpdate.exe"
Sun 6 Apr 2008 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Sat 3 Jan 2009 72,192 ...H. --- "C:\Documents and Settings\Lee\Application Data\Microsoft\Word\~WRL3458.tmp"
Wed 28 Jan 2009 2,158 ...HR --- "C:\Documents and Settings\Lee\Application Data\SecuROM\UserData\securom_v7_01.bak"
Fri 30 Jan 2009 444 ...HR --- "C:\Documents and Settings\Mark.BARTH-TOWER\Application Data\SecuROM\UserData\securom_v7_01.bak"
Fri 4 Jul 2008 17,516 ...H. --- "C:\Documents and Settings\All Users\Application Data\Launcher\Launcher\1.0.0.0\BIT127.tmp"

Finished!