GMER 1.0.15.14966 -
http://www.gmer.netRootkit scan 2009-04-13 18:09:21
Windows 5.1.2600 Service Pack 3
---- User code sections - GMER 1.0.15 ----
.text C:\Program Files\MSN Messenger\MsnMsgr.Exe[2164] kernel32.dll!SetUnhandledExceptionFilter 7C8449FD 5 Bytes JMP 004DE392 C:\Program Files\MSN Messenger\MsnMsgr.Exe (Messenger/Microsoft Corporation)
.text C:\Program Files\MSN Messenger\msnmsgr.exe[5060] kernel32.dll!SetUnhandledExceptionFilter 7C8449FD 5 Bytes JMP 004DE392 C:\Program Files\MSN Messenger\msnmsgr.exe (Messenger/Microsoft Corporation)
---- User IAT/EAT - GMER 1.0.15 ----
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] [6BFA9DE1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9E6E] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] [6BFA9CCD] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] [6BFA9C46] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] [6BFA9C46] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] [6BFA9CCD] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9E6E] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9E6E] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] [6BFA9C46] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] [6BFA9CCD] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\MSVCRT.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9E6E] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\MSVCRT.dll [KERNEL32.dll!LoadLibraryA] [6BFA9C46] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] [6BFA9DE1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] [6BFA9C46] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9E6E] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] [6BFA9CCD] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9E6E] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] [6BFA9DE1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] [6BFA9C46] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] [6BFA9CCD] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [6BFA9C46] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [6BFA9CCD] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] [6BFA9DE1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExA] [6BFA9D54] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9E6E] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9E6E] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [6BFA9C46] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [6BFA9CCD] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] [6BFA9DE1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExA] [6BFA9D54] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9E6E] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] [6BFA9D54] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] [6BFA9DE1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [6BFA9CCD] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [6BFA9C46] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryW] [6BFA9CCD] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryExA] [6BFA9D54] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryA] [6BFA9C46] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9E6E] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryW] [6BFA9CCD] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\NETAPI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9E6E] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryA] [6BFA9C46] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\WININET.dll [KERNEL32.dll!LoadLibraryW] [6BFA9CCD] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\WININET.dll [KERNEL32.dll!LoadLibraryExW] [6BFA9DE1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\WININET.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9E6E] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aolsoftware.exe[3164] @ C:\WINDOWS\system32\WININET.dll [KERNEL32.dll!LoadLibraryA] [6BFA9C46] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] [6BFA9DE1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9E6E] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] [6BFA9CCD] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] [6BFA9C46] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] [6BFA9C46] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] [6BFA9CCD] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9E6E] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9E6E] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] [6BFA9C46] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] [6BFA9CCD] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\MSVCRT.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9E6E] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\MSVCRT.dll [KERNEL32.dll!LoadLibraryA] [6BFA9C46] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] [6BFA9DE1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] [6BFA9C46] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9E6E] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] [6BFA9CCD] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9E6E] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] [6BFA9DE1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] [6BFA9C46] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] [6BFA9CCD] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [6BFA9C46] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [6BFA9CCD] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] [6BFA9DE1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExA] [6BFA9D54] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9E6E] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9E6E] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [6BFA9C46] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [6BFA9CCD] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] [6BFA9DE1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExA] [6BFA9D54] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9E6E] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] [6BFA9D54] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] [6BFA9DE1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [6BFA9CCD] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [6BFA9C46] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryW] [6BFA9CCD] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryExA] [6BFA9D54] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryA] [6BFA9C46] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9E6E] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryA] [6BFA9C46] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\WS2_32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9E6E] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\WININET.dll [KERNEL32.dll!LoadLibraryW] [6BFA9CCD] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\WININET.dll [KERNEL32.dll!LoadLibraryExW] [6BFA9DE1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\WININET.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9E6E] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\WININET.dll [KERNEL32.dll!LoadLibraryA] [6BFA9C46] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryW] [6BFA9CCD] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\NETAPI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9E6E] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
IAT C:\Program Files\AIM6\aim6.exe[3340] @ C:\WINDOWS\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryA] [6BFA9C46] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
---- Devices - GMER 1.0.15 ----
AttachedDevice \FileSystem\Ntfs \Ntfs tvtfilter.sys (Rescue and Recovery filter driver/Lenovo)
AttachedDevice \Driver\Tcpip \Device\Ip mvstdi5x.sys (Anti-Virus Mini-Firewall Driver/Network Associates, Inc.)
AttachedDevice \Driver\Tcpip \Device\Tcp mvstdi5x.sys (Anti-Virus Mini-Firewall Driver/Network Associates, Inc.)
AttachedDevice \Driver\Tcpip \Device\Udp mvstdi5x.sys (Anti-Virus Mini-Firewall Driver/Network Associates, Inc.)
AttachedDevice \Driver\Tcpip \Device\RawIp mvstdi5x.sys (Anti-Virus Mini-Firewall Driver/Network Associates, Inc.)
Device \FileSystem\Fastfat \Fat 9A3F2D20
Device \FileSystem\Fastfat \Fat 9A402428
Device \FileSystem\Cdfs \Cdfs DLAIFS_M.SYS (Drive Letter Access Component/Sonic Solutions)
---- Files - GMER 1.0.15 ----
File C:\RRbackups\common 0 bytes
File C:\RRbackups\common\hints.dat 8192 bytes
File C:\RRbackups\common\mnd.dat 8192 bytes
File C:\RRbackups\common\regcerts.dat 8192 bytes
File C:\RRbackups\common\rr.log 5254 bytes
File C:\RRbackups\common\SAM 32768 bytes
File C:\RRbackups\common\seccache.dat 8192 bytes
File C:\RRbackups\common\secpolicy.dat 53248 bytes
File C:\RRbackups\common\settings.dat 28672 bytes
File C:\RRbackups\common\system.dat 12288 bytes
File C:\RRbackups\common\tvtns.bin 23 bytes
File C:\RRbackups\common\usersids.dat 19760 bytes
File C:\RRbackups\Documents and Settings 0 bytes
File C:\RRbackups\Documents and Settings\Administrator 0 bytes
File C:\RRbackups\Documents and Settings\Administrator\Application Data 0 bytes
File C:\RRbackups\Documents and Settings\Administrator\Application Data\Lenovo 0 bytes
File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft 0 bytes
File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\Crypto 0 bytes
File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\Crypto\RSA 0 bytes
File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\Protect 0 bytes
File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\Protect\CREDHIST 24 bytes
File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\Protect\S-1-5-21-1338395399-2534095381-3615524642-500 0 bytes
File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\Protect\S-1-5-21-1338395399-2534095381-3615524642-500\1616b5c8-9905-4d5f-9d11-c93dc15159bb 388 bytes
File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\Protect\S-1-5-21-1338395399-2534095381-3615524642-500\Preferred 24 bytes
File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\Protect\S-1-5-21-274373914-756691729-2013170287-500 0 bytes
File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\Protect\S-1-5-21-274373914-756691729-2013170287-500\b287f81e-1adf-41b8-9763-8e15346d66a2 388 bytes
File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\Protect\S-1-5-21-274373914-756691729-2013170287-500\Preferred 24 bytes
File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\SystemCertificates 0 bytes
File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\SystemCertificates\My 0 bytes
File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\SystemCertificates\My\Certificates 0 bytes
File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\SystemCertificates\My\CRLs 0 bytes
File C:\RRbackups\Documents and Settings\Administrator\Application Data\Microsoft\SystemCertificates\My\CTLs 0 bytes
File C:\RRbackups\Documents and Settings\All Users 0 bytes
File C:\RRbackups\Documents and Settings\All Users\Application Data 0 bytes
File C:\RRbackups\Documents and Settings\All Users\Application Data\Lenovo 0 bytes
File C:\RRbackups\Documents and Settings\All Users\Application Data\Lenovo\Client Security Solution 0 bytes
File C:\RRbackups\Documents and Settings\All Users\Application Data\Lenovo\Client Security Solution\cspContainer.dat 332 bytes
File C:\RRbackups\Documents and Settings\All Users\Application Data\Lenovo\Client Security Solution\encobject.dat 1608 bytes
File C:\RRbackups\Documents and Settings\All Users\Application Data\Lenovo\Client Security Solution\swkeys.dat 6372 bytes
File C:\RRbackups\Documents and Settings\All Users\Application Data\Lenovo\Client Security Solution\symkeys.dat 656 bytes
File C:\RRbackups\Documents and Settings\All Users\Application Data\Microsoft 0 bytes
File C:\RRbackups\Documents and Settings\All Users\Application Data\Microsoft\Crypto 0 bytes
File C:\RRbackups\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA 0 bytes
File C:\RRbackups\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\S-1-5-18 0 bytes
File C:\RRbackups\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\S-1-5-18\42e7e898003fbdeb9585806ee1664b51_c24312a7-2f72-451c-b32b-d0a69c84fecd 57 bytes
File C:\RRbackups\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\S-1-5-18\533145ef011ddf5ca3983e2545a902b4_c24312a7-2f72-451c-b32b-d0a69c84fecd 2075 bytes
File C:\RRbackups\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\S-1-5-18\6d14e4b1d8ca773bab785d1be032546e_c24312a7-2f72-451c-b32b-d0a69c84fecd 47 bytes
File C:\RRbackups\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\S-1-5-18\8f71098770f72c7a67cd8f1151619865_c24312a7-2f72-451c-b32b-d0a69c84fecd 54 bytes
File C:\RRbackups\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\S-1-5-18\d42cc0c3858a58db2db37658219e6400_c24312a7-2f72-451c-b32b-d0a69c84fecd 893 bytes
File C:\RRbackups\Documents and Settings\andy 0 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data 0 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Lenovo 0 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft 0 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\Crypto 0 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\Crypto\RSA 0 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1007 0 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1007\146482325737612d5fbcd71839d49d49_c24312a7-2f72-451c-b32b-d0a69c84fecd 50 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1007\360e9316558dc5fc61c74119e7e1abb7_c24312a7-2f72-451c-b32b-d0a69c84fecd 68 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1007\5baa677d480b6f8ff55781d4141095d0_c24312a7-2f72-451c-b32b-d0a69c84fecd 1313 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1007\6b29ae44e85efac3c72ff4d1865d73f1_c24312a7-2f72-451c-b32b-d0a69c84fecd 53 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1007\83aa4cc77f591dfc2374580bbd95f6ba_c24312a7-2f72-451c-b32b-d0a69c84fecd 45 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1007\8f71098770f72c7a67cd8f1151619865_c24312a7-2f72-451c-b32b-d0a69c84fecd 54 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1007\f740d95c042e4e8beada34679c877676_c24312a7-2f72-451c-b32b-d0a69c84fecd 1313 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1007\fa8438e31a716d3a8967e1be83adfed3_c24312a7-2f72-451c-b32b-d0a69c84fecd 45 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\Protect 0 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\Protect\CREDHIST 568 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\Protect\S-1-5-21-1338395399-2534095381-3615524642-500 0 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\Protect\S-1-5-21-1338395399-2534095381-3615524642-500\1616b5c8-9905-4d5f-9d11-c93dc15159bb 388 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\Protect\S-1-5-21-1338395399-2534095381-3615524642-500\Preferred 24 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\Protect\S-1-5-21-274373914-756691729-2013170287-500 0 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\Protect\S-1-5-21-274373914-756691729-2013170287-500\b287f81e-1adf-41b8-9763-8e15346d66a2 388 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\Protect\S-1-5-21-274373914-756691729-2013170287-500\Preferred 24 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1007 0 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1007\699cd3cf-1908-43ed-ac2f-dc5f2ca39589 388 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1007\760fe889-955b-4706-87a7-521cc23a65a6 388 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1007\7aa6be68-4389-4aa4-ab8e-5daa4b586d2e 388 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1007\8838945f-8ffb-4f62-9c63-2829e58b3296 388 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1007\a24646f2-a1a9-41b9-82ba-21ae5c76a4cb 388 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1007\d9c4e5f6-49f6-431c-bf02-a222e5feda17 388 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1007\eb7b86b9-7a92-46e3-b320-e04d856e91f0 388 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1007\Preferred 24 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\SystemCertificates 0 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\SystemCertificates\My 0 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\SystemCertificates\My\Certificates 0 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\SystemCertificates\My\CRLs 0 bytes
File C:\RRbackups\Documents and Settings\andy\Application Data\Microsoft\SystemCertificates\My\CTLs 0 bytes
File C:\RRbackups\Documents and Settings\Andy_2 0 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data 0 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Lenovo 0 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Lenovo\Client Security Solution 0 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Lenovo\Client Security Solution\hibernation.dat 4 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft 0 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft\Crypto 0 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft\Crypto\RSA 0 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1010 0 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1010\146482325737612d5fbcd71839d49d49_c24312a7-2f72-451c-b32b-d0a69c84fecd 50 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1010\1fa2776bb94a648afba0542aeb161f46_c24312a7-2f72-451c-b32b-d0a69c84fecd 47 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1010\533145ef011ddf5ca3983e2545a902b4_c24312a7-2f72-451c-b32b-d0a69c84fecd 2075 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1010\6b29ae44e85efac3c72ff4d1865d73f1_c24312a7-2f72-451c-b32b-d0a69c84fecd 53 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1010\83aa4cc77f591dfc2374580bbd95f6ba_c24312a7-2f72-451c-b32b-d0a69c84fecd 45 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1010\8f71098770f72c7a67cd8f1151619865_c24312a7-2f72-451c-b32b-d0a69c84fecd 54 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft\Protect 0 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft\Protect\CREDHIST 24 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft\Protect\S-1-5-21-1338395399-2534095381-3615524642-500 0 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft\Protect\S-1-5-21-1338395399-2534095381-3615524642-500\1616b5c8-9905-4d5f-9d11-c93dc15159bb 388 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft\Protect\S-1-5-21-1338395399-2534095381-3615524642-500\Preferred 24 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft\Protect\S-1-5-21-274373914-756691729-2013170287-500 0 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft\Protect\S-1-5-21-274373914-756691729-2013170287-500\b287f81e-1adf-41b8-9763-8e15346d66a2 388 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft\Protect\S-1-5-21-274373914-756691729-2013170287-500\Preferred 24 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1010 0 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1010\55177931-d047-4515-b68a-21478232aefe 388 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1010\a69169a3-a3d6-4d66-8e0c-96f5ca734844 388 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1010\be4f50d9-58d4-4f8b-941b-8c5a7c46ee6b 388 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1010\f12117d5-376b-43b2-a07d-e44d1818fc36 388 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1010\Preferred 24 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft\SystemCertificates 0 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft\SystemCertificates\My 0 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft\SystemCertificates\My\Certificates 0 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft\SystemCertificates\My\CRLs 0 bytes
File C:\RRbackups\Documents and Settings\Andy_2\Application Data\Microsoft\SystemCertificates\My\CTLs 0 bytes
File C:\RRbackups\Documents and Settings\Brett 0 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data 0 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Lenovo 0 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Lenovo\Client Security Solution 0 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Lenovo\Client Security Solution\hibernation.dat 4 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft 0 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\Crypto 0 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\Crypto\RSA 0 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1008 0 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1008\146482325737612d5fbcd71839d49d49_c24312a7-2f72-451c-b32b-d0a69c84fecd 50 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1008\360e9316558dc5fc61c74119e7e1abb7_c24312a7-2f72-451c-b32b-d0a69c84fecd 68 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1008\6b29ae44e85efac3c72ff4d1865d73f1_c24312a7-2f72-451c-b32b-d0a69c84fecd 53 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1008\763721f032c074ba534f47cb2549467d_c24312a7-2f72-451c-b32b-d0a69c84fecd 46 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1008\83aa4cc77f591dfc2374580bbd95f6ba_c24312a7-2f72-451c-b32b-d0a69c84fecd 45 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1008\8f71098770f72c7a67cd8f1151619865_c24312a7-2f72-451c-b32b-d0a69c84fecd 54 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\Protect 0 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\Protect\CREDHIST 24 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\Protect\S-1-5-21-1338395399-2534095381-3615524642-500 0 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\Protect\S-1-5-21-1338395399-2534095381-3615524642-500\1616b5c8-9905-4d5f-9d11-c93dc15159bb 388 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\Protect\S-1-5-21-1338395399-2534095381-3615524642-500\Preferred 24 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\Protect\S-1-5-21-274373914-756691729-2013170287-500 0 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\Protect\S-1-5-21-274373914-756691729-2013170287-500\b287f81e-1adf-41b8-9763-8e15346d66a2 388 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\Protect\S-1-5-21-274373914-756691729-2013170287-500\Preferred 24 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1008 0 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1008\242a5c64-12ef-46af-a933-1e7329352c08 388 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1008\2d7e0cbe-2baf-46e9-b8f6-c9bba4b73dd4 388 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1008\3d75628e-da75-47c6-948d-7a7244acec1b 388 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1008\5ab0780e-c010-4065-aac7-a8c098de4625 388 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1008\5e3a4b60-fbfc-4490-84ee-3d6fbf784072 388 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1008\8635240b-7c92-44d1-93d3-a699f5468504 388 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1008\9a5bc5b3-7c8c-4670-8f01-0a16c886848e 388 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1008\a56f088c-6576-4841-8097-2142fd103e3c 388 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1008\d44c9fe0-4fe3-4f27-b2ff-003fb74651b5 388 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1008\Preferred 24 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\SystemCertificates 0 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\SystemCertificates\My 0 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\SystemCertificates\My\Certificates 0 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\SystemCertificates\My\CRLs 0 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\SystemCertificates\My\CTLs 0 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\SystemCertificates\Request 0 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\SystemCertificates\Request\Certificates 0 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\SystemCertificates\Request\CRLs 0 bytes
File C:\RRbackups\Documents and Settings\Brett\Application Data\Microsoft\SystemCertificates\Request\CTLs 0 bytes
File C:\RRbackups\Documents and Settings\Default User 0 bytes
File C:\RRbackups\Documents and Settings\Default User\Application Data 0 bytes
File C:\RRbackups\Documents and Settings\Default User\Application Data\Lenovo 0 bytes
File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft 0 bytes
File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\Crypto 0 bytes
File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\Crypto\RSA 0 bytes
File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\Protect 0 bytes
File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\Protect\CREDHIST 24 bytes
File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\Protect\S-1-5-21-1338395399-2534095381-3615524642-500 0 bytes
File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\Protect\S-1-5-21-1338395399-2534095381-3615524642-500\1616b5c8-9905-4d5f-9d11-c93dc15159bb 388 bytes
File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\Protect\S-1-5-21-1338395399-2534095381-3615524642-500\Preferred 24 bytes
File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\Protect\S-1-5-21-274373914-756691729-2013170287-500 0 bytes
File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\Protect\S-1-5-21-274373914-756691729-2013170287-500\b287f81e-1adf-41b8-9763-8e15346d66a2 388 bytes
File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\Protect\S-1-5-21-274373914-756691729-2013170287-500\Preferred 24 bytes
File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates 0 bytes
File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My 0 bytes
File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\Certificates 0 bytes
File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CRLs 0 bytes
File C:\RRbackups\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CTLs 0 bytes
File C:\RRbackups\Documents and Settings\Gretchen 0 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data 0 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Lenovo 0 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Lenovo\Client Security Solution 0 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Lenovo\Client Security Solution\hibernation.dat 4 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft 0 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\Crypto 0 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\Crypto\RSA 0 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1009 0 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1009\6b29ae44e85efac3c72ff4d1865d73f1_c24312a7-2f72-451c-b32b-d0a69c84fecd 53 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1009\7a3eaa9a8205ff37104c6aaa0f44a487_c24312a7-2f72-451c-b32b-d0a69c84fecd 49 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1009\83aa4cc77f591dfc2374580bbd95f6ba_c24312a7-2f72-451c-b32b-d0a69c84fecd 45 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1009\8f71098770f72c7a67cd8f1151619865_c24312a7-2f72-451c-b32b-d0a69c84fecd 54 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\Protect 0 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\Protect\CREDHIST 24 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\Protect\S-1-5-21-1338395399-2534095381-3615524642-500 0 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\Protect\S-1-5-21-1338395399-2534095381-3615524642-500\1616b5c8-9905-4d5f-9d11-c93dc15159bb 388 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\Protect\S-1-5-21-1338395399-2534095381-3615524642-500\Preferred 24 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\Protect\S-1-5-21-274373914-756691729-2013170287-500 0 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\Protect\S-1-5-21-274373914-756691729-2013170287-500\b287f81e-1adf-41b8-9763-8e15346d66a2 388 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\Protect\S-1-5-21-274373914-756691729-2013170287-500\Preferred 24 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1009 0 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1009\0d9702dd-a440-40d5-854b-ec9286a94728 388 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1009\145b4cd3-f56d-4d84-bc90-5071f7c02973 388 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1009\35c25ad0-328f-4029-b1c7-6e9a73f308ad 388 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1009\3af31eb5-a036-4785-b957-6355e3c01858 388 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1009\4fb90e7a-c23f-45d5-8ff1-8e8b1b45329e 388 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1009\6adb1755-f5ee-4962-b850-b00e0e876d28 388 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1009\8459f8d7-8be4-4a96-901b-5a636a52e2a6 388 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1009\b0c6723e-d613-4080-8e23-f6fde3c1b2f3 388 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1009\e8c4729f-364e-497c-8f85-8a5469842409 388 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1009\Preferred 24 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\SystemCertificates 0 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\SystemCertificates\My 0 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\SystemCertificates\My\Certificates 0 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\SystemCertificates\My\CRLs 0 bytes
File C:\RRbackups\Documents and Settings\Gretchen\Application Data\Microsoft\SystemCertificates\My\CTLs 0 bytes
File C:\RRbackups\Documents and Settings\LocalService 0 bytes
File C:\RRbackups\Documents and Settings\LocalService\Application Data 0 bytes
File C:\RRbackups\Documents and Settings\LocalService\Application Data\Microsoft 0 bytes
File C:\RRbackups\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates 0 bytes
File C:\RRbackups\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My 0 bytes
File C:\RRbackups\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\Certificates 0 bytes
File C:\RRbackups\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CRLs 0 bytes
File C:\RRbackups\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CTLs 0 bytes
File C:\RRbackups\Documents and Settings\NetworkService 0 bytes
File C:\RRbackups\Documents and Settings\NetworkService\Application Data 0 bytes
File C:\RRbackups\Documents and Settings\NetworkService\Application Data\Microsoft 0 bytes
File C:\RRbackups\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates 0 bytes
File C:\RRbackups\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My 0 bytes
File C:\RRbackups\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\Certificates 0 bytes
File C:\RRbackups\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CRLs 0 bytes
File C:\RRbackups\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CTLs 0 bytes
File C:\RRbackups\Documents and Settings\Sam 0 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data 0 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Lenovo 0 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Lenovo\Client Security Solution 0 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Lenovo\Client Security Solution\hibernation.dat 4 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft 0 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\Crypto 0 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\Crypto\RSA 0 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1006 0 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1006\6b29ae44e85efac3c72ff4d1865d73f1_c24312a7-2f72-451c-b32b-d0a69c84fecd 53 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1006\8f71098770f72c7a67cd8f1151619865_c24312a7-2f72-451c-b32b-d0a69c84fecd 54 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\Protect 0 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\Protect\CREDHIST 24 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\Protect\S-1-5-21-1338395399-2534095381-3615524642-500 0 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\Protect\S-1-5-21-1338395399-2534095381-3615524642-500\1616b5c8-9905-4d5f-9d11-c93dc15159bb 388 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\Protect\S-1-5-21-1338395399-2534095381-3615524642-500\Preferred 24 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\Protect\S-1-5-21-274373914-756691729-2013170287-500 0 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\Protect\S-1-5-21-274373914-756691729-2013170287-500\b287f81e-1adf-41b8-9763-8e15346d66a2 388 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\Protect\S-1-5-21-274373914-756691729-2013170287-500\Preferred 24 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1006 0 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1006\52846a55-572c-47b5-aef6-8c86f4acf0b5 388 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1006\787b5db1-b44d-42c0-b8c5-87f9cbf346fc 388 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1006\7b40af73-b5ce-4dba-a19d-aac25e870e25 388 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1006\a1b7c34f-9f26-40a9-a935-946af1f41bc3 388 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1006\ae4f8405-47a6-4c08-a40d-68b57102868b 388 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1006\c537243a-e6dd-4459-92a0-6a2b64ca0e18 388 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1006\d1cc505b-d18d-401f-9459-7be2a3db6fb8 388 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1006\d3fddfdb-f6ea-48ff-af9e-1a9106b58aa4 388 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1006\fd80d28a-e670-4e0f-b0f1-26bc31cab418 388 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1006\Preferred 24 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\SystemCertificates 0 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\SystemCertificates\My 0 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\SystemCertificates\My\Certificates 0 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\SystemCertificates\My\CRLs 0 bytes
File C:\RRbackups\Documents and Settings\Sam\Application Data\Microsoft\SystemCertificates\My\CTLs 0 bytes
File C:\RRbackups\Documents and Settings\Tom 0 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data 0 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Lenovo 0 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Lenovo\Client Security Solution 0 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Lenovo\Client Security Solution\hibernation.dat 4 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Microsoft 0 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Microsoft\Crypto 0 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Microsoft\Crypto\RSA 0 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1005 0 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1005\8f71098770f72c7a67cd8f1151619865_c24312a7-2f72-451c-b32b-d0a69c84fecd 54 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Microsoft\Crypto\RSA\S-1-5-21-2793445161-394234811-2313276759-1005\a3b323e7b0ad9f440bc07165b06ba2b7_c24312a7-2f72-451c-b32b-d0a69c84fecd 44 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Microsoft\Protect 0 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Microsoft\Protect\CREDHIST 160 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Microsoft\Protect\S-1-5-21-1338395399-2534095381-3615524642-500 0 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Microsoft\Protect\S-1-5-21-1338395399-2534095381-3615524642-500\1616b5c8-9905-4d5f-9d11-c93dc15159bb 388 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Microsoft\Protect\S-1-5-21-1338395399-2534095381-3615524642-500\Preferred 24 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Microsoft\Protect\S-1-5-21-274373914-756691729-2013170287-500 0 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Microsoft\Protect\S-1-5-21-274373914-756691729-2013170287-500\b287f81e-1adf-41b8-9763-8e15346d66a2 388 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Microsoft\Protect\S-1-5-21-274373914-756691729-2013170287-500\Preferred 24 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1005 0 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1005\0f840118-d871-485f-8481-55e1101f4242 388 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1005\57e1dea9-0ef4-4cf9-8c1e-e49a5cb4f931 388 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1005\92637f60-b08f-4444-a9d6-78e868f50ce4 388 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1005\9c0e20a8-e56a-4d2b-a09f-a640e7ac9e81 388 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1005\ac5871f5-7d46-4751-98a1-3491de70bf1f 388 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1005\accf13da-df26-46ac-8bcf-8846f33c3ea4 388 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1005\f6cfbdb4-2980-4a63-8cd0-36296aae41f7 388 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Microsoft\Protect\S-1-5-21-2793445161-394234811-2313276759-1005\Preferred 24 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Microsoft\SystemCertificates 0 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Microsoft\SystemCertificates\My 0 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Microsoft\SystemCertificates\My\Certificates 0 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Microsoft\SystemCertificates\My\CRLs 0 bytes
File C:\RRbackups\Documents and Settings\Tom\Application Data\Microsoft\SystemCertificates\My\CTLs 0 bytes
File C:\WINDOWS\system32\config\software.LOG (size mismatch) 12288/1024 bytes
---- EOF - GMER 1.0.15 ----