Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Cannot Fix Problem


  • This topic is locked This topic is locked
73 replies to this topic

#1 E_Rok

E_Rok

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:02:36 PM

Posted 01 September 2009 - 05:22 AM

Well before trying to just blantly reinstalling windows, and as well as i cant find my cd key to xp(stupid me). I wanna see if i can save myself from reinstallation and for interest sake for solving problems without a reinstall :( ...

I cannot start taskmgr at all says "block by administrator" even though i am admin as well as when I tried unlocking it through user config it still say same thing. Also i cannot use any anti-virus software it wont even open the file (tried hijack worked once, but for some reason it went straight to error after another try) and cannot play any pc games online(ex. WarCraft 3, Maple Story). fortunate that at least my internet browsers still work as well as DDS and Root Repeal.

here is my DDS Log:



DDS (Ver_09-07-30.01) - NTFSx86
Run by Errol at 2:57:55.89 on Tue 09/01/2009
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.894.341 [GMT -7:00]


============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Verizon\McciTrayApp.exe
C:\Program Files\Verizon\VSP\VerizonServicepoint.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\DNA\btdna.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\BigFix\bigfix.exe
C:\Program Files\REALTEK RTL8187 Wireless LAN Driver and Utility\RtWLan.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\DOCUME~1\Errol\LOCALS~1\Temp\winnsiby.exe
C:\DOCUME~1\Errol\LOCALS~1\Temp\apnxej.exe
C:\DOCUME~1\Errol\LOCALS~1\Temp\w4d5bb.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Cobian Backup 9\Cobian.exe
C:\Program Files\Cobian Backup 9\cbInterface.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Errol\My Documents\Downloads\dds.scr
C:\WINDOWS\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.ask.com?o=15179&l=dis
BHO: {02478D38-C3F9-4EFB-9B51-7695ECA05670} - No File
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Verizon Broadband Toolbar: {4e7bd74f-2b8d-469e-8cb0-ab60bb9aae22} - c:\progra~1\vol_to~1\VOL_TO~1.DLL
BHO: Yahoo! IE Services Button: {5bab4b5b-68bc-4b02-94d6-2fc0de4a7897} - c:\program files\yahoo!\common\yiesrvc.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.1.1309.3572\swg.dll
BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_219B3E1547538286.dll
BHO: CBrowserHelperObject Object: {ca6319c0-31b7-401e-a518-a07c3db8f777} - c:\windows\system32\BAE.dll
BHO: Ask Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
TB: Verizon Broadband Toolbar: {4e7bd74f-2b8d-469e-8cb0-ab60bb9aae22} - c:\progra~1\vol_to~1\VOL_TO~1.DLL
TB: &Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar.dll
TB: Ask Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
uRun: [Power2GoExpress] NA
uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
uRun: [ares] "c:\program files\ares\Ares.exe" -h
uRun: [BitTorrent DNA] "c:\program files\dna\btdna.exe"
uRun: [Messenger (Yahoo!)] "c:\program files\yahoo!\messenger\YahooMessenger.exe" -quiet
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [Cobian Backup 9] "c:\program files\cobian backup 9\Cobian.exe"
mRun: [ehTray] c:\windows\ehome\ehtray.exe
mRun: [SynTPLpr] c:\program files\synaptics\syntp\SynTPLpr.exe
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [Recguard] %WINDIR%\SMINST\RECGUARD.EXE
mRun: [ATICCC] "c:\program files\ati technologies\ati.ace\cli.exe" runtime -Delay
mRun: [SigmatelSysTrayApp] stsystra.exe
mRun: [SMSERIAL] c:\program files\motorola\smserial\sm56hlpr.exe
mRun: [Broadcom Wireless Manager UI] c:\windows\system32\WLTRAY.exe
mRun: [Verizon_McciTrayApp] c:\program files\verizon\McciTrayApp.exe
mRun: [VerizonServicepoint.exe] "c:\program files\verizon\vsp\VerizonServicepoint.exe" /AUTORUN
mRun: [LVCOMSX] c:\windows\system32\LVCOMSX.EXE
mRun: [LogitechVideoRepair] c:\program files\logitech\video\ISStart.exe
mRun: [LogitechVideoTray] c:\program files\logitech\video\LogiTray.exe
mRun: [YSearchProtection] "c:\program files\yahoo!\search protection\SearchProtection.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [MSKDetectorExe] c:\program files\mcafee\spamkiller\MSKDetct.exe /uninstall
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\bigfix.lnk - c:\program files\bigfix\bigfix.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\isafer.lnk - c:\program files\isafer\iSafer.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office\OSA9.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\realte~1.lnk - c:\program files\realtek rtl8187 wireless lan driver and utility\RtWLan.exe
uPolicies-system: DisableRegistryTools = 1 (0x1)
uPolicies-system: DisableTaskMgr = 1 (0x1)
mPolicies-system: EnableLUA = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: Open Picture in &Microsoft PhotoDraw - c:\progra~1\micros~2\office\1033\phdintl.dll/phdContext.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - c:\program files\yahoo!\common\yiesrvc.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\Shdocvw.dll
DPF: {01113300-3E00-11D2-8470-0060089874ED} - hxxps://activatemydsl.verizon.net/sdcCommon/download/DSL/Verizon%20High%20Speed%20Internet%20Installer.cab
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\Yinsthelper200711281.dll
DPF: {7623BE59-D4CF-4379-ABC4-B39E11854D66} - hxxp://avatar.mabinogi.jp/3drender/renderer/mabiweb.2007.4.4.cab
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\errol\applic~1\mozilla\firefox\profiles\kw6hgg2w.default\
FF - prefs.js: browser.search.selectedEngine - Wikipedia (en)
FF - prefs.js: browser.startup.homepage - hxxp://en-US.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:en-US:official
FF - prefs.js: keyword.URL - hxxp://supertoolbar.ask.com/redirect?client=ff&src=kw&tb=PF&o=15176&locale=en_US&q=
FF - plugin: c:\progra~1\yahoo!\common\npyaxmpb.dll
FF - plugin: c:\program files\java\jre1.5.0_02\bin\NPJava11.dll
FF - plugin: c:\program files\java\jre1.5.0_02\bin\NPJava12.dll
FF - plugin: c:\program files\java\jre1.5.0_02\bin\NPJava13.dll
FF - plugin: c:\program files\java\jre1.5.0_02\bin\NPJava14.dll
FF - plugin: c:\program files\java\jre1.5.0_02\bin\NPJava32.dll
FF - plugin: c:\program files\java\jre1.5.0_02\bin\NPJPI150_02.dll
FF - plugin: c:\program files\java\jre1.5.0_02\bin\NPOJI610.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npbittorrent.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npPandoWebInst.dll
FF - plugin: c:\program files\viewpoint\viewpoint experience technology\npViewpoint.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\

---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.cache_size", 51200);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.ogg.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.wave.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.autoplay.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess");
c:\program files\mozilla firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120);
c:\program files\mozilla firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("layout.css.dpi", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072);
c:\program files\mozilla firefox\greprefs\all.js - pref("geo.enabled", true);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35");
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json");

============= SERVICES / DRIVERS ===============

R0 tffsport;M-Systems DiskOnChip 2000;c:\windows\system32\drivers\tffsport.sys [2009-8-1 149376]
R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328]
R2 YahooAUService;Yahoo! Updater;c:\program files\yahoo!\softwareupdate\YahooAUService.exe [2008-11-9 602392]
R3 abp470n5;abp470n5;\??\c:\windows\system32\drivers\jijnif.sys --> c:\windows\system32\drivers\jijnif.sys [?]
S2 iSafer;iSafer - Personal Firewall;c:\program files\isafer\iSaferSvr.exe [2009-6-18 495104]
S3 el575nd5;3Com Megahertz 10/100 LAN CardBus PC Card Driver;c:\windows\system32\drivers\el575ND5.sys [2009-6-3 69692]
S3 PID_0920;Logitech QuickCam Express(PID_0920);c:\windows\system32\drivers\LV532AV.SYS [2007-12-4 163328]

=============== Created Last 30 ================

2009-09-01 02:49 1,032 a------- C:\cbSetup.dat
2009-09-01 02:48 <DIR> --d----- c:\program files\Cobian Backup 9
2009-08-30 21:36 <DIR> --d----- c:\docume~1\errol\applic~1\Malwarebytes
2009-08-30 21:36 38,160 a------- c:\windows\system32\drivers\mbamswissarmy.sys
2009-08-30 21:36 19,096 a------- c:\windows\system32\drivers\mbam.sys
2009-08-30 21:36 <DIR> --d----- c:\program files\Malwarebytes' Anti-Malware
2009-08-30 21:36 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Malwarebytes
2009-08-30 21:20 5,963 a------- c:\windows\system32\msexcr.ini
2009-08-30 20:15 <DIR> --d----- c:\program files\Ask.com
2009-08-30 20:15 <DIR> --d----- c:\program files\PFConfig
2009-08-30 03:23 <DIR> --d----- c:\program files\Trend Micro
2009-08-30 02:19 <DIR> --d----- c:\windows\system32\wbem\Repository
2009-08-28 19:19 <DIR> --d----- c:\windows\DSL
2009-08-22 16:29 1,089,593 -c------ c:\windows\system32\dllcache\ntprint.cat
2009-08-21 16:16 <DIR> --d----- C:\9d936133d938bbd7e044c9dd7f47
2009-08-21 16:15 <DIR> --d----- c:\windows\SxsCaPendDel
2009-08-21 15:00 <DIR> --dsh--- c:\documents and settings\errol\PrivacIE
2009-08-17 17:00 <DIR> -cd----- c:\windows\system32\dllcache\cache
2009-08-17 16:33 <DIR> a-dshr-- C:\cmdcons
2009-08-17 16:29 216,064 a------- c:\windows\PEV.exe
2009-08-17 16:29 161,792 a------- c:\windows\SWREG.exe
2009-08-17 16:29 98,816 a------- c:\windows\sed.exe
2009-08-11 11:53 128,512 -c------ c:\windows\system32\dllcache\dhtmled.ocx
2009-08-11 11:53 1,315,328 -c------ c:\windows\system32\dllcache\msoe.dll
2009-08-07 00:52 <DIR> --d-h--- c:\windows\system32\GroupPolicy
2009-08-04 15:02 77,265 a------- c:\windows\War3Unin.dat
2009-08-04 15:02 139,264 a------- c:\windows\War3Unin.exe
2009-08-04 15:02 2,829 a------- c:\windows\War3Unin.pif

==================== Find3M ====================

2009-08-05 02:01 204,800 a------- c:\windows\system32\mswebdvd.dll
2009-07-17 12:01 58,880 a------- c:\windows\system32\atl.dll
2009-07-13 23:43 286,208 a------- c:\windows\system32\wmpdxm.dll
2009-07-03 10:09 915,456 a------- c:\windows\system32\wininet.dll
2009-06-25 01:25 730,112 a------- c:\windows\system32\lsasrv.dll
2009-06-25 01:25 301,568 a------- c:\windows\system32\kerberos.dll
2009-06-25 01:25 147,456 a------- c:\windows\system32\schannel.dll
2009-06-25 01:25 136,192 a------- c:\windows\system32\msv1_0.dll
2009-06-25 01:25 56,832 a------- c:\windows\system32\secur32.dll
2009-06-25 01:25 54,272 a------- c:\windows\system32\wdigest.dll
2009-06-16 07:36 119,808 a------- c:\windows\system32\t2embed.dll
2009-06-16 07:36 81,920 a------- c:\windows\system32\fontsub.dll
2009-06-12 05:31 80,896 a------- c:\windows\system32\tlntsess.exe
2009-06-12 05:31 76,288 a------- c:\windows\system32\telnet.exe
2009-06-10 09:19 2,066,432 a------- c:\windows\system32\mstscax.dll
2009-06-10 07:13 84,992 a------- c:\windows\system32\avifil32.dll
2009-06-09 23:14 132,096 a------- c:\windows\system32\wkssvc.dll
2009-06-03 12:09 1,291,264 a------- c:\windows\system32\quartz.dll
2008-10-20 16:38 32,768 ac-sh--- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008102020081021\index.dat

============= FINISH: 2:58:13.51 ===============








And here is the Root Repeal Log:


ROOTREPEAL © AD, 2007-2009
==================================================
Scan Start Time: 2009/09/01 03:09
Program Version: Version 1.3.5.0
Windows Version: Windows XP Media Center Edition SP3
==================================================

Drivers
-------------------
Name: dump_atapi.sys
Image Path: C:\WINDOWS\System32\Drivers\dump_atapi.sys
Address: 0xEE6E0000 Size: 98304 File Visible: No Signed: -
Status: -

Name: dump_WMILIB.SYS
Image Path: C:\WINDOWS\System32\Drivers\dump_WMILIB.SYS
Address: 0xF7A50000 Size: 8192 File Visible: No Signed: -
Status: -

Name: jijnif.sys
Image Path: C:\WINDOWS\system32\drivers\jijnif.sys
Address: 0xF7A80000 Size: 5184 File Visible: No Signed: -
Status: -

Name: mc21.tmp
Image Path: C:\WINDOWS\TEMP\mc21.tmp
Address: 0xF7B84000 Size: 2560 File Visible: No Signed: -
Status: -

Name: rootrepeal.sys
Image Path: C:\WINDOWS\system32\drivers\rootrepeal.sys
Address: 0xEB8AD000 Size: 49152 File Visible: No Signed: -
Status: -

==EOF==



Hopefully you guys will be able to help. Thanks in adv!!!!
BMW ///MNSTR!!

BC AdBot (Login to Remove)

 


#2 pwgib

pwgib

  • Malware Response Team
  • 2,956 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:God's Country
  • Local time:04:36 PM

Posted 16 September 2009 - 11:38 AM

Hello and welcome to Bleeping Computer

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.

If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.

Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.

If you have already posted a DDS log, please do so again, as your situation may have changed.
Use the 'Add Reply' and add the new log to this thread.


Thanks and again sorry for the delay.

We need to see some information about what is happening in your machine. Please perform the following scan:
  • Download DDS by sUBs from one of the following links. Save it to your desktop.
  • Double click on the DDS icon, allow it to run.
  • A small box will open, with an explaination about the tool. No input is needed, the scan is running.
  • Notepad will open with the results.
  • Follow the instructions that pop up for posting the results.
  • Close the program window, and delete the program from your desktop.
Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.

Information on A/V control HERE
PW

#3 E_Rok

E_Rok
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:02:36 PM

Posted 18 September 2009 - 02:39 AM

Thanks no worries about delay, yes still have problems, so far my computer wont let me open task manager, or open any protection programs, I cannot play any games online whatsoever, and when i turn off comp i get a .NETFRAMEWORK error as well as a netsh.exe error before it shuts down. So far the only symptoms I've notice thus far.


Again thx in advance :(



DDS (Ver_09-07-30.01) - NTFSx86
Run by Errol at 0:17:01.01 on Fri 09/18/2009
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.894.552 [GMT -7:00]


============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\iSafer\iSaferSvr.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Verizon\McciTrayApp.exe
C:\Program Files\Verizon\VSP\VerizonServicepoint.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\DNA\btdna.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Cobian Backup 9\Cobian.exe
C:\Program Files\BigFix\bigfix.exe
C:\Program Files\iSafer\iSafer.exe
C:\Program Files\REALTEK RTL8187 Wireless LAN Driver and Utility\RtWLan.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Cobian Backup 9\cbInterface.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\DOCUME~1\Errol\LOCALS~1\Temp\vcgh.exe
C:\DOCUME~1\Errol\LOCALS~1\Temp\stnba.exe
C:\DOCUME~1\Errol\LOCALS~1\Temp\w4486f.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Errol\Desktop\dds.scr
C:\WINDOWS\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.ask.com?o=15179&l=dis
BHO: {02478D38-C3F9-4EFB-9B51-7695ECA05670} - No File
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Verizon Broadband Toolbar: {4e7bd74f-2b8d-469e-8cb0-ab60bb9aae22} - c:\progra~1\vol_to~1\VOL_TO~1.DLL
BHO: Yahoo! IE Services Button: {5bab4b5b-68bc-4b02-94d6-2fc0de4a7897} - c:\program files\yahoo!\common\yiesrvc.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.1.1309.3572\swg.dll
BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_219B3E1547538286.dll
BHO: CBrowserHelperObject Object: {ca6319c0-31b7-401e-a518-a07c3db8f777} - c:\windows\system32\BAE.dll
BHO: Ask Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
TB: Verizon Broadband Toolbar: {4e7bd74f-2b8d-469e-8cb0-ab60bb9aae22} - c:\progra~1\vol_to~1\VOL_TO~1.DLL
TB: &Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar.dll
TB: Ask Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
uRun: [Power2GoExpress] NA
uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
uRun: [ares] "c:\program files\ares\Ares.exe" -h
uRun: [BitTorrent DNA] "c:\program files\dna\btdna.exe"
uRun: [Messenger (Yahoo!)] "c:\program files\yahoo!\messenger\YahooMessenger.exe" -quiet
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [Cobian Backup 9] "c:\program files\cobian backup 9\Cobian.exe"
mRun: [ehTray] c:\windows\ehome\ehtray.exe
mRun: [SynTPLpr] c:\program files\synaptics\syntp\SynTPLpr.exe
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [Recguard] %WINDIR%\SMINST\RECGUARD.EXE
mRun: [ATICCC] "c:\program files\ati technologies\ati.ace\cli.exe" runtime -Delay
mRun: [SigmatelSysTrayApp] stsystra.exe
mRun: [SMSERIAL] c:\program files\motorola\smserial\sm56hlpr.exe
mRun: [Broadcom Wireless Manager UI] c:\windows\system32\WLTRAY.exe
mRun: [Verizon_McciTrayApp] c:\program files\verizon\McciTrayApp.exe
mRun: [VerizonServicepoint.exe] "c:\program files\verizon\vsp\VerizonServicepoint.exe" /AUTORUN
mRun: [LVCOMSX] c:\windows\system32\LVCOMSX.EXE
mRun: [LogitechVideoRepair] c:\program files\logitech\video\ISStart.exe
mRun: [LogitechVideoTray] c:\program files\logitech\video\LogiTray.exe
mRun: [YSearchProtection] "c:\program files\yahoo!\search protection\SearchProtection.exe"
mRun: [MSKDetectorExe] c:\program files\mcafee\spamkiller\MSKDetct.exe /uninstall
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\bigfix.lnk - c:\program files\bigfix\bigfix.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\isafer.lnk - c:\program files\isafer\iSafer.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office\OSA9.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\realte~1.lnk - c:\program files\realtek rtl8187 wireless lan driver and utility\RtWLan.exe
uPolicies-system: DisableRegistryTools = 1 (0x1)
uPolicies-system: DisableTaskMgr = 1 (0x1)
mPolicies-system: EnableLUA = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: Open Picture in &Microsoft PhotoDraw - c:\progra~1\micros~2\office\1033\phdintl.dll/phdContext.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - c:\program files\yahoo!\common\yiesrvc.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\Shdocvw.dll
DPF: {01113300-3E00-11D2-8470-0060089874ED} - hxxps://activatemydsl.verizon.net/sdcCommon/download/DSL/Verizon%20High%20Speed%20Internet%20Installer.cab
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\Yinsthelper200711281.dll
DPF: {7623BE59-D4CF-4379-ABC4-B39E11854D66} - hxxp://avatar.mabinogi.jp/3drender/renderer/mabiweb.2007.4.4.cab
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\errol\applic~1\mozilla\firefox\profiles\kw6hgg2w.default\
FF - prefs.js: browser.search.selectedEngine - Wikipedia (en)
FF - prefs.js: browser.startup.homepage - hxxp://en-US.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:en-US:official
FF - prefs.js: keyword.URL - hxxp://supertoolbar.ask.com/redirect?client=ff&src=kw&tb=PF&o=15176&locale=en_US&q=
FF - plugin: c:\progra~1\yahoo!\common\npyaxmpb.dll
FF - plugin: c:\program files\java\jre1.5.0_02\bin\NPJava11.dll
FF - plugin: c:\program files\java\jre1.5.0_02\bin\NPJava12.dll
FF - plugin: c:\program files\java\jre1.5.0_02\bin\NPJava13.dll
FF - plugin: c:\program files\java\jre1.5.0_02\bin\NPJava14.dll
FF - plugin: c:\program files\java\jre1.5.0_02\bin\NPJava32.dll
FF - plugin: c:\program files\java\jre1.5.0_02\bin\NPJPI150_02.dll
FF - plugin: c:\program files\java\jre1.5.0_02\bin\NPOJI610.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npbittorrent.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npPandoWebInst.dll
FF - plugin: c:\program files\viewpoint\viewpoint experience technology\npViewpoint.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\

---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.cache_size", 51200);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.ogg.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.wave.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.autoplay.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess");
c:\program files\mozilla firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120);
c:\program files\mozilla firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("layout.css.dpi", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072);
c:\program files\mozilla firefox\greprefs\all.js - pref("geo.enabled", true);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35");
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json");

============= SERVICES / DRIVERS ===============

R0 tffsport;M-Systems DiskOnChip 2000;c:\windows\system32\drivers\tffsport.sys [2009-8-1 149376]
R2 iSafer;iSafer - Personal Firewall;c:\program files\isafer\iSaferSvr.exe [2009-6-18 495104]
R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328]
R2 YahooAUService;Yahoo! Updater;c:\program files\yahoo!\softwareupdate\YahooAUService.exe [2008-11-9 602392]
R3 abp470n5;abp470n5;\??\c:\windows\system32\drivers\jijnif.sys --> c:\windows\system32\drivers\jijnif.sys [?]
S3 el575nd5;3Com Megahertz 10/100 LAN CardBus PC Card Driver;c:\windows\system32\drivers\el575ND5.sys [2009-6-3 69692]
S3 PID_0920;Logitech QuickCam Express(PID_0920);c:\windows\system32\drivers\LV532AV.SYS [2007-12-4 163328]

=============== Created Last 30 ================

2009-09-15 23:54 <DIR> --d----- c:\windows\pss
2009-09-14 03:10 <DIR> --d--r-- C:\My Pictures 2009-09-14 03;10;20
2009-09-14 02:50 <DIR> --d--r-- C:\My Music 2009-09-14 02;50;04
2009-09-13 02:42 <DIR> --d----- c:\windows\system32\wbem\Repository
2009-09-07 02:50 <DIR> --d----- C:\My Music 2009-09-07 02;50;04
2009-09-06 02:50 <DIR> --d--r-- C:\My Music 2009-09-06 02;50;04
2009-09-05 02:50 <DIR> --d--r-- C:\My Music 2009-09-05 02;50;05
2009-09-05 01:54 94,208 a------- c:\windows\system32\QuickTimeVR.qtx
2009-09-05 01:54 69,632 a------- c:\windows\system32\QuickTime.qts
2009-09-04 03:11 <DIR> --d--r-- C:\My Pictures 2009-09-04 03;11;04
2009-09-04 02:50 <DIR> --d--r-- C:\My Music 2009-09-04 02;50;03
2009-09-03 03:10 <DIR> --d--r-- C:\My Pictures 2009-09-03 03;10;31
2009-09-03 02:50 <DIR> --d--r-- C:\My Music 2009-09-03 02;50;05
2009-09-03 00:38 <DIR> --d----- c:\program files\AhnLab
2009-09-03 00:38 <DIR> --d----- c:\documents and settings\errol\AppData
2009-09-02 03:13 <DIR> --d--r-- C:\My Pictures 2009-09-02 03;13;53
2009-09-02 02:50 <DIR> --d--r-- C:\My Music 2009-09-02 02;50;05
2009-09-01 21:03 82,432 ----h--t c:\windows\system32\fc67e66.dll
2009-09-01 02:49 1,032 a------- C:\cbSetup.dat
2009-09-01 02:48 <DIR> --d----- c:\program files\Cobian Backup 9
2009-08-30 21:36 <DIR> --d----- c:\docume~1\errol\applic~1\Malwarebytes
2009-08-30 21:36 38,160 a------- c:\windows\system32\drivers\mbamswissarmy.sys
2009-08-30 21:36 19,096 a------- c:\windows\system32\drivers\mbam.sys
2009-08-30 21:36 <DIR> --d----- c:\program files\Malwarebytes' Anti-Malware
2009-08-30 21:36 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Malwarebytes
2009-08-30 21:20 7,814 a------- c:\windows\system32\msexcr.ini
2009-08-30 20:15 <DIR> --d----- c:\program files\Ask.com
2009-08-30 20:15 <DIR> --d----- c:\program files\PFConfig
2009-08-30 03:23 <DIR> --d----- c:\program files\Trend Micro
2009-08-28 19:19 <DIR> --d----- c:\windows\DSL
2009-08-22 16:29 1,089,593 -c------ c:\windows\system32\dllcache\ntprint.cat
2009-08-21 16:16 <DIR> --d----- C:\9d936133d938bbd7e044c9dd7f47
2009-08-21 16:15 <DIR> --d----- c:\windows\SxsCaPendDel
2009-08-21 15:00 <DIR> --dsh--- c:\documents and settings\errol\PrivacIE

==================== Find3M ====================

2009-08-08 12:10 216,064 a------- c:\windows\PEV.exe
2009-08-05 02:01 204,800 a------- c:\windows\system32\mswebdvd.dll
2009-08-04 15:45 77,265 a------- c:\windows\War3Unin.dat
2009-08-04 15:15 139,264 a------- c:\windows\War3Unin.exe
2009-08-04 15:15 2,829 a------- c:\windows\War3Unin.pif
2009-07-17 12:01 58,880 a------- c:\windows\system32\atl.dll
2009-07-13 23:43 286,208 a------- c:\windows\system32\wmpdxm.dll
2009-07-03 10:09 915,456 a------- c:\windows\system32\wininet.dll
2009-06-25 01:25 730,112 a------- c:\windows\system32\lsasrv.dll
2009-06-25 01:25 301,568 a------- c:\windows\system32\kerberos.dll
2009-06-25 01:25 147,456 a------- c:\windows\system32\schannel.dll
2009-06-25 01:25 136,192 a------- c:\windows\system32\msv1_0.dll
2009-06-25 01:25 56,832 a------- c:\windows\system32\secur32.dll
2009-06-25 01:25 54,272 a------- c:\windows\system32\wdigest.dll
2008-10-20 16:38 32,768 ac-sh--- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008102020081021\index.dat

============= FINISH: 0:18:08.47 ===============

Attached Files


Edited by E_Rok, 18 September 2009 - 02:57 AM.

BMW ///MNSTR!!

#4 m0le

m0le

    Can U Dig It?


  • Malware Response Team
  • 34,527 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:09:36 PM

Posted 18 September 2009 - 04:57 PM

Hi E_Rok,

Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log.
  • Please subscribe to this topic, if you haven't already. You can subscribe by clicking the Options box to the right of your topic title and selecting Track This Topic.

  • Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.

  • Please reply to this post so I know you are there.
The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day after that then I will close the topic.

Once I receive a reply then I will return with your first instructions.

Thanks :(
Posted Image
m0le is a proud member of UNITE

#5 m0le

m0le

    Can U Dig It?


  • Malware Response Team
  • 34,527 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:09:36 PM

Posted 18 September 2009 - 05:30 PM

There's a bad driver working in there.


Can you run a rootkit scan for me.

We Need to check for Rootkits with RootRepeal
  • Download RootRepeal from the following location and save it to your desktop.

    First Location
    Second Location
    Third Location

  • Open Posted Image on your desktop.
  • Click the Posted Image tab.
  • Click the Posted Image button.
  • Check all seven boxes: Posted Image
  • Push Ok
  • Check the box for your main system drive (Usually C:), and press Ok.
  • Allow RootRepeal to run a scan of your system. This may take some time.
  • Once the scan completes, push the Posted Image button. Save the log to your desktop, using a distinctive name, such as RootRepeal.txt. Include this report in your next reply, please.
Then

We need to create an OTL Report
  • Please download OTL By OldTimer
  • Save it to your desktop.
  • Double click on the Posted Image icon on your desktop.
  • Click the "Scan All Users" checkbox.
  • Push the Posted Image button.
  • Two reports will open, copy and paste them in a reply here:[list]
    OTListIt.txt <-- Will be opened
    Extra.txt <-- Will be minimized

Finally let's empty the temp files

Please download ATF Cleaner by Atribune. Double-click ATF-Cleaner.exe to run the program.
Under Main "Select Files to Delete" choose: Select All.
Click the Empty Selected button.
If you use Firefox browserClick Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browserClick Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.
For Technical Support, double-click the e-mail address located at the bottom of each menu.

If you are using Firefox and this has caused page loading problems then please clear your private data. To do this go
to the Tools menu, select Clear Private Data, and then check Cache. Click Clear Private Data Now.

Then close Firefox and then reopen it.

Once I have the two logs and the confirmation that you've run ATF we can start the fun part of removing the malware. :(
Posted Image
m0le is a proud member of UNITE

#6 E_Rok

E_Rok
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:02:36 PM

Posted 19 September 2009 - 07:40 PM

Thank!!



Root Repeal:

ROOTREPEAL © AD, 2007-2009
==================================================
Scan Start Time: 2009/09/19 17:22
Program Version: Version 1.3.5.0
Windows Version: Windows XP Media Center Edition SP3
==================================================

Drivers
-------------------
Name: dump_atapi.sys
Image Path: C:\WINDOWS\System32\Drivers\dump_atapi.sys
Address: 0xEDF22000 Size: 98304 File Visible: No Signed: -
Status: -

Name: dump_WMILIB.SYS
Image Path: C:\WINDOWS\System32\Drivers\dump_WMILIB.SYS
Address: 0xF7A72000 Size: 8192 File Visible: No Signed: -
Status: -

Name: jijnif.sys
Image Path: C:\WINDOWS\system32\drivers\jijnif.sys
Address: 0xF7A32000 Size: 5184 File Visible: No Signed: -
Status: -

Name: mc21.tmp
Image Path: C:\WINDOWS\TEMP\mc21.tmp
Address: 0xF7C2E000 Size: 2560 File Visible: No Signed: -
Status: -

Name: rootrepeal.sys
Image Path: C:\WINDOWS\system32\drivers\rootrepeal.sys
Address: 0xEB05F000 Size: 49152 File Visible: No Signed: -
Status: -

==EOF==


OTL Log:


OTL logfile created on: 9/19/2009 5:26:49 PM - Run 1
OTL by OldTimer - Version 3.0.14.0 Folder = C:\Documents and Settings\Errol\Desktop
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

894.04 Mb Total Physical Memory | 374.41 Mb Available Physical Memory | 41.88% Memory free
2.11 Gb Paging File | 1.64 Gb Available in Paging File | 77.73% Paging File free
Paging file location(s): C:\pagefile.sys 1344 2688 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 104.94 Gb Total Space | 60.86 Gb Free Space | 58.00% Space Free | Partition Type: NTFS
Drive D: | 6.83 Gb Total Space | 4.68 Gb Free Space | 68.56% Space Free | Partition Type: FAT32
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: ROMMEL
Current User Name: Errol
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2006/04/04 22:52:38 | 00,405,504 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\Ati2evxx.exe
PRC - [2005/11/11 22:40:52 | 00,018,944 | ---- | M] () -- C:\WINDOWS\System32\WLTRYSVC.EXE
PRC - [2005/11/11 22:40:50 | 01,093,632 | ---- | M] (Broadcom Corporation) -- C:\WINDOWS\System32\bcmwltry.exe
PRC - [2001/11/23 00:00:00 | 00,057,344 | ---- | M] (brother Industries Ltd) -- C:\WINDOWS\System32\brsvc01a.exe
PRC - [2001/12/13 00:01:00 | 00,045,056 | ---- | M] (brother Industries Ltd) -- C:\WINDOWS\System32\brss01a.exe
PRC - [2006/10/09 17:16:56 | 00,237,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\eHome\ehRecvr.exe
PRC - [2005/08/05 20:56:32 | 00,102,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\eHome\ehSched.exe
PRC - [2005/06/16 16:01:38 | 00,495,104 | ---- | M] (http://winsockfirewall.sourceforge.net) -- C:\Program Files\iSafer\iSaferSvr.exe
PRC - [2006/12/06 19:12:13 | 00,172,032 | ---- | M] (New Boundary Technologies, Inc.) -- C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
PRC - [2008/11/09 13:48:14 | 00,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
PRC - [2005/08/05 20:27:08 | 00,099,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\ehome\mcrdsvc.exe
PRC - [2006/04/04 22:52:38 | 00,405,504 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\Ati2evxx.exe
PRC - [2008/04/13 17:12:19 | 01,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE
PRC - [2005/08/05 20:56:34 | 00,064,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\ehome\ehtray.exe
PRC - [2004/11/05 08:47:00 | 00,487,514 | ---- | M] (Synaptics, Inc.) -- C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
PRC - [2004/11/05 08:47:00 | 00,966,746 | ---- | M] (Synaptics, Inc.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
PRC - [2006/01/02 18:41:22 | 00,045,056 | ---- | M] (ATI Technologies Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
PRC - [2005/08/05 20:56:28 | 00,046,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\eHome\ehmsas.exe
PRC - [2005/12/27 11:20:14 | 00,487,424 | ---- | M] (SigmaTel, Inc.) -- C:\WINDOWS\stsystra.exe
PRC - [2006/05/23 20:22:36 | 00,745,472 | ---- | M] (Motorola Inc.) -- C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
PRC - [2005/11/11 22:40:50 | 01,409,024 | ---- | M] (Broadcom Corporation) -- C:\WINDOWS\System32\WLTRAY.exe
PRC - [2007/06/06 16:52:16 | 01,108,992 | ---- | M] (Motive Communications, Inc.) -- C:\Program Files\Verizon\McciTrayApp.exe
PRC - [2007/05/11 15:20:04 | 02,139,640 | ---- | M] (Verizon) -- C:\Program Files\Verizon\VSP\VerizonServicepoint.exe
PRC - [2005/07/19 18:32:18 | 00,299,008 | ---- | M] (Logitech Inc.) -- C:\WINDOWS\System32\LVCOMSX.EXE
PRC - [2005/06/08 16:14:44 | 00,286,720 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\Video\LogiTray.exe
PRC - [2008/10/07 08:23:46 | 00,189,680 | ---- | M] (Yahoo! Inc) -- C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
PRC - [2009/05/28 21:22:10 | 00,321,344 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\DNA\btdna.exe
PRC - [2009/01/22 11:38:26 | 00,579,584 | ---- | M] (Luis Cobian) -- C:\Program Files\Cobian Backup 9\Cobian.exe
PRC - [2005/10/11 13:47:58 | 02,242,088 | ---- | M] (BigFix Inc.) -- C:\Program Files\BigFix\bigfix.exe
PRC - [2005/06/16 15:43:18 | 01,015,296 | ---- | M] (PSMKorea) -- C:\Program Files\iSafer\iSafer.exe
PRC - [2006/09/14 12:36:20 | 00,831,488 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Program Files\REALTEK RTL8187 Wireless LAN Driver and Utility\RtWLan.exe
PRC - [2009/01/22 11:38:32 | 02,749,952 | ---- | M] (Luis Cobian) -- C:\Program Files\Cobian Backup 9\cbInterface.exe
PRC - [2005/06/08 15:44:56 | 00,192,512 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\Video\FxSvr2.exe
PRC - [2006/01/02 18:41:22 | 00,045,056 | ---- | M] (ATI Technologies Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
PRC - [2006/01/02 18:41:22 | 00,045,056 | ---- | M] (ATI Technologies Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
PRC - [2009/09/19 01:35:24 | 00,007,680 | ---- | M] () -- C:\Documents and Settings\Errol\Local Settings\Temp\wintevva.exe
PRC - [2009/09/19 01:35:43 | 00,011,264 | ---- | M] () -- C:\Documents and Settings\Errol\Local Settings\Temp\spbx.exe
PRC - [2009/09/19 01:36:12 | 00,032,768 | ---- | M] () -- C:\Documents and Settings\Errol\Local Settings\Temp\w4c000.exe
PRC - [2009/08/04 14:36:10 | 00,908,280 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009/09/19 17:24:58 | 00,514,560 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Errol\Desktop\OTL.exe

========== Win32 Services (SafeList) ==========

SRV - [2008/07/25 11:16:40 | 00,034,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped])
SRV - [2006/04/04 22:52:38 | 00,405,504 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\Ati2evxx.exe -- (Ati HotKey Poller [Auto | Running])
SRV - [2001/11/23 00:00:00 | 00,057,344 | ---- | M] (brother Industries Ltd) -- C:\WINDOWS\System32\brsvc01a.exe -- (Brother XP spl Service [Auto | Running])
SRV - [2008/07/25 11:17:02 | 00,069,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped])
SRV - [2006/10/09 17:16:56 | 00,237,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\eHome\ehRecvr.exe -- (ehRecvr [Auto | Running])
SRV - [2005/08/05 20:56:32 | 00,102,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\eHome\ehSched.exe -- (ehSched [Auto | Running])
SRV - [2008/07/29 21:10:04 | 00,046,104 | ---- | M] (Microsoft Corporation) -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0 [On_Demand | Stopped])
SRV - [2009/03/08 19:29:45 | 00,210,928 | ---- | M] (Google) -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc [On_Demand | Stopped])
SRV - [2008/04/13 17:12:02 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running])
SRV - [2008/07/29 19:24:50 | 00,881,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc [Unknown | Stopped])
SRV - [2005/06/16 16:01:38 | 00,495,104 | ---- | M] (http://winsockfirewall.sourceforge.net) -- C:\Program Files\iSafer\iSaferSvr.exe -- (iSafer [Auto | Running])
SRV - [2005/08/05 20:27:08 | 00,099,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\ehome\mcrdsvc.exe -- (McrdSvc [Auto | Running])
SRV - [2004/08/10 11:11:50 | 00,085,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mhn.dll -- (MHN [On_Demand | Stopped])
SRV - [2008/07/29 19:16:38 | 00,132,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing [Disabled | Stopped])
SRV - [2003/07/28 13:28:22 | 00,171,056 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped])
SRV - [2006/12/06 19:12:13 | 00,172,032 | ---- | M] (New Boundary Technologies, Inc.) -- C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS -- (PrismXL [Auto | Running])
SRV - [2005/11/11 22:40:52 | 00,018,944 | ---- | M] () -- C:\WINDOWS\System32\WLTRYSVC.EXE -- (wltrysvc [Auto | Running])
SRV - [2006/10/18 20:05:24 | 00,983,040 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\WMPNetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped])
SRV - [2008/11/09 13:48:14 | 00,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService [Auto | Running])

========== Driver Services (SafeList) ==========

DRV - File not found -- -- (abp470n5 [On_Demand | Running])
DRV - [2006/12/06 19:04:16 | 00,021,035 | ---- | M] (Meetinghouse Data Communications) -- C:\WINDOWS\System32\DRIVERS\AegisP.sys -- (AegisP [Auto | Running])
DRV - [2001/08/17 20:51:56 | 00,005,248 | ---- | M] (Acer Laboratories Inc.) -- C:\WINDOWS\system32\DRIVERS\aliide.sys -- (AliIde [Boot | Running])
DRV - [2008/04/13 11:36:39 | 00,043,008 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\system32\DRIVERS\amdagp.sys -- (amdagp [Boot | Running])
DRV - [2006/06/19 00:37:34 | 00,036,864 | ---- | M] (Advanced Micro Devices) -- C:\WINDOWS\System32\DRIVERS\AmdK8.sys -- (AmdK8 [System | Running])
DRV - [2001/08/17 20:52:00 | 00,026,496 | ---- | M] (Advanced System Products, Inc.) -- C:\WINDOWS\system32\DRIVERS\asc.sys -- (asc [Boot | Running])
DRV - [2001/08/17 20:51:58 | 00,014,848 | ---- | M] (Advanced System Products, Inc.) -- C:\WINDOWS\system32\DRIVERS\asc3550.sys -- (asc3550 [Boot | Running])
DRV - [2006/12/06 19:02:34 | 00,008,552 | ---- | M] (Windows ® 2000 DDK provider) -- C:\WINDOWS\System32\drivers\asctrm.sys -- (ASCTRM [Auto | Running])
DRV - [2006/04/04 22:58:44 | 01,536,000 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\DRIVERS\ati2mtag.sys -- (ati2mtag [On_Demand | Running])
DRV - [2005/02/01 12:18:38 | 00,017,992 | ---- | M] (Broadcom Corporation) -- C:\WINDOWS\System32\drivers\BCM42RLY.SYS -- (BCM42RLY [On_Demand | Stopped])
DRV - [2005/11/02 15:24:24 | 00,424,320 | ---- | M] (Broadcom Corporation) -- C:\WINDOWS\System32\DRIVERS\bcmwl5.sys -- (BCM43XX [On_Demand | Running])
DRV - [2007/03/27 00:55:32 | 00,002,432 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdr4_xp.sys -- (Cdr4_xp [System | Running])
DRV - [2007/03/27 00:55:32 | 00,002,560 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdralw2k.sys -- (Cdralw2k [System | Running])
DRV - [2001/08/17 20:51:54 | 00,006,656 | ---- | M] (CMD Technology, Inc.) -- C:\WINDOWS\system32\DRIVERS\cmdide.sys -- (CmdIde [Boot | Running])
DRV - [2001/08/17 20:52:16 | 00,179,584 | ---- | M] (Mylex Corporation) -- C:\WINDOWS\system32\DRIVERS\dac2w2k.sys -- (dac2w2k [Boot | Running])
DRV - [2001/08/17 12:10:58 | 00,069,692 | ---- | M] (3Com Corporation) -- C:\WINDOWS\System32\DRIVERS\el575nd5.sys -- (el575nd5 [On_Demand | Stopped])
DRV - [2008/04/13 09:36:05 | 00,144,384 | ---- | M] (Windows ® Server 2003 DDK provider) -- C:\WINDOWS\System32\DRIVERS\HDAudBus.sys -- (HDAudBus [On_Demand | Running])
DRV - [2005/05/27 10:31:28 | 00,022,016 | ---- | M] (Logitech Inc.) -- C:\WINDOWS\System32\drivers\lvusbsta.sys -- (LVUSBSta [On_Demand | Stopped])
DRV - [2001/08/17 20:52:12 | 00,017,280 | ---- | M] (American Megatrends Inc.) -- C:\WINDOWS\system32\DRIVERS\mraid35x.sys -- (mraid35x [Boot | Running])
DRV - [2007/06/06 16:52:14 | 00,019,345 | ---- | M] (Motive, Inc.) -- C:\Program Files\Common Files\Motive\MREMPR5.sys -- (MREMPR5 [On_Demand | Stopped])
DRV - [2007/06/06 16:52:12 | 00,018,003 | ---- | M] (Motive, Inc.) -- C:\Program Files\Common Files\Motive\MRENDIS5.sys -- (MRENDIS5 [On_Demand | Stopped])
DRV - [2005/01/31 12:13:24 | 00,163,328 | ---- | M] () -- C:\WINDOWS\System32\DRIVERS\LV532AV.SYS -- (PID_0920 [On_Demand | Stopped])
DRV - [2004/08/10 12:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running])
DRV - [2009/05/01 14:03:38 | 00,043,528 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20 [Boot | Running])
DRV - [2001/08/17 20:52:20 | 00,040,320 | ---- | M] (QLogic Corporation) -- C:\WINDOWS\system32\DRIVERS\ql1080.sys -- (ql1080 [Boot | Running])
DRV - [2001/08/17 20:52:20 | 00,045,312 | ---- | M] (QLogic Corporation) -- C:\WINDOWS\system32\DRIVERS\ql12160.sys -- (ql12160 [Boot | Running])
DRV - [2001/08/17 20:52:18 | 00,049,024 | ---- | M] (QLogic Corporation) -- C:\WINDOWS\system32\DRIVERS\ql1280.sys -- (ql1280 [Boot | Running])
DRV - [2007/05/31 13:39:50 | 00,022,656 | ---- | M] (Research In Motion Limited) -- C:\WINDOWS\System32\Drivers\RimUsb.sys -- (RimUsb [On_Demand | Stopped])
DRV - [2007/01/18 10:24:58 | 00,026,496 | R--- | M] (Research in Motion Ltd) -- C:\WINDOWS\System32\DRIVERS\RimSerial.sys -- (RimVSerPort [On_Demand | Running])
DRV - [2004/08/10 12:00:00 | 00,005,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\Drivers\RootMdm.sys -- (ROOTMODEM [On_Demand | Running])
DRV - [2007/11/13 03:25:53 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [Auto | Running])
DRV - [2008/04/13 11:36:39 | 00,040,960 | ---- | M] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\system32\DRIVERS\sisagp.sys -- (sisagp [Boot | Running])
DRV - [2006/05/23 20:30:06 | 00,893,952 | ---- | M] (Motorola Inc.) -- C:\WINDOWS\System32\DRIVERS\smserial.sys -- (smserial [On_Demand | Running])
DRV - [2001/08/17 13:56:16 | 00,007,552 | ---- | M] (Sony Corporation) -- C:\WINDOWS\System32\DRIVERS\SONYPVU1.SYS -- (SONYPVU1 [On_Demand | Stopped])
DRV - [2001/08/17 21:07:44 | 00,019,072 | ---- | M] (Adaptec, Inc.) -- C:\WINDOWS\system32\DRIVERS\sparrow.sys -- (Sparrow [Boot | Running])
DRV - [2006/06/15 16:28:04 | 01,179,784 | ---- | M] (SigmaTel, Inc.) -- C:\WINDOWS\System32\drivers\sthda.sys -- (STHDA [On_Demand | Running])
DRV - [2001/08/17 21:07:34 | 00,016,256 | ---- | M] (Symbios Logic Inc.) -- C:\WINDOWS\system32\DRIVERS\symc810.sys -- (symc810 [Boot | Running])
DRV - [2001/08/17 21:07:36 | 00,032,640 | ---- | M] (LSI Logic) -- C:\WINDOWS\system32\DRIVERS\symc8xx.sys -- (symc8xx [Boot | Running])
DRV - [2001/08/17 21:07:40 | 00,028,384 | ---- | M] (LSI Logic) -- C:\WINDOWS\system32\DRIVERS\sym_hi.sys -- (sym_hi [Boot | Running])
DRV - [2001/08/17 21:07:42 | 00,030,688 | ---- | M] (LSI Logic) -- C:\WINDOWS\system32\DRIVERS\sym_u3.sys -- (sym_u3 [Boot | Running])
DRV - [2004/11/05 08:47:00 | 00,185,824 | ---- | M] (Synaptics, Inc.) -- C:\WINDOWS\System32\DRIVERS\SynTP.sys -- (SynTP [On_Demand | Running])
DRV - [2008/04/13 11:40:50 | 00,149,376 | ---- | M] (M-Systems) -- C:\WINDOWS\system32\DRIVERS\tffsport.sys -- (tffsport [Boot | Running])
DRV - [2005/09/21 01:30:56 | 00,162,432 | ---- | M] (Texas Instruments) -- C:\WINDOWS\System32\drivers\tifm21.sys -- (tifm21 [On_Demand | Running])
DRV - [2001/08/17 20:52:22 | 00,036,736 | ---- | M] (Promise Technology, Inc.) -- C:\WINDOWS\system32\DRIVERS\ultra.sys -- (ultra [Boot | Running])
DRV - [2008/04/13 11:45:12 | 00,060,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbaudio.sys -- (usbaudio [On_Demand | Stopped])
DRV - [2008/04/13 11:56:49 | 00,012,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\DRIVERS\usb8023.sys -- (USB_RNDIS_XP [On_Demand | Stopped])
DRV - [2003/01/10 14:13:04 | 00,033,588 | ---- | M] (America Online, Inc.) -- C:\WINDOWS\System32\DRIVERS\wanatw4.sys -- (wanatw [On_Demand | Stopped])
DRV - [2006/05/23 08:56:00 | 00,245,248 | ---- | M] (Marvell) -- C:\WINDOWS\System32\DRIVERS\yk51x86.sys -- (yukonwxp [On_Demand | Running])

========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm


IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Default_page_URL = http://www.gateway.com/g/startpage.html?Ch...TB&M=MX6447
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?p...&ar=msnhome
IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Default_page_URL = http://www.gateway.com/g/startpage.html?Ch...TB&M=MX6447
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?p...&ar=msnhome
IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-2938928222-1630305472-4010317165-1007\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKU\S-1-5-21-2938928222-1630305472-4010317165-1007\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch
IE - HKU\S-1-5-21-2938928222-1630305472-4010317165-1007\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com?o=15179&l=dis
IE - HKU\S-1-5-21-2938928222-1630305472-4010317165-1007\S-1-5-21-2938928222-1630305472-4010317165-1007\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Wikipedia (en)"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://en-US.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:en-US:official"
FF - prefs.js..extensions.enabledItems: {d40f5e7b-d2cf-4856-b441-cc613eeffbe3}:1.29
FF - prefs.js..extensions.enabledItems: illimitux@illimitux.net:2.0.2
FF - prefs.js..extensions.enabledItems: {20a82645-c095-46ed-80e3-08825760534b}:1.1
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.2
FF - prefs.js..keyword.URL: "http://supertoolbar.ask.com/redirect?client=ff&src=kw&tb=PF&o=15176&locale=en_US&q="

FF - HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009/09/01 00:31:30 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009/09/14 19:52:17 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009/09/14 19:52:17 | 00,000,000 | ---D | M]

[2009/06/06 21:47:34 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Errol\Application Data\mozilla\Extensions
[2009/02/04 15:45:20 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Errol\Application Data\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009/06/06 21:47:34 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Errol\Application Data\mozilla\Extensions\home2@tomtom.com
[2009/09/19 15:31:30 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Errol\Application Data\mozilla\Firefox\Profiles\kw6hgg2w.default\extensions
[2009/09/01 02:02:38 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Errol\Application Data\mozilla\Firefox\Profiles\kw6hgg2w.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009/06/28 13:43:33 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Errol\Application Data\mozilla\Firefox\Profiles\kw6hgg2w.default\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}
[2009/06/26 11:16:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Errol\Application Data\mozilla\Firefox\Profiles\kw6hgg2w.default\extensions\illimitux@illimitux.net
[2009/08/28 19:59:09 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Errol\Application Data\mozilla\Firefox\Profiles\kw6hgg2w.default\extensions\installer@activatemydsl.verizon.net
[2009/05/05 16:07:23 | 00,000,682 | ---- | M] () -- C:\Documents and Settings\Errol\Application Data\Mozilla\FireFox\Profiles\kw6hgg2w.default\searchplugins\ask.xml
[2009/08/30 20:18:01 | 00,002,254 | ---- | M] () -- C:\Documents and Settings\Errol\Application Data\Mozilla\FireFox\Profiles\kw6hgg2w.default\searchplugins\askcom.xml
[2009/01/12 23:27:50 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions
[2009/08/04 14:36:24 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2009/08/04 14:36:08 | 00,023,544 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browserdirprovider.dll
[2009/08/04 14:36:08 | 00,137,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\brwsrcmp.dll
[2009/05/01 14:02:48 | 01,044,480 | ---- | M] (The OpenSSL Project, http://www.openssl.org/) -- C:\Program Files\mozilla firefox\plugins\libdivx.dll
[2008/09/03 17:11:24 | 00,054,600 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\mozilla firefox\plugins\npbittorrent.dll
[2009/05/12 11:46:20 | 01,650,992 | ---- | M] (DivX,Inc.) -- C:\Program Files\mozilla firefox\plugins\npdivx32.dll
[2009/05/18 15:41:32 | 00,098,304 | ---- | M] (DivX, Inc) -- C:\Program Files\mozilla firefox\plugins\npDivxPlayerPlugin.dll
[2009/02/06 12:44:28 | 01,447,296 | ---- | M] (Microsoft Corporation) -- C:\Program Files\mozilla firefox\plugins\npLegitCheckPlugin.dll
[2009/08/04 14:36:16 | 00,065,016 | ---- | M] (mozilla.org) -- C:\Program Files\mozilla firefox\plugins\npnul32.dll
[2009/08/29 20:48:59 | 00,238,776 | ---- | M] (Pando Networks) -- C:\Program Files\mozilla firefox\plugins\npPandoWebInst.dll
[2009/02/27 12:13:42 | 00,103,792 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\mozilla firefox\plugins\nppdf32.dll
[2009/05/01 14:02:48 | 00,200,704 | ---- | M] (The OpenSSL Project, http://www.openssl.org/) -- C:\Program Files\mozilla firefox\plugins\ssldivx.dll
[2009/08/04 14:36:18 | 00,001,394 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom.xml
[2009/08/04 14:36:18 | 00,002,193 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\answers.xml
[2009/08/04 14:36:18 | 00,001,534 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\creativecommons.xml
[2009/08/04 14:36:18 | 00,002,344 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay.xml
[2009/08/04 14:36:18 | 00,002,371 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml
[2009/08/04 14:36:18 | 00,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia.xml
[2009/08/04 14:36:18 | 00,000,792 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo.xml

O1 HOSTS File: (90 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 80.69.94.166 gameguard.mapleglobal.com
O1 - Hosts: 80.69.94.166 63.251.217.184
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Verizon Broadband Toolbar) - {4E7BD74F-2B8D-469E-8CB0-AB60BB9AAE22} - C:\Program Files\vol_toolbar\vol_toolbar.dll (Verizon Online. )
O2 - BHO: (Yahoo! IE Services Button) - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll (Yahoo! Inc.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.)
O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll (Google Inc.)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\WINDOWS\System32\BAE.dll (Gateway Inc.)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKLM\..\Toolbar: (&Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O3 - HKLM\..\Toolbar: (Verizon Broadband Toolbar) - {4E7BD74F-2B8D-469E-8CB0-AB60BB9AAE22} - C:\Program Files\vol_toolbar\vol_toolbar.dll (Verizon Online. )
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (&Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (&Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O3 - HKU\S-1-5-21-2938928222-1630305472-4010317165-1007\..\Toolbar\WebBrowser: (&Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O3 - HKU\S-1-5-21-2938928222-1630305472-4010317165-1007\..\Toolbar\WebBrowser: (Verizon Broadband Toolbar) - {4E7BD74F-2B8D-469E-8CB0-AB60BB9AAE22} - C:\Program Files\vol_toolbar\vol_toolbar.dll (Verizon Online. )
O3 - HKU\S-1-5-21-2938928222-1630305472-4010317165-1007\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ATICCC] C:\Program Files\ATI Technologies\ATI.ACE\cli.exe (ATI Technologies Inc.)
O4 - HKLM..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\System32\WLTRAY.exe (Broadcom Corporation)
O4 - HKLM..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe (Microsoft Corporation)
O4 - HKLM..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe (Logitech Inc.)
O4 - HKLM..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe (Logitech Inc.)
O4 - HKLM..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE (Logitech Inc.)
O4 - HKLM..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe File not found
O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\QTTask.exe (Apple Inc.)
O4 - HKLM..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE ()
O4 - HKLM..\Run: [SigmatelSysTrayApp] C:\WINDOWS\stsystra.exe (SigmaTel, Inc.)
O4 - HKLM..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe (Motorola Inc.)
O4 - HKLM..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics, Inc.)
O4 - HKLM..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Synaptics, Inc.)
O4 - HKLM..\Run: [Verizon_McciTrayApp] C:\Program Files\Verizon\McciTrayApp.exe (Motive Communications, Inc.)
O4 - HKLM..\Run: [VerizonServicepoint.exe] C:\Program Files\Verizon\VSP\VerizonServicepoint.exe (Verizon)
O4 - HKLM..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe (Yahoo! Inc)
O4 - HKU\S-1-5-21-2938928222-1630305472-4010317165-1007..\Run: [ares] C:\Program Files\Ares\Ares.exe File not found
O4 - HKU\S-1-5-21-2938928222-1630305472-4010317165-1007..\Run: [BitTorrent DNA] C:\Program Files\DNA\btdna.exe (BitTorrent, Inc.)
O4 - HKU\S-1-5-21-2938928222-1630305472-4010317165-1007..\Run: [Cobian Backup 9] C:\Program Files\Cobian Backup 9\Cobian.exe (Luis Cobian)
O4 - HKU\S-1-5-21-2938928222-1630305472-4010317165-1007..\Run: [Messenger (Yahoo!)] C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - HKU\S-1-5-21-2938928222-1630305472-4010317165-1007..\Run: [Power2GoExpress] File not found
O4 - HKU\S-1-5-21-2938928222-1630305472-4010317165-1007..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\BigFix.lnk = C:\Program Files\BigFix\bigfix.exe (BigFix Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\iSafer.lnk = C:\Program Files\iSafer\iSafer.exe (PSMKorea)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\REALTEK RTL8187 Wireless LAN Utility.lnk = C:\Program Files\REALTEK RTL8187 Wireless LAN Driver and Utility\RtWLan.exe (Realtek Semiconductor Corp.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: CDRAutoRun = 0
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: CDRAutoRun = 0
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2938928222-1630305472-4010317165-1007\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2938928222-1630305472-4010317165-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-2938928222-1630305472-4010317165-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-2938928222-1630305472-4010317165-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-2938928222-1630305472-4010317165-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
O7 - HKU\S-1-5-21-2938928222-1630305472-4010317165-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O7 - HKU\S-1-5-21-2938928222-1630305472-4010317165-1007_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Open Picture in &Microsoft PhotoDraw - C:\Program Files\Microsoft Office\Office\1033\PHDINTL.DLL (Microsoft Corporation)
O9 - Extra Button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll (Yahoo! Inc.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\WINDOWS\System32\rsvpsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - C:\WINDOWS\System32\rsvpsp.dll (Microsoft Corporation)
O12 - Plugin for: .spop - C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll (Intertrust Technologies, Inc.)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} https://activatemydsl.verizon.net/sdcCommon...20Installer.cab (Support.com Configuration Class)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files\Yahoo!\Common\Yinsthelper200711281.dll (Installation Support)
O16 - DPF: {7623BE59-D4CF-4379-ABC4-B39E11854D66} http://avatar.mabinogi.jp/3drender/rendere...eb.2007.4.4.cab (MabinogiWebAvatarRenderer Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\Ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (My Current Home Page) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/06/17 02:41:16 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{de4cc73e-361d-11de-b104-0014a5dd6448}\Shell\aUtOpLaY\cOmmAnD - "" = F:\wfomux.pif -- File not found
O33 - MountPoints2\{de4cc73e-361d-11de-b104-0014a5dd6448}\Shell\AutoRun\command - "" = F:\wfomux.pif -- File not found
O33 - MountPoints2\{de4cc73e-361d-11de-b104-0014a5dd6448}\Shell\eXPlOrE\comMand - "" = F:\wfomux.pif -- File not found
O33 - MountPoints2\{de4cc73e-361d-11de-b104-0014a5dd6448}\Shell\OpEn\coMmAND - "" = F:\wfomux.pif -- File not found
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - File not found

========== Files/Folders - Created Within 30 Days ==========

[1 C:\WINDOWS\*.tmp files]
[2009/09/19 17:24:48 | 00,514,560 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Errol\Desktop\OTL.exe
[2009/09/19 17:22:26 | 00,000,000 | ---- | C] () -- C:\Documents and Settings\Errol\Desktop\settings.dat
[2009/09/19 17:21:50 | 00,472,064 | ---- | C] ( ) -- C:\Documents and Settings\Errol\Desktop\RootRepeal.exe
[2009/09/19 03:15:39 | 00,000,000 | R--D | C] -- C:\My Pictures 2009-09-19 03;15;39
[2009/09/19 02:50:03 | 00,000,000 | R--D | C] -- C:\My Music 2009-09-19 02;50;03
[2009/09/18 00:34:32 | 00,003,837 | ---- | C] () -- C:\Documents and Settings\Errol\Desktop\Attach.zip
[2009/09/16 18:25:36 | 00,021,504 | ---- | C] () -- C:\Documents and Settings\Errol\My Documents\Compare and Contrast Draft.doc
[2009/09/15 23:54:51 | 00,000,000 | ---D | C] -- C:\WINDOWS\pss
[2009/09/15 18:49:06 | 00,019,968 | ---- | C] () -- C:\Documents and Settings\Errol\My Documents\Perez HW#3.doc
[2009/09/14 19:53:14 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2009/09/14 19:52:32 | 00,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2009/09/14 19:52:30 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Apple Computer
[2009/09/14 19:52:14 | 00,000,000 | -HSD | C] -- C:\Config.Msi
[2009/09/14 03:10:20 | 00,000,000 | R--D | C] -- C:\My Pictures 2009-09-14 03;10;20
[2009/09/14 02:50:04 | 00,000,000 | R--D | C] -- C:\My Music 2009-09-14 02;50;04
[2009/09/08 15:22:15 | 00,020,480 | ---- | C] () -- C:\Documents and Settings\Errol\My Documents\Perez HW#2.doc
[2009/09/05 01:54:48 | 00,094,208 | ---- | C] (Apple Inc.) -- C:\WINDOWS\System32\QuickTimeVR.qtx
[2009/09/05 01:54:48 | 00,069,632 | ---- | C] (Apple Inc.) -- C:\WINDOWS\System32\QuickTime.qts
[2009/09/04 03:11:04 | 00,000,000 | R--D | C] -- C:\My Pictures 2009-09-04 03;11;04
[2009/09/03 03:10:31 | 00,000,000 | R--D | C] -- C:\My Pictures 2009-09-03 03;10;31
[2009/09/03 00:38:24 | 00,000,000 | ---D | C] -- C:\Program Files\AhnLab
[2009/09/02 03:13:53 | 00,000,000 | R--D | C] -- C:\My Pictures 2009-09-02 03;13;53
[2009/09/01 21:03:33 | 00,082,432 | -H-- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fc67e66.dll
[2009/09/01 15:21:41 | 00,019,456 | ---- | C] () -- C:\Documents and Settings\Errol\My Documents\Rose for Emily HW.doc
[2009/09/01 02:49:19 | 00,001,032 | ---- | C] () -- C:\cbSetup.dat
[2009/09/01 02:48:01 | 00,000,000 | ---D | C] -- C:\Program Files\Cobian Backup 9
[2009/09/01 01:32:53 | 00,020,480 | ---- | C] () -- C:\Documents and Settings\Errol\My Documents\Perez HW#1.doc
[2009/08/30 21:36:17 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Errol\Application Data\Malwarebytes
[2009/08/30 21:36:16 | 00,000,696 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/08/30 21:36:13 | 00,038,160 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009/08/30 21:36:12 | 00,019,096 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2009/08/30 21:36:12 | 00,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2009/08/30 21:36:12 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2009/08/30 21:20:02 | 00,007,814 | ---- | C] () -- C:\WINDOWS\System32\msexcr.ini
[2009/08/30 20:17:51 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Errol\Local Settings\Application Data\AskToolbar
[2009/08/30 20:15:39 | 00,000,234 | ---- | C] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2009/08/30 20:15:34 | 00,000,000 | ---D | C] -- C:\Program Files\Ask.com
[2009/08/30 20:15:09 | 00,000,000 | ---D | C] -- C:\Program Files\PFConfig
[2009/08/30 03:23:18 | 00,001,734 | ---- | C] () -- C:\Documents and Settings\Errol\Desktop\HijackThis.lnk
[2009/08/30 03:23:18 | 00,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2009/08/30 02:58:27 | 00,001,742 | ---- | C] () -- C:\Documents and Settings\Errol\Desktop\MapleStory.lnk
[2009/08/28 19:19:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Errol\Local Settings\Application Data\SupportSoft
[2009/08/28 19:19:27 | 00,001,720 | ---- | C] () -- C:\Documents and Settings\Errol\Desktop\Resume High Speed Internet Activation.lnk
[2009/08/28 19:19:18 | 00,000,000 | ---D | C] -- C:\WINDOWS\DSL
[2009/08/22 16:29:40 | 01,089,593 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ntprint.cat
[2009/08/21 16:16:10 | 00,000,000 | ---D | C] -- C:\9d936133d938bbd7e044c9dd7f47
[2009/08/21 16:15:30 | 00,000,000 | ---D | C] -- C:\WINDOWS\SxsCaPendDel
[2008/09/15 14:28:10 | 00,000,031 | ---- | C] () -- C:\WINDOWS\LOAD32.INI
[2008/09/15 14:13:44 | 00,000,000 | ---- | C] () -- C:\WINDOWS\Editors700.INI
[2008/09/15 14:07:29 | 00,001,123 | ---- | C] () -- C:\WINDOWS\Trace.INI
[2008/09/15 14:07:29 | 00,000,828 | ---- | C] () -- C:\WINDOWS\topss.ini
[2008/06/03 15:37:21 | 00,000,099 | ---- | C] () -- C:\WINDOWS\phd2dll.INI
[2007/12/04 20:37:47 | 00,163,328 | ---- | C] () -- C:\WINDOWS\System32\drivers\LV532AV.SYS
[2007/12/04 20:37:47 | 00,009,255 | ---- | C] () -- C:\WINDOWS\System32\lvcoinst.ini
[2007/09/05 14:17:59 | 00,000,002 | ---- | C] () -- C:\WINDOWS\msoffice.ini
[2007/04/05 11:31:36 | 00,000,059 | ---- | C] () -- C:\WINDOWS\brmx2001.ini
[2007/04/05 11:31:36 | 00,000,040 | ---- | C] () -- C:\WINDOWS\opt_1440.ini
[2007/04/05 11:31:16 | 00,000,493 | ---- | C] () -- C:\WINDOWS\brwmark.ini
[2007/04/05 11:31:16 | 00,000,030 | ---- | C] () -- C:\WINDOWS\System32\brss01a.ini
[2007/04/05 11:31:14 | 00,000,052 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI
[2007/04/05 10:52:31 | 00,000,058 | ---- | C] () -- C:\WINDOWS\System32\EAL32.INI
[2007/03/13 17:02:02 | 00,000,142 | ---- | C] () -- C:\WINDOWS\wpd99.drv
[2007/03/13 17:01:41 | 00,051,716 | ---- | C] () -- C:\WINDOWS\System32\pdf995mon.dll
[2006/12/06 19:16:36 | 00,023,552 | ---- | C] () -- C:\WINDOWS\System32\jesterss.dll
[2006/12/06 18:55:32 | 00,000,604 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2006/12/06 18:51:44 | 00,086,016 | ---- | C] () -- C:\WINDOWS\System32\preflib.dll
[2006/12/06 18:50:19 | 00,757,760 | ---- | C] () -- C:\WINDOWS\System32\bcm1xsup.dll
[2006/06/21 02:48:15 | 00,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2006/06/17 02:24:58 | 00,001,280 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2006/06/17 02:24:57 | 00,000,518 | ---- | C] () -- C:\WINDOWS\System32\emver.ini
[2006/06/17 02:23:30 | 00,000,812 | ---- | C] () -- C:\WINDOWS\win.ini
[2006/06/17 02:23:29 | 00,000,339 | ---- | C] () -- C:\WINDOWS\system.ini
[2005/08/05 21:01:54 | 00,235,008 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2004/01/14 10:46:34 | 00,172,032 | ---- | C] () -- C:\WINDOWS\System32\tifmicon.dll
[2003/01/07 16:05:08 | 00,002,695 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[1999/01/22 11:46:56 | 00,065,536 | ---- | C] () -- C:\WINDOWS\System32\MSRTEDIT.DLL

========== Files - Modified Within 30 Days ==========

[11 C:\WINDOWS\System32\*.tmp files]
[1 C:\WINDOWS\*.tmp files]
[2009/09/19 17:24:58 | 00,514,560 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Errol\Desktop\OTL.exe
[2009/09/19 17:22:26 | 00,000,000 | ---- | M] () -- C:\Documents and Settings\Errol\Desktop\settings.dat
[2009/09/19 17:22:05 | 00,472,064 | ---- | M] ( ) -- C:\Documents and Settings\Errol\Desktop\RootRepeal.exe
[2009/09/19 17:01:05 | 00,000,234 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2009/09/19 01:32:10 | 00,000,812 | ---- | M] () -- C:\WINDOWS\win.ini
[2009/09/19 01:31:43 | 00,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2009/09/19 01:31:21 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2009/09/19 01:31:19 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2009/09/19 01:31:16 | 93,753,7536 | -HS- | M] () -- C:\hiberfil.sys
[2009/09/18 00:34:32 | 00,003,837 | ---- | M] () -- C:\Documents and Settings\Errol\Desktop\Attach.zip
[2009/09/17 15:19:29 | 00,021,504 | ---- | M] () -- C:\Documents and Settings\Errol\My Documents\Compare and Contrast Draft.doc
[2009/09/16 17:20:30 | 00,019,968 | ---- | M] () -- C:\Documents and Settings\Errol\My Documents\Perez HW#3.doc
[2009/09/16 00:09:12 | 00,001,917 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2009/09/14 18:48:01 | 00,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2009/09/13 18:58:43 | 00,000,059 | ---- | M] () -- C:\WINDOWS\brmx2001.ini
[2009/09/09 11:53:15 | 04,239,676 | -H-- | M] () -- C:\Documents and Settings\Errol\Local Settings\Application Data\IconCache.db
[2009/09/08 15:22:15 | 00,020,480 | ---- | M] () -- C:\Documents and Settings\Errol\My Documents\Perez HW#2.doc
[2009/09/07 19:50:30 | 00,441,692 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2009/09/07 19:50:30 | 00,071,462 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2009/09/05 19:26:18 | 00,007,814 | ---- | M] () -- C:\WINDOWS\System32\msexcr.ini
[2009/09/05 02:26:12 | 00,001,742 | ---- | M] () -- C:\Documents and Settings\Errol\Desktop\MapleStory.lnk
[2009/09/05 01:54:48 | 00,094,208 | ---- | M] (Apple Inc.) -- C:\WINDOWS\System32\QuickTimeVR.qtx
[2009/09/05 01:54:48 | 00,069,632 | ---- | M] (Apple Inc.) -- C:\WINDOWS\System32\QuickTime.qts
[2009/09/02 11:51:10 | 00,000,256 | ---- | M] () -- C:\WINDOWS\System32\pool.bin
[2009/09/01 15:21:41 | 00,019,456 | ---- | M] () -- C:\Documents and Settings\Errol\My Documents\Rose for Emily HW.doc
[2009/09/01 02:49:19 | 00,001,032 | ---- | M] () -- C:\cbSetup.dat
[2009/09/01 02:19:18 | 00,521,766 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2009/09/01 01:32:53 | 00,020,480 | ---- | M] () -- C:\Documents and Settings\Errol\My Documents\Perez HW#1.doc
[2009/08/30 21:36:16 | 00,000,696 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/08/30 03:23:18 | 00,001,734 | ---- | M] () -- C:\Documents and Settings\Errol\Desktop\HijackThis.lnk
[2009/08/28 19:39:57 | 00,001,720 | ---- | M] () -- C:\Documents and Settings\Errol\Desktop\Resume High Speed Internet Activation.lnk
[2009/08/28 14:38:22 | 24,689,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\MRT.exe
[2009/08/26 12:17:53 | 00,037,888 | ---- | M] () -- C:\Documents and Settings\Errol\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/08/24 15:35:50 | 00,001,729 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2009/08/21 16:31:32 | 00,238,832 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
< End of report >






Extra.txt:


OTL Extras logfile created on: 9/19/2009 5:26:49 PM - Run 1
OTL by OldTimer - Version 3.0.14.0 Folder = C:\Documents and Settings\Errol\Desktop
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

894.04 Mb Total Physical Memory | 374.41 Mb Available Physical Memory | 41.88% Memory free
2.11 Gb Paging File | 1.64 Gb Available in Paging File | 77.73% Paging File free
Paging file location(s): C:\pagefile.sys 1344 2688 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 104.94 Gb Total Space | 60.86 Gb Free Space | 58.00% Space Free | Partition Type: NTFS
Drive D: | 6.83 Gb Total Space | 4.68 Gb Free Space | 68.56% Space Free | Partition Type: FAT32
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: ROMMEL
Current User Name: Errol
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.chm [@ = chm.file] -- C:\WINDOWS\hh.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-2938928222-1630305472-4010317165-1007\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
chm.file [open] -- "C:\WINDOWS\hh.exe" %1 (Microsoft Corporation)
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
htmlfile [edit] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "%programfiles%\internet explorer\iexplore.exe" (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusOverride" = 1
"FirewallOverride" = 1
"UacDisableNotify" = 1
"AntiVirusDisableNotify" = 1
"FirewallDisableNotify" = 1
"UpdatesDisableNotify" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 1
"AntiVirusDisableNotify" = 1
"FirewallDisableNotify" = 1
"FirewallOverride" = 1
"UpdatesDisableNotify" = 1
"UacDisableNotify" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Warcraft III\Frozen Throne.exe" = C:\Program Files\Warcraft III\Frozen Throne.exe:*:Enabled:Warcraft III - The Frozen Throne -- (Blizzard Entertainment)
"C:\Nexon\MapleStory\MapleStory.exe" = C:\Nexon\MapleStory\MapleStory.exe:*:Enabled:MapleStory -- (Wizet)
"C:\WINDOWS\Explorer.EXE" = C:\WINDOWS\Explorer.EXE:*:Enabled:ipsec -- (Microsoft Corporation)
"C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" = C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe:*:Enabled:ipsec -- (Malwarebytes Corporation)
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" = C:\Program Files\Synaptics\SynTP\SynTPEnh.exe:*:Enabled:ipsec -- (Synaptics, Inc.)
"C:\Program Files\DNA\btdna.exe" = C:\Program Files\DNA\btdna.exe:*:Enabled:DNA -- (BitTorrent, Inc.)
"C:\Program Files\Synaptics\SynTP\SynTPLpr.exe" = C:\Program Files\Synaptics\SynTP\SynTPLpr.exe:*:Enabled:ipsec -- (Synaptics, Inc.)
"C:\DOCUME~1\Errol\LOCALS~1\Temp\yfqxr.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\yfqxr.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winwcbi.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winwcbi.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\cdbkg.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\cdbkg.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\w2cb734.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\w2cb734.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winssueyq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winssueyq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\nvddvw.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\nvddvw.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\pvtps.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\pvtps.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\went.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\went.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wingowapn.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wingowapn.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winqydquf.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winqydquf.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winavopik.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winavopik.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winldvxe.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winldvxe.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winngeq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winngeq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winrpbis.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winrpbis.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\xorrjp.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\xorrjp.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winenbods.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winenbods.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winlovt.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winlovt.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winlejmkw.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winlejmkw.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\dyjgs.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\dyjgs.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\pirl.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\pirl.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wqwcn.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wqwcn.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winnxthmm.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winnxthmm.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winpdbb.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winpdbb.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\aivsl.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\aivsl.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winenkubk.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winenkubk.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winqqmtm.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winqqmtm.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ixdfr.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ixdfr.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\dddhr.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\dddhr.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winmejk.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winmejk.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winsqtw.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winsqtw.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winsopjf.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winsopjf.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winruevj.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winruevj.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winrteke.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winrteke.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winshbgig.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winshbgig.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winlnkm.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winlnkm.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\bykvo.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\bykvo.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winfaavrj.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winfaavrj.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winbjibpg.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winbjibpg.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\lcnadq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\lcnadq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winlnndx.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winlnndx.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\xxgpv.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\xxgpv.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winbqcjl.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winbqcjl.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\gfan.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\gfan.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\pcnjv.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\pcnjv.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\pbfuk.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\pbfuk.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winwjvc.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winwjvc.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winkalt.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winkalt.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\yoxd.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\yoxd.exe:*:Enabled:ipsec -- File not found
"C:\Program Files\Real\RealPlayer\RealPlay.exe" = C:\Program Files\Real\RealPlayer\RealPlay.exe:*:Enabled:ipsec -- (RealNetworks, Inc.)
"C:\DOCUME~1\Errol\LOCALS~1\Temp\cwxv.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\cwxv.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winlutkse.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winlutkse.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\xgtbud.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\xgtbud.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\w74e7b.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\w74e7b.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winicsmcs.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winicsmcs.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\uqnnwh.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\uqnnwh.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\segh.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\segh.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winkueco.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winkueco.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wwfotu.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wwfotu.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\hxrp.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\hxrp.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winicfyc.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winicfyc.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wingxofpw.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wingxofpw.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winjmaq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winjmaq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winrmlpx.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winrmlpx.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winopmy.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winopmy.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winwjsq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winwjsq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\rtgrbn.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\rtgrbn.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wincwdqdy.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wincwdqdy.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\pcqkes.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\pcqkes.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\mnma.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\mnma.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winvlri.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winvlri.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winrxvv.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winrxvv.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\jybc.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\jybc.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winjwwq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winjwwq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\nwbwg.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\nwbwg.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winxcdbql.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winxcdbql.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winfowuh.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winfowuh.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\brvvuc.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\brvvuc.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ewwct.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ewwct.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\alhk.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\alhk.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winkcjvta.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winkcjvta.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winiidh.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winiidh.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\awryet.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\awryet.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winobildw.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winobildw.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\gamuq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\gamuq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\windhdjx.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\windhdjx.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winmtxnq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winmtxnq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\pisoo.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\pisoo.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wineaeybi.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wineaeybi.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winncqg.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winncqg.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winyigmr.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winyigmr.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winriprxo.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winriprxo.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wincard.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wincard.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winsnmstq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winsnmstq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wdbum.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wdbum.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winnrjlwh.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winnrjlwh.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\mlcaqk.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\mlcaqk.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\rwtaw.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\rwtaw.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\aniqo.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\aniqo.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winwsqcy.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winwsqcy.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\oolu.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\oolu.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winjbafq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winjbafq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wdnf.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wdnf.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winoowwcq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winoowwcq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winsrve.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winsrve.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wgkru.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wgkru.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winstgkj.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winstgkj.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\fnbynh.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\fnbynh.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winyeaa.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winyeaa.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winqrwt.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winqrwt.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wintedwtr.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wintedwtr.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wineumm.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wineumm.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\tluvk.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\tluvk.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winesktyn.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winesktyn.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winjcdrh.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winjcdrh.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\windnuhq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\windnuhq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\gmhbed.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\gmhbed.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winmjasyr.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winmjasyr.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\fmfssc.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\fmfssc.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winwhkm.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winwhkm.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\trigl.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\trigl.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winjaoaa.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winjaoaa.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winsbgmcv.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winsbgmcv.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\yyfp.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\yyfp.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winuusg.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winuusg.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winiohgwf.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winiohgwf.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\xrhbpd.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\xrhbpd.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ldgh.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ldgh.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winhcjdol.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winhcjdol.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\xxdaun.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\xxdaun.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\mufya.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\mufya.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\lelx.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\lelx.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winudcwfi.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winudcwfi.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winmaamv.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winmaamv.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winliniqa.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winliniqa.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winital.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winital.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winuqnivl.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winuqnivl.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winyyqohj.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winyyqohj.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\alroiy.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\alroiy.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winigqpx.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winigqpx.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winchnk.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winchnk.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winadait.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winadait.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\rcucp.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\rcucp.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\qmclxo.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\qmclxo.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\qtjgeq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\qtjgeq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\egyn.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\egyn.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winlmvp.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winlmvp.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winjgubqx.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winjgubqx.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winhcstlm.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winhcstlm.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\windfkk.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\windfkk.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winaipfhg.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winaipfhg.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\hscdey.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\hscdey.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winwgigf.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winwgigf.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\iuijgx.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\iuijgx.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\bwyrod.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\bwyrod.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winhfijkd.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winhfijkd.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winihsc.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winihsc.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wineytqm.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wineytqm.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winoqord.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winoqord.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winyqur.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winyqur.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ftchqv.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ftchqv.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winbskv.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winbskv.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winvjxn.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winvjxn.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wintfrsxr.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wintfrsxr.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\mdik.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\mdik.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winvfuqe.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winvfuqe.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\konwy.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\konwy.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\duvboj.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\duvboj.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winybxs.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winybxs.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winbsljch.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winbsljch.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winnwdttd.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winnwdttd.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winnwtsy.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winnwtsy.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\teagrg.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\teagrg.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winxxnt.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winxxnt.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ymod.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ymod.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winlpkyk.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winlpkyk.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winjuvjos.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winjuvjos.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\gvilfl.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\gvilfl.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winegmpp.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winegmpp.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wgfo.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wgfo.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winqlird.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winqlird.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winoyuaq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winoyuaq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wincniigo.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wincniigo.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\vbtip.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\vbtip.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winiejnhi.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winiejnhi.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winsittbj.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winsittbj.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wincxoq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wincxoq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winhxcdih.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winhxcdih.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\sfyw.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\sfyw.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\dgosgx.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\dgosgx.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winmtvllw.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winmtvllw.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\bcba.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\bcba.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wintcvyg.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wintcvyg.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winxkvk.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winxkvk.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winciwql.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winciwql.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\alfb.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\alfb.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winaeiivk.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winaeiivk.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winhfchx.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winhfchx.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\apitkq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\apitkq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\pdylkd.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\pdylkd.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winrcwk.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winrcwk.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\vkeem.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\vkeem.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wintbws.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wintbws.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\sdmx.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\sdmx.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\duoer.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\duoer.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winujda.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winujda.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winpstia.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winpstia.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ojsn.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ojsn.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winufdtqr.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winufdtqr.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winxmbl.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winxmbl.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winylojo.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winylojo.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wbxo.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wbxo.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winwustg.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winwustg.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winlueu.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winlueu.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\nytb.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\nytb.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wintxdos.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wintxdos.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winsqqxqw.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winsqqxqw.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winkntucj.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winkntucj.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wingoivc.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wingoivc.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ukog.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ukog.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\drgitw.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\drgitw.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winbdalr.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winbdalr.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\kjvpi.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\kjvpi.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winxfnm.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winxfnm.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\pwyab.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\pwyab.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winbtsl.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winbtsl.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winrotnq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winrotnq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\reppm.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\reppm.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ltmmh.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ltmmh.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\vtfg.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\vtfg.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winiubooo.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winiubooo.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winwvgpo.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winwvgpo.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winarwk.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winarwk.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winfnlkkg.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winfnlkkg.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winrjloof.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winrjloof.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ynit.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ynit.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\vfsys.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\vfsys.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winxyjpp.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winxyjpp.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\muhpyf.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\muhpyf.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winsxgkh.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winsxgkh.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winlmjtf.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winlmjtf.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winokvq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winokvq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\tmwf.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\tmwf.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winjruqs.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winjruqs.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\auyrx.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\auyrx.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\cfjwom.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\cfjwom.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wintnwurr.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wintnwurr.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winvrkuks.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winvrkuks.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winefixde.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winefixde.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winyqgl.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winyqgl.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\yucp.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\yucp.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winfmngq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winfmngq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winciou.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winciou.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wintpfyv.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wintpfyv.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\exhoo.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\exhoo.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winvjamu.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winvjamu.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winetqmev.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winetqmev.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\qldhkl.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\qldhkl.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winrhts.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winrhts.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\irjqhh.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\irjqhh.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winomaql.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winomaql.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winvrjjkv.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winvrjjkv.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winumet.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winumet.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winludk.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winludk.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ccnfk.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ccnfk.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winlunrks.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winlunrks.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winforblj.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winforblj.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\iwjfjf.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\iwjfjf.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winpwset.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winpwset.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\xrjrme.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\xrjrme.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wintinxh.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wintinxh.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wingaacx.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wingaacx.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winlnns.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winlnns.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\rtxlt.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\rtxlt.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winiwuevs.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winiwuevs.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winfdscqo.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winfdscqo.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winnwlj.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winnwlj.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winiira.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winiira.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winxgoel.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winxgoel.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winmnvrvu.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winmnvrvu.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ablw.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ablw.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winpgqx.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winpgqx.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\lvxngk.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\lvxngk.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\windnlr.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\windnlr.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winsggahs.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winsggahs.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\dejgd.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\dejgd.exe:*:Enabled:ipsec -- File not found
"C:\Program Files\Cobian Backup 9\cbInterface.exe" = C:\Program Files\Cobian Backup 9\cbInterface.exe:*:Enabled:ipsec -- (Luis Cobian)
"C:\DOCUME~1\Errol\LOCALS~1\Temp\vcgh.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\vcgh.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\stnba.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\stnba.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\qqbp.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\qqbp.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\w4486f.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\w4486f.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wineswly.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wineswly.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wintbcdll.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wintbcdll.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winucjen.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winucjen.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winqiyfxi.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winqiyfxi.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winrdrrs.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winrdrrs.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\mijvu.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\mijvu.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wingatmv.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wingatmv.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\yglp.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\yglp.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\oiuq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\oiuq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\tcsxiq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\tcsxiq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winipgh.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winipgh.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wintauxkg.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wintauxkg.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winsoin.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winsoin.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winngmt.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winngmt.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winjamvk.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winjamvk.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wingqnbph.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wingqnbph.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\bbry.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\bbry.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winntwf.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winntwf.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\bwcmh.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\bwcmh.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\lrgqp.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\lrgqp.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winitjmjh.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winitjmjh.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winujax.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winujax.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winrqhw.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winrqhw.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ftkoie.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ftkoie.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\windtno.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\windtno.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\bteqj.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\bteqj.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winrrvcnn.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winrrvcnn.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winuere.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winuere.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wfevoe.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wfevoe.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\hegy.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\hegy.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\jiseim.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\jiseim.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winrtiued.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winrtiued.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ckrm.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ckrm.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wintjgodr.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wintjgodr.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\uyefrn.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\uyefrn.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\fugxix.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\fugxix.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\llrpm.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\llrpm.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winrpot.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winrpot.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winjmyl.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winjmyl.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winrkgicm.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winrkgicm.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winuifmxb.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winuifmxb.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winuddt.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winuddt.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\gsoyi.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\gsoyi.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\oqng.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\oqng.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winggyc.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winggyc.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winjrmn.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winjrmn.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\pels.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\pels.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\asvurp.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\asvurp.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winntxsja.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winntxsja.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\knca.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\knca.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\windqbspc.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\windqbspc.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winwumhn.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winwumhn.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wintvody.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wintvody.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winsiat.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winsiat.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\awpmdn.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\awpmdn.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\tsimq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\tsimq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\mytq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\mytq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\rismy.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\rismy.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\codhp.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\codhp.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\qpoq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\qpoq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\iapld.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\iapld.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winbvyte.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winbvyte.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\fdbbr.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\fdbbr.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\khexq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\khexq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winkblqqi.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winkblqqi.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winewdtbh.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winewdtbh.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winbxfysa.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winbxfysa.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winhemniu.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winhemniu.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winrpth.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winrpth.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\yucfp.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\yucfp.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winfdht.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winfdht.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winhcoqgt.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winhcoqgt.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\olmwao.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\olmwao.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winwstmks.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winwstmks.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wtbrb.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wtbrb.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\efvv.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\efvv.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wintjif.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wintjif.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\rrjsp.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\rrjsp.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\oahk.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\oahk.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\efur.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\efur.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\auqxs.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\auqxs.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winofuwhq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winofuwhq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\mdviy.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\mdviy.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\tuqc.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\tuqc.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\fppop.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\fppop.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\edsyr.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\edsyr.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\bjmy.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\bjmy.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\vsrjma.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\vsrjma.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winxdjgxu.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winxdjgxu.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winrwlqwl.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winrwlqwl.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ehqfw.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ehqfw.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\uiydb.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\uiydb.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winpvtq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winpvtq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winfifl.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winfifl.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winptab.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winptab.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\urml.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\urml.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winvshcd.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winvshcd.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winfygttf.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winfygttf.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winyont.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winyont.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winpfup.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winpfup.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\hnwq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\hnwq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winbmruwi.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winbmruwi.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winustywn.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winustywn.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\mogk.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\mogk.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winowco.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winowco.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\fwxpex.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\fwxpex.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winenckua.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winenckua.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\cfcfqs.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\cfcfqs.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\jmsuja.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\jmsuja.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winnxgnlc.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winnxgnlc.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wincclnah.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wincclnah.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ucjiv.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ucjiv.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ktuje.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ktuje.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winnpocgh.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winnpocgh.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wincklh.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wincklh.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\dblhcj.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\dblhcj.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\lyjrce.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\lyjrce.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winbmkl.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winbmkl.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\dtrb.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\dtrb.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winmcbpn.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winmcbpn.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\jpbk.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\jpbk.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\dmdbt.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\dmdbt.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\bbygu.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\bbygu.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ovtfci.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ovtfci.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wintucjw.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wintucjw.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\jyenr.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\jyenr.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\xxhx.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\xxhx.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\xlayha.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\xlayha.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winfkfum.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winfkfum.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winffhj.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winffhj.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\lfcd.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\lfcd.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\windsxyj.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\windsxyj.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wincpqud.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wincpqud.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winmugik.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winmugik.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\lcbwgm.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\lcbwgm.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\hrbrhg.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\hrbrhg.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\fddp.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\fddp.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winomact.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winomact.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\rvgqct.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\rvgqct.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winhlha.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winhlha.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\dvpjp.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\dvpjp.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winhviogy.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winhviogy.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\kldfm.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\kldfm.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\rotr.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\rotr.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\imml.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\imml.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\keqh.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\keqh.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\qrdyo.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\qrdyo.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winvbmt.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winvbmt.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winlofi.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winlofi.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winccqg.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winccqg.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\esrb.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\esrb.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winlyaf.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winlyaf.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winqvgt.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winqvgt.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winambxg.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winambxg.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\usofb.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\usofb.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winnvdb.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winnvdb.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ijhy.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ijhy.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winnwmg.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winnwmg.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\lwwrc.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\lwwrc.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\pafqug.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\pafqug.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winjfou.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winjfou.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\kytkqc.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\kytkqc.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winnuqusv.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winnuqusv.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winolma.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winolma.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winqthvij.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winqthvij.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wincukmal.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wincukmal.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winwqqgdl.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winwqqgdl.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\asky.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\asky.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\clig.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\clig.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\yfpylp.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\yfpylp.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winmbjal.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winmbjal.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\windumkak.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\windumkak.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\windqviuq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\windqviuq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\crux.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\crux.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\windhsf.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\windhsf.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winiwfayl.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winiwfayl.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winpjcs.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winpjcs.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\erhuf.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\erhuf.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winyrah.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winyrah.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winwlenyt.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winwlenyt.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winogxy.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winogxy.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ntwb.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ntwb.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\stlj.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\stlj.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\jngmwq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\jngmwq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winfmjo.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winfmjo.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\mqou.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\mqou.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winpwkgj.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winpwkgj.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wintons.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wintons.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winrokek.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winrokek.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winoams.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winoams.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ubbao.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ubbao.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winitepy.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winitepy.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winrvpf.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winrvpf.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\qrotpd.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\qrotpd.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winnwjsru.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winnwjsru.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\jkog.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\jkog.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winieagjc.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winieagjc.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winilna.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winilna.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winrrtit.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winrrtit.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\windmqx.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\windmqx.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ndyff.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ndyff.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winkyonlk.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winkyonlk.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winfwis.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winfwis.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\lskd.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\lskd.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\fthnxq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\fthnxq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winvopj.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winvopj.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\xaou.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\xaou.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\eevi.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\eevi.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winnonh.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winnonh.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winljfy.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winljfy.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\nbitt.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\nbitt.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winfcbltl.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winfcbltl.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ouece.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ouece.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winiumq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winiumq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\rfypw.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\rfypw.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\gdwk.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\gdwk.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winjnuyar.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winjnuyar.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\gcfc.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\gcfc.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winvwnt.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winvwnt.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winhdud.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winhdud.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winncxfpw.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winncxfpw.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wingbrvr.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wingbrvr.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winqrlaef.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winqrlaef.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winhpxhya.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winhpxhya.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winspbswb.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winspbswb.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winloaudm.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winloaudm.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wininkh.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wininkh.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winjkpl.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winjkpl.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winvvawi.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winvvawi.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winxwixhh.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winxwixhh.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\hlxq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\hlxq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\gfeyix.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\gfeyix.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ieng.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ieng.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winpihbg.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winpihbg.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winpokmyv.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winpokmyv.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\bcnwi.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\bcnwi.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winfiai.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winfiai.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winjfum.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winjfum.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wingmhm.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wingmhm.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winqajcg.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winqajcg.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winpgcclx.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winpgcclx.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\soogk.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\soogk.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winxnsm.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winxnsm.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winulfgo.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winulfgo.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ltlg.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ltlg.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\jlakb.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\jlakb.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\cpvfw.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\cpvfw.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winmttwid.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winmttwid.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\jtgdr.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\jtgdr.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\jedr.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\jedr.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\nuyfma.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\nuyfma.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winnuhur.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winnuhur.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winjunfdu.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winjunfdu.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\yadcis.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\yadcis.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winfmliy.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winfmliy.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wwkfd.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wwkfd.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winxexjnn.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winxexjnn.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winmyxeju.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winmyxeju.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\dkwrgr.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\dkwrgr.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wingjsb.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wingjsb.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\epkek.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\epkek.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\vpqke.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\vpqke.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\dafl.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\dafl.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winmgojv.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winmgojv.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wintsstji.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wintsstji.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winslsii.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winslsii.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\xxqhl.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\xxqhl.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\rwnkk.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\rwnkk.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winsllds.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winsllds.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wintbbtjm.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wintbbtjm.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ioyimm.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ioyimm.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winjulkr.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winjulkr.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winepqtju.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winepqtju.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\fsvad.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\fsvad.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winmlhfx.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winmlhfx.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\aqvdei.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\aqvdei.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\vtdvh.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\vtdvh.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winglkam.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winglkam.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\emccsq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\emccsq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winjxscj.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winjxscj.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winyhhtq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winyhhtq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winhbjsq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winhbjsq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winmovo.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winmovo.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winicbd.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winicbd.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\gilwns.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\gilwns.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winhyviw.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winhyviw.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winjspbb.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winjspbb.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\lpisa.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\lpisa.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winrmnd.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winrmnd.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winttex.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winttex.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\txqtyn.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\txqtyn.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wincrfltc.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wincrfltc.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winpwmf.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winpwmf.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winujjjnr.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winujjjnr.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winyrvaa.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winyrvaa.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winyfbet.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winyfbet.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wineldms.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wineldms.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\xfyy.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\xfyy.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winisfnn.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winisfnn.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winixtega.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winixtega.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wintevva.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wintevva.exe:*:Enabled:ipsec -- ()
"C:\DOCUME~1\Errol\LOCALS~1\Temp\spbx.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\spbx.exe:*:Enabled:ipsec -- ()
"C:\DOCUME~1\Errol\LOCALS~1\Temp\windedyd.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\windedyd.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\w4c000.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\w4c000.exe:*:Enabled:ipsec -- ()
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winlgjsi.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winlgjsi.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winurnsw.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winurnsw.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\eryocd.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\eryocd.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wintgglo.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wintgglo.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winogrkh.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winogrkh.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ayhbd.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ayhbd.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\nvyvq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\nvyvq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winwdhe.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winwdhe.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winwphhpo.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winwphhpo.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winmvsgkm.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winmvsgkm.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wsxcg.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wsxcg.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\windhqsp.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\windhqsp.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ikailo.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ikailo.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\xbpl.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\xbpl.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\lvhe.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\lvhe.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winagwuuk.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winagwuuk.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winjrfrq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winjrfrq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\xkmdet.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\xkmdet.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winrrdr.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winrrdr.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winmaup.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winmaup.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\upntmf.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\upntmf.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\xeakas.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\xeakas.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wingybbdx.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wingybbdx.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winjgrio.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winjgrio.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\nwfywl.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\nwfywl.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\nnpw.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\nnpw.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winpnrj.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winpnrj.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winwfpnad.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winwfpnad.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\tdpgg.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\tdpgg.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\qcqej.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\qcqej.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winhqxri.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winhqxri.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winpwyoe.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winpwyoe.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\gksje.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\gksje.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\buixa.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\buixa.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winvuomq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winvuomq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ysfh.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ysfh.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\gpxmt.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\gpxmt.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\windexlf.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\windexlf.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winilor.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winilor.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\naga.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\naga.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winfxnt.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winfxnt.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\hghxc.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\hghxc.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winvrdrs.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winvrdrs.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\bmvaw.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\bmvaw.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\ccgrx.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\ccgrx.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winwgghl.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winwgghl.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\oivlak.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\oivlak.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wineakve.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wineakve.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winmfmxv.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winmfmxv.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winhnky.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winhnky.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\efscj.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\efscj.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wineoupnf.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wineoupnf.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\irpvce.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\irpvce.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winmqijr.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winmqijr.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winygtb.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winygtb.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winiesxq.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winiesxq.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winygnlo.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winygnlo.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wingqab.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wingqab.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winjjeib.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winjjeib.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winuoawy.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winuoawy.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winpotjnb.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winpotjnb.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wingsjl.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wingsjl.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\qkkxbv.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\qkkxbv.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\wintslr.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\wintslr.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\windlfk.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\windlfk.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winusktwu.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winusktwu.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winodkwy.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winodkwy.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\maku.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\maku.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\knpw.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\knpw.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winlbgnn.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winlbgnn.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winafkqgo.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winafkqgo.exe:*:Enabled:ipsec -- File not found
"C:\DOCUME~1\Errol\LOCALS~1\Temp\winhiftk.exe" = C:\DOCUME~1\Errol\LOCALS~1\Temp\winhiftk.exe:*:Enabled:ipsec -- File not found


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00000409-78E1-11D2-B60F-006097C998E7}" = Microsoft Office 2000 SR-1 Premium
"{00120409-78E1-11D2-B60F-006097C998E7}" = Microsoft FrontPage 2000
"{00203668-8170-44A0-BE44-B632FA4D780F}" = Adobe AIR
"{01C0CB1D-FF49-43F1-ADC5-65F05DB7BDD1}" = ATI Catalyst Control Center
"{0C34B801-6AEC-4667-B053-03A67E2D0415}" = Apple Application Support
"{124F7FC1-C498-472F-A315-8F80786F497B}" = TRACE 700
"{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter
"{14C76057-E495-47E1-BDF0-1A1CC1752ADF}" = ExtraPutty 0.22
"{15377C3E-9655-400F-B441-E69F0A6BEAFE}" = Recovery Software Suite Gateway
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = DVD Solution
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{3248F0A8-6813-11D6-A77B-00B0D0150020}" = J2SE Runtime Environment 5.0 Update 2
"{3448514D-177F-4677-AE49-0DC4D28D1F84}" = BlackBerry Device Software v4.5.0 for the BlackBerry 8700 smartphone
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3C5EA394-1033-11D2-A2CB-00C04F72F31D}" = Microsoft PhotoDraw 2000 V2
"{3EE33958-7381-4E7B-A4F3-6E43098E9E9C}" = Browser Address Error Redirector
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go 4.0
"{5D95AD35-368F-47D5-B63A-A082DDF00111}" = Microsoft Digital Image Starter Edition 2006 Editor
"{5FF4A578-4588-4ACF-8317-7191FC45F3E1}" = TaxCut California 2007
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{691F4068-81BF-49E3-B32E-FE3E16400111}" = Microsoft Digital Image Starter Edition 2006 Library
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6D52C408-B09A-4520-9B18-475B81D393F1}" = Microsoft Works
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{767CC44C-9BBC-438D-BAD3-FD4595DD148B}" = VC80CRTRedist - 8.0.50727.762
"{77DCDCE3-2DED-62F3-8154-05E745472D07}" = Acrobat.com
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7B6CF9EB-CB2B-4A1A-81A9-BE1A9044690A}" = TIPCI
"{7D564241-C246-4C34-A7E5-918C7D4E892D}" = BlackBerry Desktop Software 4.2.1
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8DCE550C-CA43-4E82-92DF-FFC4A48F5BE1}" = Napster Burn Engine
"{91120409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Standard Edition 2003
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9941F0AA-B903-4AF4-A055-83A9815CC011}" = Sonic Encoders
"{9A97D672-6C93-4DFA-B527-DE005A761495}" = Video Stream Driver for Panasonic DVC
"{9F7FC79B-3059-4264-9450-39EB368E3225}" = Microsoft Digital Image Library 9 - Blocker
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A429C2AE-EBF1-4F81-A221-1C115CAADDAD}" = QuickTime
"{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}" = SigmaTel Audio
"{A96E97134CA649888820BCDE5E300BBD}" = H.264 Decoder
"{AAC389499AEF40428987B3D30CFC76C9}" = MKV Splitter
"{AC76BA86-7AD7-1033-7B44-A91000000001}" = Adobe Reader 9.1.3
"{AC76BA86-7AD7-5760-0000-900000000003}" = Japanese Fonts Support For Adobe Reader 9
"{AEF9DC35ADDF4825B049ACBFD1C6EB37}" = AAC Decoder
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B3E2E350-3B2C-443A-A812-EECBC8B7074D}" = Psychrometric + Duct Calculator
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C19AB6C4-BBD0-49EF-927D-9C7CB80BC0B0}" = MapleStory
"{C43048A9-742C-4DAD-90D2-E3B53C9DB825}" = Logitech QuickCam Software
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CF9A795B-2E4A-42D3-A4C4-333D5BF39350}" = TaxCut Premium + State + Efile 2007
"{D1DDE912-03B9-4C1C-A7EB-C60693820E18}" = REALTEK RTL8187 Wireless LAN Driver and Utility
"{E4CDA01A-3922-414C-B618-E44E01B05B1B}" = TRACE 700 vr6.0
"{FD056785-F890-47CE-922C-CE985D5ADBEF}" = eQUEST 3.6
"53F13DB4D9611FD63BE580F06F0729BF236ABE68" = Windows Driver Package - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"All ATI Software" = ATI - Software Uninstall Utility
"ATI Display Driver" = ATI Display Driver
"BlackBerry_{7D564241-C246-4C34-A7E5-918C7D4E892D}" = BlackBerry Desktop Software 4.2.1
"Broadcom 802.11b Network Adapter" = Broadcom 802.11 Network Adapter
"CobBackup9" = Cobian Backup 9
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"DivX Content Uploader" = DivX Content Uploader
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"EnergyPlus Version 2.2" = EnergyPlus Version 2.2
"EPSON Printer and Utilities" = EPSON Printer Software
"ExpressBurn" = Express Burn
"FLV Player" = FLV Player 2.0, build 23
"Gateway Game Console" = Gateway Game Console
"GOM Player" = GOM Player
"gtw_logo" = gtw_logo
"HijackThis" = HijackThis 2.0.2
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"InstallShield_{7B6CF9EB-CB2B-4A1A-81A9-BE1A9044690A}" = Texas Instruments PCIxx21/x515/xx12 drivers.
"InstallShield_{9A97D672-6C93-4DFA-B527-DE005A761495}" = Video Stream Driver for Panasonic DVC
"iSafer" = iSafer
"Mabinogi" = Mabinogi
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Money2006b" = Microsoft Money 2006
"Mozilla Firefox (3.5.2)" = Mozilla Firefox (3.5.2)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"Pdf995" = Pdf995 (installed by TaxCut)
"PdfEdit995" = PdfEdit995 (installed by TaxCut)
"PictureItSuiteTrial_v11" = Microsoft Digital Image Starter Edition 2006
"Prism" = Prism Video Converter
"QcDrv" = Logitech® Camera Driver
"RadialpointClientGateway_is1" = Verizon Servicepoint 1.5.12
"RealPlayer 6.0" = RealPlayer Basic
"SMSERIAL" = Motorola SM56 Data Fax Modem
"Switch" = Switch Sound File Converter
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"TaxCut Premium 2006" = TaxCut Premium 2006
"Verizon High Speed Internet_is1" = Verizon High Speed Internet
"Verizon Online Help and Support" = Verizon Online Help and Support
"ViewpointMediaPlayer" = Viewpoint Media Player
"vol_toolbar" = Verizon Broadband Toolbar
"WavePad" = WavePad Sound Editor
"WGA" = Windows Genuine Advantage Validation Tool
"WildTangent CDA" = WildTangent Web Driver
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR archiver
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"WT010646" = Bejeweled 2 Deluxe
"WT010647" = Blackhawk Striker 2
"WT010648" = Blasterball 2 Revolution
"WT010649" = Diner Dash
"WT010650" = FATE
"WT010651" = Penguins!
"WT010654" = SCRABBLE
"WT010655" = Tradewinds
"WT010660" = Polar Bowler
"WT010661" = Polar Golfer
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"Yahoo! Customizations" = Yahoo! Browser Services
"Yahoo! Internet Mail" = Yahoo! Internet Mail
"Yahoo! Messenger" = Yahoo! Messenger
"Yahoo! Search Defender" = Yahoo! Search Protection
"Yahoo! Software Update" = Yahoo! Software Update
"YInstHelper" = Yahoo! Install Manager

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-2938928222-1630305472-4010317165-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"BitTorrent" = BitTorrent
"BitTorrent DNA" = DNA
"Warcraft III" = Warcraft III: All Products

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 11/23/2008 6:09:06 PM | Computer Name = ROMMEL | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 7.0.6000.16735, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 11/23/2008 6:09:06 PM | Computer Name = ROMMEL | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 7.0.6000.16735, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 11/23/2008 8:13:10 PM | Computer Name = ROMMEL | Source = MsiInstaller | ID = 11706
Description = Product: Microsoft Office 2000 SR-1 Premium -- Error 1706. No valid
source could be found for product Microsoft Office 2000 SR-1 Premium. The Windows
installer cannot continue.

Error - 11/30/2008 3:14:45 PM | Computer Name = ROMMEL | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 7.0.6000.16735, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

[ System Events ]
Error - 9/15/2009 10:42:19 PM | Computer Name = ROMMEL | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.1.46 for the Network Card with network
address 00E0B8BA76A2 has been denied by the DHCP server 192.168.10.1 (The DHCP Server
sent a DHCPNACK message).

Error - 9/16/2009 3:29:48 PM | Computer Name = ROMMEL | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.10.5 for the Network Card with network
address 00E0B8BA76A2 has been denied by the DHCP server 192.168.1.1 (The DHCP Server
sent a DHCPNACK message).

Error - 9/16/2009 11:15:46 PM | Computer Name = ROMMEL | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.1.46 for the Network Card with network
address 00E0B8BA76A2 has been denied by the DHCP server 192.168.10.1 (The DHCP Server
sent a DHCPNACK message).

Error - 9/17/2009 3:38:31 PM | Computer Name = ROMMEL | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.10.5 for the Network Card with network
address 00E0B8BA76A2 has been denied by the DHCP server 192.168.1.1 (The DHCP Server
sent a DHCPNACK message).

Error - 9/18/2009 12:27:46 AM | Computer Name = ROMMEL | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.1.46 for the Network Card with network
address 00E0B8BA76A2 has been denied by the DHCP server 192.168.10.1 (The DHCP Server
sent a DHCPNACK message).

Error - 9/18/2009 3:17:08 AM | Computer Name = ROMMEL | Source = Service Control Manager | ID = 7016
Description = The BrSplService service has reported an invalid current state 0.

Error - 9/18/2009 4:15:09 PM | Computer Name = ROMMEL | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.10.5 for the Network Card with network
address 00E0B8BA76A2 has been denied by the DHCP server 192.168.1.1 (The DHCP Server
sent a DHCPNACK message).

Error - 9/18/2009 9:11:33 PM | Computer Name = ROMMEL | Source = DCOM | ID = 10010
Description = The server {FBA44040-BD27-4A09-ACC8-C08B7C723DCD} did not register
with DCOM within the required timeout.

Error - 9/19/2009 4:33:04 AM | Computer Name = ROMMEL | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.1.46 for the Network Card with network
address 00E0B8BA76A2 has been denied by the DHCP server 192.168.10.1 (The DHCP Server
sent a DHCPNACK message).

Error - 9/19/2009 3:21:39 PM | Computer Name = ROMMEL | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.10.5 for the Network Card with network
address 00E0B8BA76A2 has been denied by the DHCP server 192.168.1.1 (The DHCP Server
sent a DHCPNACK message).


< End of report >



Ran AFT Cleaner and cleaned everything out
BMW ///MNSTR!!

#7 m0le

m0le

    Can U Dig It?


  • Malware Response Team
  • 34,527 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:09:36 PM

Posted 19 September 2009 - 08:34 PM

Hi E_Rok,

Now those temp files have been killed let's remove the malware itself.

Please download ComboFix from one of these locations:* IMPORTANT !!! Save ComboFix.exe to your Desktop but rename it Combo-Fix.exe
  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. (Click on this link to see a list of programs that should be disabled. The list is not all inclusive.)
  • Double click on Combo-Fix.exe & follow the prompts.
  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Posted Image


Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

Posted Image


Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.



Following that please run MBAM


Please download Posted Image Malwarebytes Anti-Malware and save it to your desktop.
  • Make sure you are connected to the Internet.
  • Double-click on mbam-setup.exe to install the application or, if you are using Vista, right-click and select Run As Administrator on mbam-setup.exe to install the application.
  • When the installation begins, follow the prompts and do not make any changes to default settings.
  • When installation has finished, make sure you leave both of these checked:
    • Update Malwarebytes' Anti-Malware
    • Launch Malwarebytes' Anti-Malware
  • Then click Finish.
  • MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.
  • On the Scanner tab:
    • Make sure the "Perform Full Scan" option is selected.
    • Then click on the Scan button.
  • If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
  • The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
  • When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  • Click OK to close the message box and continue with the removal process.
  • Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked, and click Remove Selected.
  • When removal is completed, a log report will open in Notepad.
  • The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  • Copy and paste the contents of that report in your next reply and exit MBAM.
Note: If MBAM encounters a file that is difficult to remove, you may be asked to reboot your computer so it can proceed with the disinfection process. Regardless if prompted to restart the computer or not, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware. MBAM may make changes to your registry as part of its disinfection routine. If you're using other security programs that detect registry changes, they may alert you after scanning with MBAM. Please permit the program to allow the changes.

Let me know also how the PC is behaving after these two tools have run.

Thanks :(
Posted Image
m0le is a proud member of UNITE

#8 E_Rok

E_Rok
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:02:36 PM

Posted 20 September 2009 - 05:11 PM

Alrighty heres what I got



Combo-Fix log:


ComboFix 09-09-18.02 - Errol 09/20/2009 1:28.2.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.894.477 [GMT -7:00]
Running from: c:\documents and settings\Errol\Desktop\Combo-Fix.exe.exe
.
The following files were disabled during the run:
c:\program files\iSafer\PSMFireW.dll


((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\Installer\616048.msi
c:\windows\wpd99.drv

.
((((((((((((((((((((((((( Files Created from 2009-08-20 to 2009-09-20 )))))))))))))))))))))))))))))))
.

2009-09-19 10:15 . 2009-09-19 10:16 -------- d-----r- C:\My Pictures 2009-09-19 03;15;39
2009-09-19 09:50 . 2009-09-19 10:15 -------- d-----r- C:\My Music 2009-09-19 02;50;03
2009-09-15 02:53 . 2009-09-15 02:53 -------- d-----w- c:\program files\Common Files\Apple
2009-09-15 02:52 . 2009-09-15 02:52 -------- d-----w- c:\program files\QuickTime
2009-09-15 02:52 . 2009-09-15 02:52 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple Computer
2009-09-14 10:10 . 2009-09-14 10:10 -------- d-----r- C:\My Pictures 2009-09-14 03;10;20
2009-09-14 09:50 . 2009-09-14 10:10 -------- d-----r- C:\My Music 2009-09-14 02;50;04
2009-09-13 09:42 . 2009-09-13 09:42 -------- d-----w- c:\windows\system32\wbem\Repository
2009-09-04 10:11 . 2009-09-04 10:11 -------- d-----r- C:\My Pictures 2009-09-04 03;11;04
2009-09-03 10:10 . 2009-09-03 10:11 -------- d-----r- C:\My Pictures 2009-09-03 03;10;31
2009-09-03 07:38 . 2009-09-03 07:38 -------- d-----w- c:\program files\AhnLab
2009-09-03 07:38 . 2009-09-03 07:38 -------- d-----w- c:\documents and settings\Errol\AppData
2009-09-02 10:13 . 2009-09-02 10:14 -------- d-----r- C:\My Pictures 2009-09-02 03;13;53
2009-09-02 04:03 . 2008-04-14 00:12 82432 ---h-tw- c:\windows\system32\fc67e66.dll
2009-09-01 09:49 . 2009-09-01 09:49 1032 ----a-w- C:\cbSetup.dat
2009-09-01 09:48 . 2009-09-01 09:48 -------- d-----w- c:\program files\Cobian Backup 9
2009-08-31 04:36 . 2009-08-31 04:36 -------- d-----w- c:\documents and settings\Errol\Application Data\Malwarebytes
2009-08-31 04:36 . 2009-08-03 20:36 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-08-31 04:36 . 2009-08-31 04:44 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-08-31 04:36 . 2009-08-31 04:36 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-08-31 04:36 . 2009-08-03 20:36 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-08-31 03:17 . 2009-09-01 19:44 -------- d-----w- c:\documents and settings\Errol\Local Settings\Application Data\AskToolbar
2009-08-31 03:15 . 2009-08-31 03:15 -------- d-----w- c:\program files\Ask.com
2009-08-31 03:15 . 2009-08-31 03:19 -------- d-----w- c:\program files\PFConfig
2009-08-30 10:23 . 2009-08-30 10:23 -------- d-----w- c:\program files\Trend Micro
2009-08-30 09:14 . 2009-08-30 09:14 -------- d-sh--w- c:\documents and settings\Owner.Rommel\UserData
2009-08-30 09:14 . 2009-08-30 09:14 -------- d-----w- c:\documents and settings\Owner.Rommel\WINDOWS
2009-08-29 02:19 . 2009-08-29 02:19 -------- d-----w- c:\documents and settings\Errol\Local Settings\Application Data\SupportSoft
2009-08-29 02:19 . 2009-08-29 02:39 -------- d-----w- c:\windows\DSL
2009-08-21 23:16 . 2009-08-21 23:17 -------- d-----w- C:\9d936133d938bbd7e044c9dd7f47
2009-08-21 23:15 . 2009-08-21 23:31 -------- d-----w- c:\windows\SxsCaPendDel
2009-08-21 22:00 . 2009-08-21 22:00 -------- d-sh--w- c:\documents and settings\Errol\PrivacIE

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-20 08:27 . 2009-05-29 04:22 -------- d-----w- c:\documents and settings\Errol\Application Data\DNA
2009-09-20 08:26 . 2009-06-19 06:40 -------- d-----w- c:\program files\iSafer
2009-09-20 08:17 . 2009-05-29 04:22 -------- d-----w- c:\program files\DNA
2009-09-08 06:10 . 2009-02-05 22:56 -------- d-----w- c:\program files\Warcraft III
2009-09-05 08:19 . 2009-03-04 03:41 -------- d-----w- c:\documents and settings\All Users\Application Data\PMB Files
2009-09-02 18:51 . 2009-05-08 06:28 256 ----a-w- c:\windows\system32\pool.bin
2009-08-29 02:19 . 2007-10-02 23:30 -------- d-----w- c:\program files\Verizon
2009-08-21 23:33 . 2006-06-19 04:25 67656 -c--a-w- c:\documents and settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-08-10 17:45 . 2006-12-07 01:53 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-08-05 09:01 . 2006-06-17 09:23 204800 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-04 22:45 . 2009-08-04 22:02 77265 ----a-w- c:\windows\War3Unin.dat
2009-08-04 22:15 . 2009-08-04 22:02 2829 ----a-w- c:\windows\War3Unin.pif
2009-08-04 22:15 . 2009-08-04 22:02 139264 ----a-w- c:\windows\War3Unin.exe
2009-07-17 19:01 . 2006-06-17 09:23 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-14 06:43 . 2006-06-17 09:24 286208 ----a-w- c:\windows\system32\wmpdxm.dll
2009-07-03 17:09 . 2006-06-17 09:23 915456 ----a-w- c:\windows\system32\wininet.dll
2009-06-25 08:25 . 2006-06-17 09:23 54272 ----a-w- c:\windows\system32\wdigest.dll
2009-06-25 08:25 . 2006-06-17 09:23 56832 ----a-w- c:\windows\system32\secur32.dll
2009-06-25 08:25 . 2006-06-17 09:23 147456 ----a-w- c:\windows\system32\schannel.dll
2009-06-25 08:25 . 2006-06-17 09:23 730112 ----a-w- c:\windows\system32\lsasrv.dll
2009-06-25 08:25 . 2006-06-17 09:23 301568 ----a-w- c:\windows\system32\kerberos.dll
2009-06-25 08:25 . 2006-06-17 09:23 136192 ----a-w- c:\windows\system32\msv1_0.dll
2009-06-24 11:18 . 2006-06-17 09:23 92928 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

((((((((((((((((((((((((((((( SnapShot@2009-08-17_23.54.17 )))))))))))))))))))))))))))))))))))))))))
.
+ 2007-01-29 08:58 . 2009-07-14 11:03 46080 c:\windows\system32\tzchange.exe
+ 2008-07-30 04:10 . 2008-07-30 04:10 26112 c:\windows\system32\TsWpfWrp.exe
+ 2009-05-29 05:24 . 2008-07-06 12:06 89088 c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
+ 2008-07-30 02:59 . 2008-07-30 02:59 43544 c:\windows\system32\PresentationHostProxy.dll
+ 2006-06-17 09:23 . 2009-09-08 02:50 71462 c:\windows\system32\perfc009.dat
+ 2008-07-25 18:17 . 2008-07-25 18:17 15360 c:\windows\system32\mui\0409\mscorees.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 15360 c:\windows\system32\mui\0409\mscorees.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 83968 c:\windows\system32\mscories.dll
+ 2008-07-30 02:24 . 2008-07-30 02:24 97800 c:\windows\system32\infocardapi.dll
+ 2008-07-30 02:24 . 2008-07-30 02:24 11264 c:\windows\system32\icardres.dll
+ 2006-01-17 19:50 . 2006-01-17 19:50 61952 c:\windows\system32\execryptorvb.dll
+ 2008-07-30 04:10 . 2008-07-30 04:10 73720 c:\windows\system32\dxva2.dll
+ 2006-10-14 23:43 . 2008-07-06 12:06 89088 c:\windows\system32\dllcache\filterpipelineprintproc.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 96760 c:\windows\system32\dfshim.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 96760 c:\windows\system32\dfshim.dll
+ 2008-07-30 06:40 . 2008-07-30 06:40 70648 c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
+ 2008-07-30 06:40 . 2008-07-30 06:40 91136 c:\windows\Microsoft.NET\Framework\v3.5\MSBuild.exe
+ 2008-07-30 06:40 . 2008-07-30 06:40 41984 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.VisualC.STLCLR.dll
+ 2008-07-30 06:40 . 2008-07-30 06:40 40960 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Data.Entity.Build.Tasks.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 89080 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.2052.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 92664 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1042.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 95224 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1041.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 89592 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1028.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 84480 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.2052.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 94720 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1042.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 97792 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1041.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 84992 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1028.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 97280 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\DeleteTemp.exe
+ 2008-07-30 06:40 . 2008-07-30 06:40 95224 c:\windows\Microsoft.NET\Framework\v3.5\EdmGen.exe
+ 2008-07-30 06:40 . 2008-07-30 06:40 78856 c:\windows\Microsoft.NET\Framework\v3.5\DataSvcUtil.exe
+ 2008-07-30 06:40 . 2008-07-30 06:40 41984 c:\windows\Microsoft.NET\Framework\v3.5\AddInUtil.exe
+ 2008-07-30 06:40 . 2008-07-30 06:40 41992 c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess32.exe
+ 2008-07-30 06:40 . 2008-07-30 06:40 41992 c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess.exe
+ 2008-07-30 04:10 . 2008-07-30 04:10 46104 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
- 2006-10-21 04:21 . 2006-10-21 04:21 32768 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationCFFRasterizer.dll
+ 2008-07-30 02:59 . 2008-07-30 02:59 32768 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationCFFRasterizer.dll
+ 2008-07-30 04:10 . 2008-07-30 04:10 71160 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PenIMC.dll
+ 2008-07-30 02:32 . 2008-07-30 02:32 17448 c:\windows\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\PerformanceCounterInstaller.exe
+ 2008-07-30 02:16 . 2008-07-30 02:16 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
+ 2008-07-30 02:16 . 2008-07-30 02:16 73728 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.Install.dll
+ 2008-07-30 02:16 . 2008-07-30 02:16 20504 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceMonikerSupport.dll
+ 2008-07-30 02:16 . 2008-07-30 02:16 11280 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelEvents.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 37896 c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 37896 c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 81400 c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
- 2007-10-24 08:47 . 2007-10-24 08:47 81400 c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
+ 2008-07-25 18:17 . 2008-07-25 18:17 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 57392 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 57392 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 95232 c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 95232 c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 16896 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 16896 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 61952 c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 61952 c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
+ 2008-07-25 18:17 . 2008-07-25 18:17 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
+ 2008-07-25 18:17 . 2008-07-25 18:17 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
+ 2008-07-25 18:17 . 2008-07-25 18:17 88584 c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 24584 c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 24584 c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 31744 c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 31744 c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 19456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 19456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 18944 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 18944 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 77312 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 77312 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 94208 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 94208 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 46592 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 83456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 83456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
+ 2008-07-25 18:16 . 2008-07-25 18:16 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
+ 2008-07-25 18:16 . 2008-07-25 18:16 97792 c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 97792 c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 65032 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 65032 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
+ 2008-07-25 18:17 . 2008-07-25 18:17 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
+ 2008-07-25 18:17 . 2008-07-25 18:17 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 18936 c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 18936 c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 62968 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 35320 c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
+ 2008-07-25 18:16 . 2008-07-25 18:16 35320 c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
+ 2008-07-25 18:17 . 2008-07-25 18:17 69120 c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 69120 c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 27136 c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 27136 c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 80376 c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
+ 2008-07-25 18:16 . 2008-07-25 18:16 80376 c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
+ 2008-07-25 18:17 . 2008-07-25 18:17 89608 c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
+ 2008-11-25 11:59 . 2008-11-25 11:59 31560 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2008-07-25 18:16 . 2008-07-25 18:16 34312 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
+ 2008-07-25 18:16 . 2008-07-25 18:16 33288 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 24576 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
+ 2008-07-25 18:16 . 2008-07-25 18:16 24576 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 84480 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 84480 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 33800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 17416 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 22024 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 22024 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
+ 2008-07-25 18:17 . 2008-07-25 18:17 58880 c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
+ 2008-07-25 18:16 . 2008-07-25 18:16 98808 c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 13824 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 13824 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 96768 c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 16896 c:\windows\Microsoft.NET\Framework\SharedReg12.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 16896 c:\windows\Microsoft.NET\Framework\SharedReg12.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 16896 c:\windows\Microsoft.NET\Framework\sbscmp10.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 16896 c:\windows\Microsoft.NET\Framework\sbscmp10.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 82944 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 82944 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
+ 2008-07-30 04:07 . 2008-07-30 04:07 23040 c:\windows\Installer\f5a6e2.msp
+ 2009-08-21 23:14 . 2009-08-21 23:14 88576 c:\windows\Installer\effdee.msi
+ 2009-08-31 03:15 . 2009-08-31 03:15 40960 c:\windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}\ARPPRODUCTICON.exe
+ 2009-08-21 23:16 . 2008-07-06 12:06 89088 c:\windows\Driver Cache\i386\filterpipelineprintproc.dll
+ 2008-12-17 01:15 . 2008-12-17 01:15 70952 c:\windows\Downloaded Program Files\sprthelper.exe
+ 2009-08-21 23:30 . 2009-08-21 23:30 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\a715aa442ef87ae99b3ade185599249d\UIAutomationProvider.ni.dll
+ 2009-08-22 00:50 . 2009-08-22 00:50 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\423f794d1f4ed6e120fbb02e436491cb\System.Windows.Presentation.ni.dll
+ 2009-08-22 00:50 . 2009-08-22 00:50 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\19ca1747c1ea18a3b639b302bca8df93\System.Web.DynamicData.Design.ni.dll
+ 2009-08-22 00:49 . 2009-08-22 00:49 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\532438e2acfcadc469a4d468c51f8451\System.ComponentModel.DataAnnotations.ni.dll
+ 2009-08-22 00:49 . 2009-08-22 00:49 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\597b20e1b053d6a510cfe033c07a63e6\System.AddIn.Contract.ni.dll
+ 2009-08-21 23:33 . 2009-08-21 23:33 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\2d7408a0232f2e2efd0d7adf5dfa733a\PresentationFontCache.ni.exe
+ 2009-08-21 23:29 . 2009-08-21 23:29 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\c8fd2d9233f8ea3031fb16f697635231\PresentationCFFRasterizer.ni.dll
+ 2009-08-22 00:50 . 2009-08-22 00:50 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\790cf1edb17ee41b59be62ecbd59613b\Microsoft.Vsa.ni.dll
+ 2009-08-21 23:30 . 2009-08-21 23:30 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\ec83ec80653eb20ccc6ed42075c90aee\Microsoft.VisualC.ni.dll
+ 2009-08-21 23:29 . 2009-08-21 23:29 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e9aba2eab90d647356f65e66053da02b\Microsoft.Build.Framework.ni.dll
+ 2009-08-22 00:48 . 2009-08-22 00:48 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\28343d470d992f169ca0e7cdb3cc3117\Microsoft.Build.Framework.ni.dll
+ 2009-08-22 00:48 . 2009-08-22 00:48 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\f4e38208e88cb4cc314a1d6543b9fcc6\dfsvc.ni.exe
+ 2009-08-21 23:33 . 2009-08-21 23:33 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\11eb4f6606ba01e5128805759121ea6c\Accessibility.ni.dll
+ 2009-08-21 23:17 . 2009-08-21 23:17 94208 c:\windows\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
+ 2009-08-21 23:17 . 2009-08-21 23:17 98304 c:\windows\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
+ 2009-08-21 23:17 . 2009-08-21 23:17 40960 c:\windows\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
+ 2009-08-21 23:20 . 2009-08-21 23:20 12288 c:\windows\assembly\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561934e089\System.Windows.Presentation.dll
+ 2009-08-21 23:20 . 2009-08-21 23:20 61440 c:\windows\assembly\GAC_MSIL\System.Web.Routing\3.5.0.0__31bf3856ad364e35\System.Web.Routing.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2009-08-21 23:20 . 2009-08-21 23:20 32768 c:\windows\assembly\GAC_MSIL\System.Web.DynamicData.Design\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
+ 2009-08-21 23:20 . 2009-08-21 23:20 77824 c:\windows\assembly\GAC_MSIL\System.Web.Abstractions\3.5.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
+ 2009-08-21 23:17 . 2009-08-21 23:17 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
+ 2009-08-21 23:17 . 2009-08-21 23:17 73728 c:\windows\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceModel.Install.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2008-04-12 02:39 . 2008-04-12 02:39 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2009-08-21 23:20 . 2009-08-21 23:20 53248 c:\windows\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
- 2008-04-12 02:39 . 2008-04-12 02:39 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2009-08-21 23:25 . 2009-08-21 23:25 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2009-08-21 23:20 . 2009-08-21 23:20 57344 c:\windows\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\3.5.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2009-08-21 23:20 . 2009-08-21 23:20 45056 c:\windows\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
+ 2009-08-21 23:17 . 2009-08-21 23:17 46104 c:\windows\assembly\GAC_MSIL\PresentationFontCache\3.0.0.0__31bf3856ad364e35\PresentationFontCache.exe
- 2009-05-29 05:25 . 2009-05-29 05:25 32768 c:\windows\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRasterizer.dll
+ 2009-08-21 23:17 . 2009-08-21 23:17 32768 c:\windows\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRasterizer.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2008-04-12 02:39 . 2008-04-12 02:39 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2008-04-12 02:39 . 2008-04-12 02:39 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2009-08-21 23:19 . 2009-08-21 23:19 41984 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2008-04-12 02:39 . 2008-04-12 02:39 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2008-04-12 02:39 . 2008-04-12 02:39 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2009-08-21 23:19 . 2009-08-21 23:19 94208 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v3.5.dll
+ 2009-08-21 23:19 . 2009-08-21 23:19 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2008-04-12 02:39 . 2008-04-12 02:39 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2008-04-12 02:39 . 2008-04-12 02:39 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2008-04-12 02:39 . 2008-04-12 02:39 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2008-04-12 02:38 . 2008-04-12 02:38 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2008-04-12 02:39 . 2008-04-12 02:39 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2008-04-12 02:39 . 2008-04-12 02:39 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2008-10-20 23:41 . 2008-10-20 23:41 77824 c:\windows\assembly\GAC\SonicMCEBurnEngine\0.9.0.0__17c52700e9a64fd0\SonicMCEBurnEngine.dll
+ 2009-09-14 01:23 . 2009-09-14 01:23 77824 c:\windows\assembly\GAC\SonicMCEBurnEngine\0.9.0.0__17c52700e9a64fd0\SonicMCEBurnEngine.dll
+ 2009-09-14 01:23 . 2009-09-14 01:23 45056 c:\windows\assembly\GAC\Microsoft.MediaCenter\6.0.3100.0__31bf3856ad364e35\Microsoft.MediaCenter.dll
- 2008-10-20 23:41 . 2008-10-20 23:41 45056 c:\windows\assembly\GAC\Microsoft.MediaCenter\6.0.3100.0__31bf3856ad364e35\Microsoft.MediaCenter.dll
- 2008-10-20 23:41 . 2008-10-20 23:41 53248 c:\windows\assembly\GAC\ehiWUapi\6.0.3000.0__31bf3856ad364e35\ehiWUapi.dll
+ 2009-09-14 01:23 . 2009-09-14 01:23 53248 c:\windows\assembly\GAC\ehiWUapi\6.0.3000.0__31bf3856ad364e35\ehiWUapi.dll
+ 2009-09-14 01:23 . 2009-09-14 01:23 18944 c:\windows\assembly\GAC\ehiUserXp\6.0.3000.0__31bf3856ad364e35\ehiuserxp.dll
- 2008-10-20 23:41 . 2008-10-20 23:41 18944 c:\windows\assembly\GAC\ehiUserXp\6.0.3000.0__31bf3856ad364e35\ehiuserxp.dll
+ 2009-09-14 01:23 . 2009-09-14 01:23 73728 c:\windows\assembly\GAC\ehiExtens\6.0.3000.0__31bf3856ad364e35\ehiExtens.dll
- 2008-10-20 23:41 . 2008-10-20 23:41 73728 c:\windows\assembly\GAC\ehiExtens\6.0.3000.0__31bf3856ad364e35\ehiExtens.dll
- 2008-04-12 02:39 . 2008-04-12 02:39 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2008-07-30 06:40 . 2008-07-30 06:40 5632 c:\windows\Microsoft.NET\Framework\v3.5\Sentinel.v3.5Client.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 7168 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 7168 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 5632 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 5632 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 6656 c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 6656 c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 8192 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 8192 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 9728 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 9728 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
+ 2008-07-25 18:16 . 2008-07-25 18:16 5120 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 5120 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
+ 2009-08-21 23:20 . 2009-08-21 23:20 5632 c:\windows\assembly\GAC_MSIL\Sentinel.v3.5Client\3.5.0.0__b03f5f7f11d50a3a\Sentinel.v3.5Client.dll
- 2008-04-12 02:39 . 2008-04-12 02:39 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2008-04-12 02:38 . 2008-04-12 02:38 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2009-08-21 23:25 . 2009-08-21 23:25 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2008-04-12 02:39 . 2008-04-12 02:39 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
- 2008-04-12 02:39 . 2008-04-12 02:39 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
- 2008-10-20 23:41 . 2008-10-20 23:41 8192 c:\windows\assembly\GAC\ehiExtCOM\6.0.3000.0__31bf3856ad364e35\ehiExtCOM.dll
+ 2009-09-14 01:23 . 2009-09-14 01:23 8192 c:\windows\assembly\GAC\ehiExtCOM\6.0.3000.0__31bf3856ad364e35\ehiExtCOM.dll
- 2008-04-12 02:39 . 2008-04-12 02:39 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- 2008-04-12 02:39 . 2008-04-12 02:39 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2007-11-07 09:19 . 2007-11-07 09:19 655872 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcr90.dll
+ 2007-11-07 09:19 . 2007-11-07 09:19 568832 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcp90.dll
+ 2007-11-07 04:23 . 2007-11-07 04:23 224768 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcm90.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 635904 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcr80.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 558080 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcp80.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcm80.dll
+ 2008-07-30 04:26 . 2008-07-30 04:26 301568 c:\windows\system32\XPSViewer\XPSViewer.exe
+ 2006-10-15 03:21 . 2008-07-06 12:06 575488 c:\windows\system32\xpsshhdr.dll
+ 2008-07-30 02:59 . 2008-07-30 02:59 161296 c:\windows\system32\UIAutomationCore.dll
+ 2009-05-29 05:24 . 2008-07-06 12:06 765440 c:\windows\system32\spool\XPSEP\i386\mxdwdrv.dll
+ 2009-05-29 05:24 . 2008-07-06 12:06 765440 c:\windows\system32\spool\XPSEP\i386\i386\mxdwdrv.dll
+ 2009-05-29 05:24 . 2008-07-06 12:06 748032 c:\windows\system32\spool\XPSEP\amd64\mxdwdrv.dll
+ 2009-05-29 05:24 . 2008-07-06 12:06 748032 c:\windows\system32\spool\XPSEP\amd64\amd64\mxdwdrv.dll
+ 2009-05-29 05:24 . 2008-07-06 12:06 147456 c:\windows\system32\spool\prtprocs\x64\filterpipelineprintproc.dll
+ 2006-10-14 23:44 . 2008-07-06 10:50 597504 c:\windows\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe
- 2009-02-13 08:11 . 2007-05-15 09:08 761344 c:\windows\system32\spool\drivers\w32x86\3\UNIRES.DLL
+ 2009-02-13 08:11 . 2008-03-13 04:52 761344 c:\windows\system32\spool\drivers\w32x86\3\unires.dll
+ 2009-02-13 08:11 . 2008-07-06 12:06 744960 c:\windows\system32\spool\drivers\w32x86\3\unidrvui.dll
+ 2009-02-13 08:11 . 2008-07-06 12:06 373248 c:\windows\system32\spool\drivers\w32x86\3\unidrv.dll
- 2009-02-13 08:11 . 2008-04-14 01:12 373248 c:\windows\system32\spool\drivers\w32x86\3\UNIDRV.DLL
+ 2006-10-14 23:42 . 2008-07-06 12:06 198656 c:\windows\system32\spool\drivers\w32x86\3\mxdwdui.dll
+ 2006-10-14 23:43 . 2008-07-06 12:06 765440 c:\windows\system32\spool\drivers\w32x86\3\mxdwdrv.dll
+ 2006-10-14 23:43 . 2008-07-06 12:06 117760 c:\windows\system32\prntvpt.dll
+ 2008-07-30 02:59 . 2008-07-30 02:59 781344 c:\windows\system32\PresentationNative_v0300.dll
+ 2008-07-30 03:35 . 2008-07-30 03:35 326160 c:\windows\system32\PresentationHost.exe
+ 2008-07-30 02:59 . 2008-07-30 02:59 105016 c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
+ 2006-06-17 09:23 . 2009-09-08 02:50 441692 c:\windows\system32\perfh009.dat
+ 2008-07-25 18:16 . 2008-07-25 18:16 158720 c:\windows\system32\mscorier.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 158720 c:\windows\system32\mscorier.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 282112 c:\windows\system32\mscoree.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 282112 c:\windows\system32\mscoree.dll
+ 2009-02-03 02:15 . 2009-02-03 02:15 314272 c:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
+ 2006-06-17 09:23 . 2009-06-22 06:44 726528 c:\windows\system32\jscript.dll
- 2006-06-17 09:23 . 2009-03-08 11:33 726528 c:\windows\system32\jscript.dll
+ 2006-06-17 09:23 . 2009-03-08 11:33 726528 c:\windows\system32\jscript(2).dll
+ 2008-07-30 02:24 . 2008-07-30 02:24 622080 c:\windows\system32\icardagt.exe
+ 2006-06-17 02:30 . 2009-08-21 23:31 238832 c:\windows\system32\FNTCACHE.DAT
- 2006-06-17 02:30 . 2009-06-10 18:29 238832 c:\windows\system32\FNTCACHE.DAT
+ 2008-07-30 04:10 . 2008-07-30 04:10 493048 c:\windows\system32\evr.dll
+ 2006-10-15 03:21 . 2008-07-06 12:06 575488 c:\windows\system32\dllcache\xpsshhdr.dll
- 2006-06-17 09:38 . 2008-04-14 00:12 153088 c:\windows\system32\dllcache\triedit.dll
+ 2006-06-17 09:38 . 2009-06-21 21:44 153088 c:\windows\system32\dllcache\triedit.dll
+ 2006-10-14 23:44 . 2008-07-06 10:50 597504 c:\windows\system32\dllcache\printfilterpipelinesvc.exe
- 2008-05-09 10:53 . 2009-03-08 11:33 726528 c:\windows\system32\dllcache\jscript.dll
+ 2008-05-09 10:53 . 2009-06-22 06:44 726528 c:\windows\system32\dllcache\jscript.dll
+ 2008-10-16 00:25 . 2008-04-13 18:53 635904 c:\windows\network diagnostic\xpnetdiag.exe
+ 2008-07-30 06:40 . 2008-07-30 06:40 265736 c:\windows\Microsoft.NET\Framework\v3.5\WFServicesReg.exe
+ 2008-07-30 06:40 . 2008-07-30 06:40 802816 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Build.Tasks.v3.5.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 984056 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapUI.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 107512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 111096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.3082.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 110072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.2070.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1055.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 105976 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1053.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 107000 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1049.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 107512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1046.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 109048 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1045.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1044.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1043.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 110072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1040.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 111096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1038.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 101368 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1037.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 112120 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1036.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1035.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 113656 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1032.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 111608 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1031.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1030.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1029.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 102904 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1025.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 689152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vsscenario.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 413184 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vsbasereqs.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 632320 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs70uimgr.dll
+ 2009-08-21 23:19 . 2009-08-21 23:19 652800 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs_setup.msi
+ 2008-07-30 01:47 . 2008-07-30 01:47 110080 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 131584 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.3082.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 131072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.2070.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 121344 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1055.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 121344 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1053.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 123904 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1049.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 122880 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1046.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 128512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1045.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 121856 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1044.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 129024 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1043.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 128512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1040.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 132096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1038.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 111104 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1037.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 133120 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1036.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 122368 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1035.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 137728 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1032.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 130048 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1031.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 126464 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1030.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 125440 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1029.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 113152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1025.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 269304 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
+ 2008-07-30 01:47 . 2008-07-30 01:47 177152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\HtmlLite.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 276984 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\dlmgr.dll
+ 2008-07-30 06:15 . 2008-07-30 06:15 225490 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\baseline.dat
+ 2008-07-30 06:40 . 2008-07-30 06:40 233976 c:\windows\Microsoft.NET\Framework\v3.5\1033\vbc7ui.dll
+ 2008-07-30 06:40 . 2008-07-30 06:40 168448 c:\windows\Microsoft.NET\Framework\v3.5\1033\cscompui.dll
+ 2008-07-30 03:35 . 2008-07-30 03:35 864256 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationUI.dll
+ 2008-07-30 02:59 . 2008-07-30 02:59 132120 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
+ 2008-07-30 02:16 . 2008-07-30 02:16 152576 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\WsatConfig.exe
+ 2008-07-30 02:16 . 2008-07-30 02:16 966656 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
+ 2008-07-30 02:16 . 2008-07-30 02:16 132096 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
+ 2008-07-30 02:16 . 2008-07-30 02:16 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
+ 2008-07-30 02:16 . 2008-07-30 02:16 156688 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelReg.exe
+ 2008-07-30 02:16 . 2008-07-30 02:16 163840 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.Dtc.dll
+ 2008-07-30 02:16 . 2008-07-30 02:16 397312 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.dll
+ 2008-07-30 02:24 . 2008-07-30 02:24 881664 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
+ 2008-07-30 02:16 . 2008-07-30 02:16 168968 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ComSvcConfig.exe
+ 2008-11-25 11:59 . 2008-11-25 11:59 436040 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 839680 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 839680 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 835584 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 261632 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 114688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 114688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 131072 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 131072 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 303104 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 113664 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 113664 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 626688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 188416 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 188416 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 401408 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 401408 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 970752 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 745472 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
+ 2008-11-25 11:59 . 2008-11-25 11:59 486400 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 425984 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 425984 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 392184 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 118784 c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 143360 c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 100856 c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
+ 2008-07-25 18:17 . 2008-07-25 18:17 230912 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 345600 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 114176 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
+ 2008-11-25 11:59 . 2008-11-25 11:59 364872 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 308224 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 308224 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
+ 2008-11-25 11:59 . 2008-11-25 11:59 990032 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 659456 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 749568 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 749568 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 655360 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 655360 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 348160 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 348160 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 230904 c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
+ 2008-07-25 18:17 . 2008-07-25 18:17 230904 c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
+ 2008-07-25 18:17 . 2008-07-25 18:17 798224 c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 798224 c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 575496 c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 507904 c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 507904 c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 147968 c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 147968 c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 218112 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 218112 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 193016 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 193016 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 145408 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 145408 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
+ 2008-12-13 16:58 . 2008-12-13 16:58 754688 c:\windows\Installer\f81061.msp
+ 2009-08-21 23:20 . 2009-08-21 23:20 648192 c:\windows\Installer\f8103b.msi
+ 2008-07-30 04:23 . 2008-07-30 04:23 250880 c:\windows\Installer\f5a6eb.msp
+ 2008-07-30 04:28 . 2008-07-30 04:28 278016 c:\windows\Installer\f5a6e9.msp
+ 2008-07-30 02:40 . 2008-07-30 02:40 291840 c:\windows\Installer\f5a6e7.msp
+ 2009-08-21 23:18 . 2009-08-21 23:18 137728 c:\windows\Installer\f5a6e1.msi
+ 2008-07-30 00:35 . 2008-07-30 00:35 553472 c:\windows\Installer\effdf3.msp
+ 2008-07-30 00:33 . 2008-07-30 00:33 506368 c:\windows\Installer\effdf1.msp
+ 2008-07-30 00:37 . 2008-07-30 00:37 911360 c:\windows\Installer\effdf0.msp
+ 2009-09-05 09:26 . 2009-09-05 09:26 551936 c:\windows\Installer\600c417.msi
+ 2009-09-15 02:53 . 2009-09-15 02:53 694272 c:\windows\Installer\5785bd4.msi
+ 2009-03-20 18:48 . 2009-03-20 18:48 183808 c:\windows\Installer\2a7c8.msp
+ 2009-09-13 10:09 . 2008-07-08 13:02 382840 c:\windows\ie8updates\KB971961-IE8\spuninst\updspapi.dll
+ 2009-09-13 10:09 . 2008-07-08 13:02 231288 c:\windows\ie8updates\KB971961-IE8\spuninst\spuninst.exe
+ 2009-09-13 10:09 . 2009-03-08 11:33 726528 c:\windows\ie8updates\KB971961-IE8\jscript.dll
+ 2006-06-17 09:36 . 2009-08-18 17:55 179712 c:\windows\ehome\ehkeyctl.dll
+ 2009-08-29 02:19 . 2009-08-29 02:39 741146 c:\windows\DSL\unins000.exe
+ 2009-08-29 02:19 . 2009-08-29 02:39 416848 c:\windows\DSL\unins000.dat
+ 2009-08-21 23:16 . 2008-03-13 04:52 761344 c:\windows\Driver Cache\i386\unires.dll
+ 2009-08-21 23:16 . 2008-07-06 12:06 744960 c:\windows\Driver Cache\i386\unidrvui.dll
+ 2009-08-21 23:16 . 2008-07-06 12:06 373248 c:\windows\Driver Cache\i386\unidrv.dll
+ 2009-08-21 23:16 . 2008-07-06 12:06 198656 c:\windows\Driver Cache\i386\mxdwdui.dll
+ 2009-08-21 23:16 . 2008-07-06 12:06 765440 c:\windows\Driver Cache\i386\mxdwdrv.dll
+ 2008-12-17 01:15 . 2008-12-17 01:15 296320 c:\windows\Downloaded Program Files\tgctlcm.dll
+ 2009-08-22 00:48 . 2009-08-22 00:48 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\2ef5bc3a2edd7570bb23886a4f32294a\WsatConfig.ni.exe
+ 2009-08-21 23:37 . 2009-08-21 23:37 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\6a818099f0386e2356ae94f886a2196f\WindowsFormsIntegration.ni.dll
+ 2009-08-21 23:30 . 2009-08-21 23:30 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\a6d9503962d47c722231c1478f180695\UIAutomationTypes.ni.dll
+ 2009-08-21 23:36 . 2009-08-21 23:36 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\5c028c3d8db6c0f0277673ea4a2d89fb\UIAutomationClient.ni.dll
+ 2009-08-22 00:51 . 2009-08-22 00:51 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\c338a470b14851ce5987bb0f0869c310\System.Xml.Linq.ni.dll
+ 2009-08-22 00:50 . 2009-08-22 00:50 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\bb77ea11f46ab438b2b7ed7c180011a1\System.Web.Routing.ni.dll
+ 2009-08-21 23:36 . 2009-08-21 23:36 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\6ee255220d90dcbe80c990e443051cc5\System.Web.RegularExpressions.ni.dll
+ 2009-08-22 00:50 . 2009-08-22 00:50 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\58f62044fa702ea6f936071aa5520baa\System.Web.Extensions.Design.ni.dll
+ 2009-08-22 00:50 . 2009-08-22 00:50 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\79c29ac85dd57dd485ab60118ac292ff\System.Web.Entity.ni.dll
+ 2009-08-22 00:50 . 2009-08-22 00:50 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\d3d65e34fa60f0b6c72ca0d12ec89933\System.Web.Entity.Design.ni.dll
+ 2009-08-22 00:50 . 2009-08-22 00:50 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\b7891f5659db299dbd1b3c72db7edb9f\System.Web.DynamicData.ni.dll
+ 2009-08-22 00:50 . 2009-08-22 00:50 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\00ec08741a765c707bd9169346064a81\System.Web.Abstractions.ni.dll
+ 2009-08-21 23:35 . 2009-08-21 23:35 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\5a555c9ae6984c40157cf940bb519f7c\System.Transactions.ni.dll
+ 2009-08-21 23:36 . 2009-08-21 23:36 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\ea3366939280c1715f1c620e33ee3c8a\System.ServiceProcess.ni.dll
+ 2009-08-21 23:28 . 2009-08-21 23:28 676352 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\1c8df2da33222c048d683017f2095f04\System.Security.ni.dll
+ 2009-08-21 23:33 . 2009-08-21 23:33 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\bfd6e16d8c3589cd2bd3f8d46f0a5402\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2009-08-21 23:35 . 2009-08-21 23:35 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\2abd876a3c8a6b088fa6d8d39d901e3c\System.Runtime.Remoting.ni.dll
+ 2009-08-22 00:50 . 2009-08-22 00:50 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\519d9c618341b136f9b963ffb7495308\System.Net.ni.dll
+ 2009-08-22 00:51 . 2009-08-22 00:51 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\f48e3419fb2cb012fd160ae801600ae7\System.Messaging.ni.dll
+ 2009-08-22 00:50 . 2009-08-22 00:50 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\8642fdfbf02a6cb6f01169fe6fdb5d11\System.Management.ni.dll
+ 2009-08-22 00:50 . 2009-08-22 00:50 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\1d3fbbd23ce1e8637ef4f40a8d23cd32\System.Management.Instrumentation.ni.dll
+ 2009-08-21 23:56 . 2009-08-21 23:56 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\7c367a96b10d626ec8cbf8149272d845\System.IO.Log.ni.dll
+ 2009-08-21 23:56 . 2009-08-21 23:56 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\68e71147704ef0d34d9a4bece7767fc5\System.IdentityModel.Selectors.ni.dll
+ 2009-08-21 23:35 . 2009-08-21 23:35 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\4267bd908175603006c6c90bb5d900c7\System.EnterpriseServices.Wrapper.dll
+ 2009-08-21 23:35 . 2009-08-21 23:35 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\4267bd908175603006c6c90bb5d900c7\System.EnterpriseServices.ni.dll
+ 2009-08-21 23:36 . 2009-08-21 23:36 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\18bbe2b6717e7f1d1dd672526e9889ee\System.Drawing.Design.ni.dll
+ 2009-08-21 23:36 . 2009-08-21 23:36 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\c434a07332ce490711c27fd0edb7562f\System.DirectoryServices.Protocols.ni.dll
+ 2009-08-22 00:50 . 2009-08-22 00:50 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\8b3bb7a2c2f3ffe94c866283f1cd5957\System.DirectoryServices.AccountManagement.ni.dll
+ 2009-08-22 00:50 . 2009-08-22 00:50 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\a4b887f476fa4b8746a93a9fc2208560\System.Data.Services.Client.ni.dll
+ 2009-08-22 00:50 . 2009-08-22 00:50 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\1cf3acad6553d6c59df576794f4e8bd6\System.Data.Services.Design.ni.dll
+ 2009-08-22 00:50 . 2009-08-22 00:50 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\392de34573f9f8ec885714f2f3e7f07f\System.Data.Entity.Design.ni.dll
+ 2009-08-22 00:49 . 2009-08-22 00:49 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\1db495ff00bbd14df4af6680c4de0653\System.Data.DataSetExtensions.ni.dll
+ 2009-08-21 23:28 . 2009-08-21 23:28 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\b82c00e2d24305ad6cb08556e3779b75\System.Configuration.ni.dll
+ 2009-08-21 23:36 . 2009-08-21 23:36 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\de514e484e49b04b016949d57ffac03e\System.Configuration.Install.ni.dll
+ 2009-08-22 00:49 . 2009-08-22 00:49 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\ce984d754e3c0b6be4504b785cc43574\System.AddIn.ni.dll
+ 2009-08-21 23:36 . 2009-08-21 23:36 232448 c:\windows\assembly\NativeImages_v2.0.50727_32\sysglobl\45067d0793a09d3431d26bfa55c5a76a\sysglobl.ni.dll
+ 2009-08-22 00:48 . 2009-08-22 00:48 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\045dd501b7257b1cc26083538ae69045\SMSvcHost.ni.exe
+ 2009-08-22 00:48 . 2009-08-22 00:48 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\9790551187e294b4ed3aaa1c221891c7\SMDiagnostics.ni.dll
+ 2009-08-22 00:48 . 2009-08-22 00:48 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\10a0c9707876fc1f65e64b811a28b020\ServiceModelReg.ni.exe
+ 2009-08-21 23:36 . 2009-08-21 23:36 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\f475294d8c7dc2dd4febeef27bc0417e\PresentationFramework.Classic.ni.dll
+ 2009-08-21 23:36 . 2009-08-21 23:36 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8003abaf6bcf70f7eb620d06837e897b\PresentationFramework.Luna.ni.dll
+ 2009-08-21 23:36 . 2009-08-21 23:36 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\59a67874d8d8475faa5be1d993083d12\PresentationFramework.Aero.ni.dll
+ 2009-08-21 23:36 . 2009-08-21 23:36 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2c980c9a5051d723c6ec2a78a3d0e2b3\PresentationFramework.Royale.ni.dll
+ 2009-08-22 00:48 . 2009-08-22 00:48 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\6d38e317128608bc4516ea46ab94590e\MSBuild.ni.exe
+ 2009-08-22 00:48 . 2009-08-22 00:48 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\1820d6a012fc0e16c3e1d29d973cd2d0\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2009-08-21 23:29 . 2009-08-21 23:29 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\55b9eff9e23359faed4351386c062238\Microsoft.Build.Utilities.ni.dll
+ 2009-08-22 00:49 . 2009-08-22 00:49 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\4217124db1ea5de5f1a1f3eea75e8d32\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2009-08-22 00:49 . 2009-08-22 00:49 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\96825c34d7e1f7df1923ff2123bed8da\Microsoft.Build.Engine.ni.dll
+ 2009-08-22 00:49 . 2009-08-22 00:49 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\9b321ebf67587237f576df6104a32588\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2009-08-22 00:49 . 2009-08-22 00:49 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\9bea05938bee3555c5aa8763d89a68f9\CustomMarshalers.ni.dll
+ 2009-08-22 00:48 . 2009-08-22 00:48 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\12629e2f3e315459bee67cbbaac85cb2\ComSvcConfig.ni.exe
+ 2009-08-22 00:48 . 2009-08-22 00:48 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\b5b2feadc3943e3976daebc0bcd2b5e2\AspNetMMCExt.ni.dll
+ 2009-08-21 23:17 . 2009-08-21 23:17 385024 c:\windows\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
+ 2009-08-21 23:17 . 2009-08-21 23:17 167936 c:\windows\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
+ 2009-08-21 23:20 . 2009-08-21 23:20 139264 c:\windows\assembly\GAC_MSIL\System.Xml.Linq\3.5.0.0__b77a5c561934e089\System.Xml.Linq.dll
+ 2009-08-21 23:19 . 2009-08-21 23:19 507904 c:\windows\assembly\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364e35\System.WorkflowServices.dll
+ 2009-08-21 23:17 . 2009-08-21 23:17 540672 c:\windows\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2008-04-12 02:38 . 2008-04-12 02:38 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2009-08-21 23:20 . 2009-08-21 23:20 335872 c:\windows\assembly\GAC_MSIL\System.Web.Extensions.Design\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
+ 2009-08-21 23:27 . 2009-08-21 23:27 139264 c:\windows\assembly\GAC_MSIL\System.Web.Entity\3.5.0.0__b77a5c561934e089\System.Web.Entity.dll
+ 2009-08-21 23:20 . 2009-08-21 23:20 131072 c:\windows\assembly\GAC_MSIL\System.Web.Entity.Design\3.5.0.0__b77a5c561934e089\System.Web.Entity.Design.dll
+ 2009-08-21 23:27 . 2009-08-21 23:27 229376 c:\windows\assembly\GAC_MSIL\System.Web.DynamicData\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.dll
- 2009-05-29 05:26 . 2009-05-29 05:26 688128 c:\windows\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35\System.Speech.dll
+ 2009-08-21 23:17 . 2009-08-21 23:17 688128 c:\windows\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35\System.Speech.dll
- 2008-04-12 02:38 . 2008-04-12 02:38 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2009-08-21 23:19 . 2009-08-21 23:19 569344 c:\windows\assembly\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
- 2008-04-12 02:38 . 2008-04-12 02:38 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2009-08-21 23:17 . 2009-08-21 23:17 966656 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2008-04-12 02:39 . 2008-04-12 02:39 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2009-08-21 23:20 . 2009-08-21 23:20 233472 c:\windows\assembly\GAC_MSIL\System.Net\3.5.0.0__b03f5f7f11d50a3a\System.Net.dll
- 2008-04-12 02:39 . 2008-04-12 02:39 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2008-04-12 02:39 . 2008-04-12 02:39 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2009-08-21 23:20 . 2009-08-21 23:20 143360 c:\windows\assembly\GAC_MSIL\System.Management.Instrumentation\3.5.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
- 2009-05-29 05:25 . 2009-05-29 05:25 131072 c:\windows\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
+ 2009-08-21 23:17 . 2009-08-21 23:17 131072 c:\windows\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
+ 2009-08-21 23:17 . 2009-08-21 23:17 430080 c:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
- 2009-05-29 05:25 . 2009-05-29 05:25 126976 c:\windows\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
+ 2009-08-21 23:18 . 2009-08-21 23:18 126976 c:\windows\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2008-04-12 02:38 . 2008-04-12 02:38 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2008-04-12 02:39 . 2008-04-12 02:39 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2009-08-21 23:19 . 2009-08-21 23:19 286720 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\3.5.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
+ 2009-08-21 23:25 . 2009-08-21 23:25 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2009-08-21 23:25 . 2009-08-21 23:25 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2009-08-21 23:27 . 2009-08-21 23:27 442368 c:\windows\assembly\GAC_MSIL\System.Data.Services\3.5.0.0__b77a5c561934e089\System.Data.Services.dll
+ 2009-08-21 23:19 . 2009-08-21 23:19 114688 c:\windows\assembly\GAC_MSIL\System.Data.Services.Design\3.5.0.0__b77a5c561934e089\System.Data.Services.Design.dll
+ 2009-08-21 23:27 . 2009-08-21 23:27 294912 c:\windows\assembly\GAC_MSIL\System.Data.Services.Client\3.5.0.0__b77a5c561934e089\System.Data.Services.Client.dll
+ 2009-08-21 23:19 . 2009-08-21 23:19 684032 c:\windows\assembly\GAC_MSIL\System.Data.Linq\3.5.0.0__b77a5c561934e089\System.Data.Linq.dll
+ 2009-08-21 23:20 . 2009-08-21 23:20 229376 c:\windows\assembly\GAC_MSIL\System.Data.Entity.Design\3.5.0.0__b77a5c561934e089\System.Data.Entity.Design.dll
+ 2009-08-21 23:20 . 2009-08-21 23:20 667648 c:\windows\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\System.Core.dll
- 2008-04-12 02:38 . 2008-04-12 02:38 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2009-08-21 23:25 . 2009-08-21 23:25 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2009-08-21 23:20 . 2009-08-21 23:20 163840 c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll
+ 2009-08-21 23:25 . 2009-08-21 23:25 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2008-04-12 02:39 . 2008-04-12 02:39 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2009-08-21 23:17 . 2009-08-21 23:17 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
+ 2009-08-21 23:17 . 2009-08-21 23:17 528384 c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
- 2009-05-29 05:26 . 2009-05-29 05:26 528384 c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
+ 2009-08-21 23:18 . 2009-08-21 23:18 864256 c:\windows\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\PresentationUI.dll
+ 2009-08-21 23:17 . 2009-08-21 23:17 163840 c:\windows\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
+ 2009-08-21 23:17 . 2009-08-21 23:17 397312 c:\windows\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
+ 2009-08-21 23:17 . 2009-08-21 23:17 139264 c:\windows\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
+ 2009-08-21 23:17 . 2009-08-21 23:17 196608 c:\windows\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
+ 2009-08-21 23:17 . 2009-08-21 23:17 598016 c:\windows\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2008-04-12 02:39 . 2008-04-12 02:39 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2008-04-12 02:39 . 2008-04-12 02:39 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2009-08-21 23:17 . 2009-08-21 23:17 397312 c:\windows\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2008-04-12 02:39 . 2008-04-12 02:39 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2008-04-12 02:39 . 2008-04-12 02:39 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2009-08-21 23:19 . 2009-08-21 23:19 802816 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v3.5.dll
+ 2009-08-21 23:19 . 2009-08-21 23:19 733184 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2008-04-12 02:39 . 2008-04-12 02:39 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2009-08-21 23:19 . 2009-08-21 23:19 106496 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v3.5.dll
- 2008-04-12 02:38 . 2008-04-12 02:38 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2009-08-21 23:17 . 2009-08-21 23:17 368640 c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2008-04-12 02:39 . 2008-04-12 02:39 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2008-04-12 02:39 . 2008-04-12 02:39 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2009-08-21 23:25 . 2009-08-21 23:25 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2009-08-21 23:17 . 2009-08-21 23:17 163840 c:\windows\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2009-09-14 01:23 . 2009-09-14 01:23 389120 c:\windows\assembly\GAC\ehRecObj\6.0.3000.0__31bf3856ad364e35\ehRecObj.dll
- 2008-10-20 23:41 . 2008-10-20 23:41 389120 c:\windows\assembly\GAC\ehRecObj\6.0.3000.0__31bf3856ad364e35\ehRecObj.dll
+ 2009-09-14 01:23 . 2009-09-14 01:23 122880 c:\windows\assembly\GAC\ehiwmp\6.0.3000.0__31bf3856ad364e35\ehiwmp.dll
- 2008-10-20 23:41 . 2008-10-20 23:41 122880 c:\windows\assembly\GAC\ehiwmp\6.0.3000.0__31bf3856ad364e35\ehiwmp.dll
+ 2009-09-14 01:23 . 2009-09-14 01:23 278528 c:\windows\assembly\GAC\ehiVidCtl\6.0.3000.0__31bf3856ad364e35\ehiVidCtl.dll
- 2008-10-20 23:41 . 2008-10-20 23:41 278528 c:\windows\assembly\GAC\ehiVidCtl\6.0.3000.0__31bf3856ad364e35\ehiVidCtl.dll
+ 2009-09-14 01:23 . 2009-09-14 01:23 389120 c:\windows\assembly\GAC\ehiProxy\6.0.3000.0__31bf3856ad364e35\ehiProxy.dll
- 2008-10-20 23:41 . 2008-10-20 23:41 389120 c:\windows\assembly\GAC\ehiProxy\6.0.3000.0__31bf3856ad364e35\ehiProxy.dll
+ 2009-09-14 01:23 . 2009-09-14 01:23 204800 c:\windows\assembly\GAC\ehiPlay\6.0.3000.0__31bf3856ad364e35\ehiPlay.dll
- 2009-03-04 23:21 . 2009-03-04 23:21 204800 c:\windows\assembly\GAC\ehiPlay\6.0.3000.0__31bf3856ad364e35\ehiplay.dll
- 2008-10-20 23:41 . 2008-10-20 23:41 167936 c:\windows\assembly\GAC\ehiMsgr\6.0.3000.0__31bf3856ad364e35\ehiMsgr.dll
+ 2009-09-14 01:23 . 2009-09-14 01:23 167936 c:\windows\assembly\GAC\ehiMsgr\6.0.3000.0__31bf3856ad364e35\ehiMsgr.dll
+ 2009-09-14 01:23 . 2009-09-14 01:23 110592 c:\windows\assembly\GAC\ehExtCOM\6.0.3000.0__31bf3856ad364e35\ehExtCOM.dll
- 2008-10-20 23:41 . 2008-10-20 23:41 110592 c:\windows\assembly\GAC\ehExtCOM\6.0.3000.0__31bf3856ad364e35\ehExtCOM.dll
- 2008-10-20 23:41 . 2008-10-20 23:41 126976 c:\windows\assembly\GAC\ehepgdat\6.0.3000.0__31bf3856ad364e35\ehepgdat.dll
+ 2009-09-14 01:23 . 2009-09-14 01:23 126976 c:\windows\assembly\GAC\ehepgdat\6.0.3000.0__31bf3856ad364e35\ehepgdat.dll
+ 2009-09-14 01:23 . 2009-09-14 01:23 868352 c:\windows\assembly\GAC\ehepg\6.0.3000.0__31bf3856ad364e35\ehepg.dll
- 2009-03-04 23:21 . 2009-03-04 23:21 868352 c:\windows\assembly\GAC\ehepg\6.0.3000.0__31bf3856ad364e35\ehepg.dll
+ 2009-09-14 01:23 . 2009-09-14 01:23 192512 c:\windows\assembly\GAC\ehcommon\6.0.3000.0__31bf3856ad364e35\ehcommon.dll
- 2008-10-20 23:41 . 2008-10-20 23:41 192512 c:\windows\assembly\GAC\ehcommon\6.0.3000.0__31bf3856ad364e35\ehcommon.dll
- 2008-10-20 23:41 . 2008-10-20 23:41 102400 c:\windows\assembly\GAC\ehCIR\6.0.3000.0__31bf3856ad364e35\ehCIR.dll
+ 2009-09-14 01:23 . 2009-09-14 01:23 102400 c:\windows\assembly\GAC\ehCIR\6.0.3000.0__31bf3856ad364e35\ehCIR.dll
+ 2009-09-14 01:23 . 2009-09-14 01:23 117248 c:\windows\assembly\GAC\BDATunePIA\6.0.3000.0__31bf3856ad364e35\bdatunepia.dll
- 2008-10-20 23:41 . 2008-10-20 23:41 117248 c:\windows\assembly\GAC\BDATunePIA\6.0.3000.0__31bf3856ad364e35\bdatunepia.dll
+ 2006-10-15 03:22 . 2008-07-06 12:06 1676288 c:\windows\system32\xpssvcs.dll
+ 2006-06-17 09:24 . 2009-05-20 11:56 2458112 c:\windows\system32\WMVCore.dll
- 2006-06-17 09:24 . 2008-06-18 13:03 2458112 c:\windows\system32\WMVCore.dll
+ 2006-06-17 09:24 . 2008-06-18 13:03 2458112 c:\windows\system32\WMVCore(2).dll
+ 2009-05-29 05:24 . 2008-07-06 12:06 1676288 c:\windows\system32\spool\XPSEP\i386\xpssvcs.dll
+ 2009-05-29 05:24 . 2008-07-06 12:06 1676288 c:\windows\system32\spool\XPSEP\i386\i386\xpssvcs.dll
+ 2009-05-29 05:24 . 2008-07-07 00:36 2936832 c:\windows\system32\spool\XPSEP\amd64\xpssvcs.dll
+ 2009-05-29 05:24 . 2008-07-07 00:36 2936832 c:\windows\system32\spool\XPSEP\amd64\amd64\xpssvcs.dll
+ 2006-10-15 03:22 . 2008-07-06 12:06 1676288 c:\windows\system32\spool\drivers\w32x86\3\XpsSvcs.dll
+ 2009-08-30 09:13 . 2009-09-13 09:43 3197360 c:\windows\system32\Restore\rstrlog.dat
+ 2006-10-15 03:22 . 2008-07-06 12:06 1676288 c:\windows\system32\dllcache\xpssvcs.dll
+ 2007-01-21 18:36 . 2009-05-20 11:56 2458112 c:\windows\system32\dllcache\WMVCore.dll
- 2007-01-21 18:36 . 2008-06-18 13:03 2458112 c:\windows\system32\dllcache\WMVCore.dll
+ 2008-07-30 06:40 . 2008-07-30 06:40 1720824 c:\windows\Microsoft.NET\Framework\v3.5\vbc.exe
+ 2008-07-30 01:47 . 2008-07-30 01:47 1054208 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs_setup.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 1364992 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\SITSetup.dll
+ 2008-07-30 01:47 . 2008-07-30 01:47 1064448 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\gencomp.dll
+ 2008-07-30 06:40 . 2008-07-30 06:40 1548280 c:\windows\Microsoft.NET\Framework\v3.5\csc.exe
+ 2008-12-06 02:35 . 2008-12-06 02:35 1736528 c:\windows\Microsoft.NET\Framework\v3.0\WPF\wpfgfx_v0300.dll
+ 2008-12-06 03:12 . 2008-12-06 03:12 5931008 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll
- 2007-10-24 08:47 . 2007-10-24 08:47 1344000 c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 1344000 c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 1172472 c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
- 2007-10-24 08:47 . 2007-10-24 08:47 1172472 c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
+ 2008-11-25 11:59 . 2008-11-25 11:59 2048000 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
+ 2008-11-25 11:59 . 2008-11-25 11:59 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 3149824 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 5062656 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
+ 2008-07-25 18:17 . 2008-07-25 18:17 2933248 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
+ 2008-11-25 11:59 . 2008-11-25 11:59 5813576 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
+ 2008-11-25 11:59 . 2008-11-25 11:59 4546560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2008-07-25 18:16 . 2008-07-25 18:16 1163768 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
+ 2008-12-13 16:57 . 2008-12-13 16:57 8397824 c:\windows\Installer\f8104a.msp
+ 2008-07-30 02:26 . 2008-07-30 02:26 1043456 c:\windows\Installer\f5a6ea.msp
+ 2008-07-30 03:37 . 2008-07-30 03:37 2679808 c:\windows\Installer\f5a6e8.msp
+ 2008-07-30 04:15 . 2008-07-30 04:15 3697664 c:\windows\Installer\f5a6e6.msp
+ 2008-07-30 02:34 . 2008-07-30 02:34 1448448 c:\windows\Installer\f5a6e5.msp
+ 2008-07-30 03:22 . 2008-07-30 03:22 4137984 c:\windows\Installer\f5a6e4.msp
+ 2008-07-30 02:18 . 2008-07-30 02:18 3376640 c:\windows\Installer\f5a6e3.msp
+ 2008-07-30 00:45 . 2008-07-30 00:45 2543616 c:\windows\Installer\effdf7.msp
+ 2008-07-30 00:29 . 2008-07-30 00:29 2926080 c:\windows\Installer\effdf6.msp
+ 2008-07-30 00:41 . 2008-07-30 00:41 6487040 c:\windows\Installer\effdf5.msp
+ 2008-07-30 00:39 . 2008-07-30 00:39 3403264 c:\windows\Installer\effdf4.msp
+ 2008-07-30 00:43 . 2008-07-30 00:43 1013248 c:\windows\Installer\effdf2.msp
+ 2008-07-30 00:31 . 2008-07-30 00:31 6083072 c:\windows\Installer\effdef.msp
+ 2009-08-31 03:15 . 2009-08-31 03:15 2225664 c:\windows\Installer\9ce06c.msi
+ 2009-09-15 02:53 . 2009-09-15 02:53 9013760 c:\windows\Installer\5785bce.msi
+ 2009-08-07 19:52 . 2009-08-07 19:52 1697792 c:\windows\Installer\1d470a6.msp
+ 2009-08-21 23:29 . 2009-08-21 23:29 3313664 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\14cd5f4b61d35f9b76327d6be9853755\WindowsBase.ni.dll
+ 2009-08-21 23:37 . 2009-08-21 23:37 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\f3c7957351aec85f526a3350c9718b1e\UIAutomationClientsideProviders.ni.dll
+ 2009-08-21 23:27 . 2009-08-21 23:27 7868416 c:\windows\assembly\NativeImages_v2.0.50727_32\System\80978a322d7dd39f0a71be1251ae395a\System.ni.dll
+ 2009-08-21 23:28 . 2009-08-21 23:28 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\773a9786013451d3baaeff003dc4230f\System.Xml.ni.dll
+ 2009-08-22 00:51 . 2009-08-22 00:51 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\ac1750e78d79520dcf19195772eff1b6\System.WorkflowServices.ni.dll
+ 2009-08-22 00:51 . 2009-08-22 00:51 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\d265da36954fcb4cb7ad5adc693ea0f2\System.Workflow.Runtime.ni.dll
+ 2009-08-22 00:51 . 2009-08-22 00:51 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\693a8fbe6f7ad6e4e429052da4317e59\System.Workflow.ComponentModel.ni.dll
+ 2009-08-22 00:50 . 2009-08-22 00:50 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\cc99fbbac0b6e4e9ca62093e49b0c16b\System.Workflow.Activities.ni.dll
+ 2009-08-21 23:36 . 2009-08-21 23:36 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\b57bb002a655920cbfa2bee29d1e22b7\System.Web.Services.ni.dll
+ 2009-08-22 00:50 . 2009-08-22 00:50 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\81197e32ec931f439b3114e9031b65d6\System.Web.Mobile.ni.dll
+ 2009-08-22 00:50 . 2009-08-22 00:50 2403328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\7f64c9d25471b72e1e957bdfe67947c8\System.Web.Extensions.ni.dll
+ 2009-08-21 23:36 . 2009-08-21 23:36 1917440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\63cf639b6e0a3c25c1643c85016e7422\System.Speech.ni.dll
+ 2009-08-22 00:50 . 2009-08-22 00:50 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\340cad17fe57947eacbc8fa2cea780da\System.ServiceModel.Web.ni.dll
+ 2009-08-21 23:56 . 2009-08-21 23:56 2338304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\034c91b133dee73d452652c52767b5ea\System.Runtime.Serialization.ni.dll
+ 2009-08-21 23:35 . 2009-08-21 23:35 1035264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\646ab52eef343380aa002c220dc31e13\System.Printing.ni.dll
+ 2009-08-21 23:56 . 2009-08-21 23:56 1056768 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\c2de8479e54852f56996f79bc93acb13\System.IdentityModel.ni.dll
+ 2009-08-21 23:30 . 2009-08-21 23:30 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\3da96ee075bab9202626ae44c18d226c\System.Drawing.ni.dll
+ 2009-08-21 23:35 . 2009-08-21 23:35 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\543aced762f6b0c3f8e037955941afc6\System.DirectoryServices.ni.dll
+ 2009-08-21 23:30 . 2009-08-21 23:30 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\a6b58624486714fa71e5e35186850ff0\System.Deployment.ni.dll
+ 2009-08-21 23:35 . 2009-08-21 23:35 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\c70731047b0022638b3f9fb158948a03\System.Data.ni.dll
+ 2009-08-21 23:28 . 2009-08-21 23:28 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\826b09ab0d0e36f4d631b4cd335df511\System.Data.SqlXml.ni.dll
+ 2009-08-22 00:50 . 2009-08-22 00:50 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\956a513dcbd44d5a6801840ef2b0b47b\System.Data.Services.ni.dll
+ 2009-08-21 23:36 . 2009-08-21 23:36 1115136 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\283ecfbaa6a6fab76c8b544a4a89d5ce\System.Data.OracleClient.ni.dll
+ 2009-08-21 23:36 . 2009-08-21 23:36 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\0bbec79460b1137df5313f9baf7b246f\System.Data.Linq.ni.dll
+ 2009-08-22 00:50 . 2009-08-22 00:50 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\6479f975b105808a8d9e7a7fdc762551\System.Data.Entity.ni.dll
+ 2009-08-21 23:36 . 2009-08-21 23:36 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\47d87251e93256c635eb73403b8db33e\System.Core.ni.dll
+ 2009-08-21 23:35 . 2009-08-21 23:35 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\4bfb3048bf200a6a8592d1b4ba861a7f\ReachFramework.ni.dll
+ 2009-08-21 23:35 . 2009-08-21 23:35 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\6bafb1a2a73794ddb9761cb321c9e7e2\PresentationUI.ni.dll
+ 2009-08-21 23:28 . 2009-08-21 23:28 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\e634bc4c4a00635a0a254febab0e2e2c\PresentationBuildTasks.ni.dll
+ 2009-08-22 00:49 . 2009-08-22 00:49 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\1c86afc399d0fdd8e069266ffbe748d1\Microsoft.VisualBasic.ni.dll
+ 2009-08-22 00:48 . 2009-08-22 00:48 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\6b2f62f5e981913fce1d223f645d9ddf\Microsoft.Transactions.Bridge.ni.dll
+ 2009-08-22 00:50 . 2009-08-22 00:50 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\b261961046545831aa60963e84905968\Microsoft.JScript.ni.dll
+ 2009-08-22 00:49 . 2009-08-22 00:49 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\bd241492d96db39f20e758c13c845033\Microsoft.Build.Tasks.ni.dll
+ 2009-08-22 00:49 . 2009-08-22 00:49 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\a47100d8f4574bed2d49d83d0ab8964e\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2009-08-22 00:49 . 2009-08-22 00:49 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\6cfe582681724965fb817e8ece5f0909\Microsoft.Build.Engine.ni.dll
+ 2009-08-21 23:17 . 2009-08-21 23:17 1245184 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2009-08-21 23:25 . 2009-08-21 23:25 3149824 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2009-08-21 23:25 . 2009-08-21 23:25 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2009-08-21 23:17 . 2009-08-21 23:17 1630208 c:\windows\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
+ 2009-08-21 23:17 . 2009-08-21 23:17 1138688 c:\windows\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2009-08-21 23:27 . 2009-08-21 23:27 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
+ 2009-08-21 23:26 . 2009-08-21 23:26 5931008 c:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2009-08-21 23:20 . 2009-08-21 23:20 2879488 c:\windows\assembly\GAC_MSIL\System.Data.Entity\3.5.0.0__b77a5c561934e089\System.Data.Entity.dll
+ 2009-08-21 23:26 . 2009-08-21 23:26 5283840 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2009-08-21 23:25 . 2009-08-21 23:25 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2009-08-21 23:17 . 2009-08-21 23:17 4210688 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2009-08-21 23:24 . 2009-08-21 23:24 4546560 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2009-09-14 01:23 . 2009-09-14 01:23 1863680 c:\windows\assembly\GAC\EhCM\6.0.3000.0__31bf3856ad364e35\EhCM.dll
- 2009-03-04 23:21 . 2009-03-04 23:21 1863680 c:\windows\assembly\GAC\EhCM\6.0.3000.0__31bf3856ad364e35\ehcm.dll
+ 2007-04-12 01:16 . 2009-08-28 21:38 24689600 c:\windows\system32\MRT.exe
+ 2008-12-13 17:21 . 2008-12-13 17:21 10473472 c:\windows\Installer\f81055.msp
+ 2009-08-21 23:33 . 2009-08-21 23:33 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\63406259e94d5c0ff5b79401dfe113ce\System.Windows.Forms.ni.dll
+ 2009-08-21 23:36 . 2009-08-21 23:36 11796992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\3963ce03d445a8619abbf388d590134b\System.Web.ni.dll
+ 2009-08-22 00:48 . 2009-08-22 00:48 17317888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\4146033013edebd7e0cb604e504ebfee\System.ServiceModel.ni.dll
+ 2009-08-21 23:36 . 2009-08-21 23:36 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\8ee220bc3cce4f7bbd7818946519ed7f\System.Design.ni.dll
+ 2009-08-21 23:35 . 2009-08-21 23:35 14327808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\96e710f47c601cba3f2348a8d11ddede\PresentationFramework.ni.dll
+ 2009-08-21 23:30 . 2009-08-21 23:30 12216320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\956375d487cbef36165b3250030e3574\PresentationCore.ni.dll
+ 2009-08-21 23:26 . 2009-08-21 23:26 11486720 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\6d667f19d687361886990f3ca0f49816\mscorlib.ni.dll
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2009-07-11 00:28 1174920 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2009-07-11 1174920]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2009-07-11 1174920]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Power2GoExpress"="NA" [X]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-28 146680]
"BitTorrent DNA"="c:\program files\DNA\btdna.exe" [2009-05-29 321344]
"Messenger (Yahoo!)"="c:\program files\Yahoo!\Messenger\YahooMessenger.exe" [2009-05-27 4420848]
"Cobian Backup 9"="c:\program files\Cobian Backup 9\Cobian.exe" [2009-01-22 579584]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-06 64512]
"SynTPLpr"="c:\program files\Synaptics\SynTP\SynTPLpr.exe" [2004-11-05 487514]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2004-11-05 966746]
"Recguard"="c:\windows\SMINST\RECGUARD.EXE" [2002-09-14 290816]
"ATICCC"="c:\program files\ATI Technologies\ATI.ACE\cli.exe" [2006-01-03 45056]
"SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2006-05-24 745472]
"Broadcom Wireless Manager UI"="c:\windows\system32\WLTRAY.exe" [2005-11-12 1409024]
"Verizon_McciTrayApp"="c:\program files\Verizon\McciTrayApp.exe" [2007-06-06 1108992]
"VerizonServicepoint.exe"="c:\program files\Verizon\VSP\VerizonServicepoint.exe" [2007-05-11 2139640]
"LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2005-07-20 299008]
"LogitechVideoRepair"="c:\program files\Logitech\Video\ISStart.exe" [2005-06-08 532480]
"LogitechVideoTray"="c:\program files\Logitech\Video\LogiTray.exe" [2005-06-08 286720]
"YSearchProtection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2008-10-07 189680]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-28 109424]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-09-05 491520]
"SigmatelSysTrayApp"="stsystra.exe" - c:\windows\stsystra.exe [2005-12-27 487424]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
BigFix.lnk - c:\program files\BigFix\bigfix.exe [2006-12-6 2242088]
iSafer.lnk - c:\program files\iSafer\iSafer.exe [2009-6-18 1015296]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [2000-1-21 139316]
REALTEK RTL8187 Wireless LAN Utility.lnk - c:\program files\REALTEK RTL8187 Wireless LAN Driver and Utility\RtWLan.exe [2006-12-6 831488]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableTaskMgr"= 1 (0x1)
"DisableRegistryTools"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
"UpdatesDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"AntiVirusOverride"=dword:00000001
"AntiVirusDisableNotify"=dword:00000001
"FirewallDisableNotify"=dword:00000001
"FirewallOverride"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"UacDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Warcraft III\\Frozen Throne.exe"=
"c:\\Nexon\\MapleStory\\MapleStory.exe"=
"c:\\Program Files\\Malwarebytes' Anti-Malware\\mbam.exe"=
"c:\\Program Files\\Synaptics\\SynTP\\SynTPEnh.exe"=
"c:\\Program Files\\DNA\\btdna.exe"=
"c:\\Program Files\\Synaptics\\SynTP\\SynTPLpr.exe"=
"c:\\Program Files\\Real\\RealPlayer\\RealPlay.exe"=
"c:\\Program Files\\Cobian Backup 9\\cbInterface.exe"=

R0 tffsport;M-Systems DiskOnChip 2000;c:\windows\system32\drivers\tffsport.sys [8/1/2009 3:37 PM 149376]
R2 iSafer;iSafer - Personal Firewall;c:\program files\iSafer\iSaferSvr.exe [6/18/2009 11:40 PM 495104]
R3 abp470n5;abp470n5;\??\c:\windows\system32\drivers\jijnif.sys --> c:\windows\system32\drivers\jijnif.sys [?]
S3 el575nd5;3Com Megahertz 10/100 LAN CardBus PC Card Driver;c:\windows\system32\drivers\el575ND5.sys [6/3/2009 12:38 PM 69692]
S3 PID_0920;Logitech QuickCam Express(PID_0920);c:\windows\system32\drivers\LV532AV.SYS [12/4/2007 8:37 PM 163328]

--- Other Services/Drivers In Memory ---

*Deregistered* - mchInjDrv

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Contents of the 'Scheduled Tasks' folder

2009-09-15 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 19:34]

2007-01-16 c:\windows\Tasks\ISP signup reminder 2.job
- c:\windows\system32\OOBE\oobebaln.exe [2006-06-17 00:12]

2007-01-16 c:\windows\Tasks\ISP signup reminder 3.job
- c:\windows\system32\OOBE\oobebaln.exe [2006-06-17 00:12]

2009-09-20 c:\windows\Tasks\Scheduled Update for Ask Toolbar.job
- c:\program files\Ask.com\UpdateTask.exe [2009-07-11 00:29]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.ask.com?o=15179&l=dis
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Open Picture in &Microsoft PhotoDraw - c:\progra~1\MICROS~2\Office\1033\phdintl.dll/phdContext.htm
DPF: {7623BE59-D4CF-4379-ABC4-B39E11854D66} - hxxp://avatar.mabinogi.jp/3drender/renderer/mabiweb.2007.4.4.cab
FF - ProfilePath - c:\documents and settings\Errol\Application Data\Mozilla\Firefox\Profiles\kw6hgg2w.default\
FF - prefs.js: browser.search.selectedEngine - Wikipedia (en)
FF - prefs.js: browser.startup.homepage - hxxp://en-US.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:en-US:official
FF - prefs.js: keyword.URL - hxxp://supertoolbar.ask.com/redirect?client=ff&src=kw&tb=PF&o=15176&locale=en_US&q=
FF - plugin: c:\progra~1\Yahoo!\Common\npyaxmpb.dll
FF - plugin: c:\program files\Java\jre1.5.0_02\bin\NPJava11.dll
FF - plugin: c:\program files\Java\jre1.5.0_02\bin\NPJava12.dll
FF - plugin: c:\program files\Java\jre1.5.0_02\bin\NPJava13.dll
FF - plugin: c:\program files\Java\jre1.5.0_02\bin\NPJava14.dll
FF - plugin: c:\program files\Java\jre1.5.0_02\bin\NPJava32.dll
FF - plugin: c:\program files\Java\jre1.5.0_02\bin\NPJPI150_02.dll
FF - plugin: c:\program files\Java\jre1.5.0_02\bin\NPOJI610.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npbittorrent.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npPandoWebInst.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.
- - - - ORPHANS REMOVED - - - -

HKCU-Run-ares - c:\program files\Ares\Ares.exe
HKLM-Run-MSKDetectorExe - c:\program files\McAfee\SpamKiller\MSKDetct.exe
AddRemove-DivX Content Uploader - c:\program files\DivX\DivXContentUploaderUninstall.exe
AddRemove-DivX Plus DirectShow Filters - c:\program files\DivX\DivXDSFiltersUninstall.exe
AddRemove-{7585478E9D9B42108671C12F8714CEFE} - c:\program files\DivX\DivXConverterUninstall.exe
AddRemove-{7B63B2922B174135AFC0E1377DD81EC2} - c:\program files\DivX\DivXCodecUninstall.exe
AddRemove-{8ADFC4160D694100B5B8A22DE9DCABD9} - c:\program files\DivX\DivXPlayerUninstall.exe
AddRemove-{B13A7C41581B411290FBC0395694E2A9} - c:\program files\DivX\DivXConverterUninstall.exe
AddRemove-{B7050CBDB2504B34BC2A9CA0A692CC29} - c:\program files\DivX\DivXWebPlayerUninstall.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-20 01:36
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\mchInjDrv]
"ImagePath"="\??\c:\windows\TEMP\mc21.tmp"
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(848)
c:\windows\system32\Ati2evxx.dll
c:\program files\iSafer\PSMFireW.dll

- - - - - - - > 'lsass.exe'(908)
c:\program files\iSafer\PSMFireW.dll

- - - - - - - > 'csrss.exe'(816)
c:\program files\iSafer\PSMFireW.dll
.
Completion time: 2009-09-20 1:40
ComboFix-quarantined-files.txt 2009-09-20 08:40
ComboFix2.txt 2009-08-18 00:01

Pre-Run: 65,487,601,664 bytes free
Post-Run: 64,027,742,208 bytes free

964 --- E O F --- 2009-09-14 06:17





MalwareBytes Log:



Malwarebytes' Anti-Malware 1.41
Database version: 2830
Windows 5.1.2600 Service Pack 3

9/20/2009 2:45:38 AM
mbam-log-2009-09-20 (02-45-38).txt

Scan type: Full Scan (C:\|D:\|E:\|)
Objects scanned: 226793
Time elapsed: 42 minute(s), 34 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 5
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools (Hijack.Regedit) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (Hijack.TaskManager) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Documents and Settings\Errol\Local Settings\Temp\winiwjft.exe (Trojan.Downloader) -> Delete on reboot.








Well my computer is somewhat a bit faster now,can play games online again just needed to reinstall them, but still cant get into task manager, will reply back again if any other problems pop up
BMW ///MNSTR!!

#9 m0le

m0le

    Can U Dig It?


  • Malware Response Team
  • 34,527 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:09:36 PM

Posted 20 September 2009 - 05:44 PM

Download Fix Task Manager
  • Save it to your desktop.
  • Unzip it and double click the FixMu.reg file and allow it to enter into the registry.
  • Reboot and let me know if Task Manager is now restored.

Let's also run an online scan to pick off any strays

I'd like us to scan your machine with ESET OnlineScan
  • Hold down Control and click on the following link to open ESET OnlineScan in a new window.
    ESET OnlineScan
  • Click the Posted Image button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on Posted Image to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the Posted Image icon on your desktop.
  • Check Posted Image
  • Click the Posted Image button.
  • Accept any security warnings from your browser.
  • Check Posted Image
  • Push the Start button.
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, push Posted Image
  • Push Posted Image, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Push the Posted Image button.
  • Push Posted Image
Thanks, nearly there now. :(
Posted Image
m0le is a proud member of UNITE

#10 E_Rok

E_Rok
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:02:36 PM

Posted 20 September 2009 - 06:07 PM

Hmm so the Task Manager worked once then it locked itself again and games wont work online again. Also the Eset Scan site won't load for me.
BMW ///MNSTR!!

#11 m0le

m0le

    Can U Dig It?


  • Malware Response Team
  • 34,527 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:09:36 PM

Posted 20 September 2009 - 06:13 PM

We need to scan the system with this special tool:
  • Please download and save:
Junction.zip

  • Unzip it and place Junction.exe in the Windows directory (C:\Windows).
  • Go to Start => Run... => Copy and paste the following command in the Run box and click OK:
cmd /c junction -s c:\ >log.txt&log.txt& del log.txt

A command window opens starting to scan the system. Wait until a log file opens. Copy and paste the log in your next reply.
Posted Image
m0le is a proud member of UNITE

#12 E_Rok

E_Rok
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:02:36 PM

Posted 20 September 2009 - 06:27 PM

Thanks m0le huge help :(


Heres what I have:





Junction v1.05 - Windows junction creator and reparse point viewer
Copyright © 2000-2007 Mark Russinovich
Systems Internals - http://www.sysinternals.com


Failed to open \\?\c:\\hiberfil.sys: The process cannot access the file because it is being used by another process.



Failed to open \\?\c:\\pagefile.sys: The process cannot access the file because it is being used by another process.


...
Failed to open \\?\c:\\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp: Access is denied.




...

...

...

...

...

...
Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\ntuser.dat: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\ntuser.dat.LOG: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\ntuser.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\presets.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\desktop.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Adobe\Acrobat\7.0\Updater\AdbeRdr709_en_US.exe: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Adobe\Acrobat\Whapi\CreatePDFWinColor.ico: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Adobe\Acrobat\Whapi\CreatePDFWinGray.ico: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Adobe\Acrobat\Whapi\SearchPDFWinColor.ico: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Adobe\Acrobat\Whapi\SearchPDFWinGray.ico: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\GRETECH\GomPlayer\GrVersion.ini: Access is denied.




.
Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\McAfee.com Personal Firewall\LogSettings.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\McAfee.com Personal Firewall\WindowPositions.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\CLR Security Config\v1.0.3705\security.config: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\CLR Security Config\v1.0.3705\security.config.old: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\CLR Security Config\v1.1.4322\security.config: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Installer\{15377C3E-9655-400F-B441-E69F0A6BEAFE}\ARPPRODUCTICON.exe: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Installer\{15377C3E-9655-400F-B441-E69F0A6BEAFE}\NewShortcut1_15377C3E9655400FB441E69F0A6BEAFE.exe: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Installer\{15377C3E-9655-400F-B441-E69F0A6BEAFE}\NewShortcut2_15377C3E9655400FB441E69F0A6BEAFE.EXE: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Installer\{15377C3E-9655-400F-B441-E69F0A6BEAFE}\NewShortcut3_15377C3E9655400FB441E69F0A6BEAFE.EXE: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Internet Explorer\Quick Launch\Internet.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft FrontPage.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft PhotoDraw V2.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Internet Explorer\Quick Launch\Notepad.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Internet Explorer\Quick Launch\QuickTime Player.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Explorer.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Internet Explorer\Quick Launch\Yahoo! Mail.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Internet Explorer\Quick Launch\Yahoo! Messenger.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\12-08_yp_invoice.doc.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\13_combo_a.doc.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\14_combo_b2.doc.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\2006_iecc_com_mech[1].ppt.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\2008.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\2_meal_crepes_b.doc.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\400.shtml.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\401.shtml.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\403.shtml.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\404.shtml.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\500.shtml.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\adown.mix.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\adrs.htm.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\AMIGAS[1].pps.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\arrow.mix.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\bizcard.png.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\bizcard.tif.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\blank-invoice-ms-word-2003.doc.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\blog.html.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\blue.css.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\boba_tax_calculation.xls.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\build.htm.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\car.gif.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\cat.htm.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\cat2.htm.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\Chineseproverb_1[1].ppsasm12-28-07.pps.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\chowmein.mix.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\clas.css.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\clas.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\coffee.xls.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\compare.gif.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\compare.htm.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\compare.mix.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\compare2.htm.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\contacts.html.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\Copy of 2008_Budget___Breakdown.xls.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\corporate.html.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\Daniel.doc.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\Definition.doc.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\description.doc.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\dotcc.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\dotorg.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\dottv.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\equal-friction-method.xls.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\Ethanol Presentation.ppt.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\ex08.xls.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\expenses.xls.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\expenses_08.xls.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\faq.html.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\feature.html.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\flash.html.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\flashintro.html.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\goto.gif.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\Hello_from_Community_Architect[1].doc.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\Hi.doc.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\Homework.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\hosting.xls.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\i.htm.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\images.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\Inclusion.xls.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\index.html.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\inventory.xls.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\INVOICE.doc.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\invoice_orig.doc.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\justify.doc.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\list.htm.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\list2.htm.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\local.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\logo.html.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\logo.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\Love%20your%20Liver%20enough[1].pps.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\lunchbowl.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\m.htm.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\main.html.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\main2.html.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\map.htm.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\music.htm.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\My Webs.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\myEweb UAT-1[1].1.XLS.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\myeweb.gif.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\MyEWebEventsWithIPorBAissues.xls.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\myreports.gif.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\Normal.dot.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\orange.mix.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\oscommerce.html.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\pagi.css.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\PartnerAPI_Introduction.doc.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\PartnerAPI_SupportMaintenanceProcedure.doc.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\PatrickChieng[1].pps.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\phpnuke.html.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\platform_test.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\Presentation2 [Recovered].ppt.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\product.mix.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\Projects.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\projects.xls.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\promotion.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\recipes.xls.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\ReleaseNotes_v1.4r2.doc.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\report.doc.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\results.htm.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\review.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\rss_hot[1].asp.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\sales-invoice.xls.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\sample.html.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\search.html.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\search.mix.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\search2.html.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\shoppin.gif.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\shopping.css.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\shopping.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\street.gif.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\street.mix.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\tab.htm.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\tabcontent[1].css.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\tab_top.htm.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\taxcalc2007.xls.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\temp.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\template.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\terms.html.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\University of Phoenix Stadium Calendar August 2008-2009 (As of 08-16-08).xls.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\video.mix.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\videoplayer.gif.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\website.html.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\website2.html.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\x.htm.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\x.html.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\x.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\x2.htm.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\x3.htm.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\x4.htm.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\xlink.xls.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\yellow.css.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\Yellowbook-myEweb DSA.FINAL(Clean).doc.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\yellowbook.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\yp.gif.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\yp.htm.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\yp2.gif.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Microsoft\Office\Recent\zodiac.mix.LNK: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Mozilla\Firefox\profiles.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Mozilla\Firefox\Profiles\uek1jxjv.default\compatibility.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Mozilla\Firefox\Profiles\uek1jxjv.default\extensions.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Mozilla\Firefox\Profiles\uek1jxjv.default\extensions\{3DD07E5D-2ADF-42ea-972E-2998FA5CE45A}\chrome.manifest: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Mozilla\Firefox\Profiles\uek1jxjv.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\chrome.manifest: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Sun\Java\Deployment\deployment.properties: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\TaxCut\2007\alert.cfg: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\TaxCut\2007\tc07.cfg: Access is denied.


.
Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Viewpoint\Viewpoint Experience Technology\Resources\ResourceFolder_00\URLCache.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Viewpoint\Viewpoint Experience Technology\Resources\ResourceFolder_01\URLCache.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Viewpoint\Viewpoint Experience Technology\Resources\ResourceFolder_02\URLCache.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\Viewpoint\Viewpoint Experience Technology\Resources\ResourceFolder_03\URLCache.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\vol_toolbar\COMBOSEARCH.acs: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Application Data\vol_toolbar\vol_toolbartb0501.cfg: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Desktop\DuctSizer.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Desktop\eQUEST.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Desktop\Excel.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Desktop\FLV Player.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Desktop\music.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Desktop\Notepad.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Desktop\Wireless.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Desktop\Word.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Local Settings\desktop.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Local Settings\Application Data\ApplicationHistory\cli.exe.c88dbd71.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Local Settings\Application Data\ApplicationHistory\ehExtHost.exe.fa7bea74.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Local Settings\Application Data\ApplicationHistory\ehshell.exe.a87fcbb.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Local Settings\Application Data\ApplicationHistory\MCInstaller.exe.3eec6282.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Local Settings\Application Data\ApplicationHistory\ngen.exe.2c05686e.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Local Settings\Application Data\ApplicationHistory\onplay.exe.68c032e3.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Local Settings\Application Data\ApplicationHistory\SL9E.tmp.dce98a55.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Local Settings\Application Data\Microsoft\Feeds Cache\desktop.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Local Settings\Application Data\Microsoft\Feeds Cache\3MZ5L9NB\desktop.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Local Settings\Application Data\Microsoft\Feeds Cache\D6JS005Y\desktop.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Local Settings\Application Data\Microsoft\Feeds Cache\OJ07JMR8\desktop.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Local Settings\Application Data\Microsoft\Feeds Cache\Y70XH0Z2\desktop.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Local Settings\Application Data\Microsoft\Money\15.0\au.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Local Settings\Application Data\Microsoft\Windows\usrclass.dat.LOG: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Local Settings\Application Data\Mozilla\Firefox\Profiles\uek1jxjv.default\XPC.mfl: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Local Settings\Application Data\Mozilla\Firefox\Profiles\uek1jxjv.default\XUL.mfl: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Local Settings\Application Data\{3248F0A6-6813-11D6-A77B-00B0D0150020}\1033.MST: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Local Settings\Application Data\{3248F0A6-6813-11D6-A77B-00B0D0150020}\J2SE Runtime Environment 5.0 Update 2.msi: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\02_Settings.zip.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\040930_capricorne[1].gif.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\10_frappe_b.doc.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\1c.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\2c.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\3c.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\400.shtml.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\401.shtml.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\7_frappe_b.doc.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\ads.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\Air001.dat.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\anchor.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\aup.gif.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\auto.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\back.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\BarelyLegal.flv.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\base.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\base.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\BaseApi.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\bed.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\Bellybutton.flv.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\bg_gray.gif.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\bg_pnk.gif.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\bg_slv.gif.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\Blonde_Amateur.flv.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\blue.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\Boba.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\boba_tax_calculation.xls.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\Book Store Clerk.flv.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\Britishgirl .flv.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\byname.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\c1.txt (2).lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\c1.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\c2.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\c3a.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\c3xx.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\car.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\car2.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\cat.htm.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\cat.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\cat2.htm.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\catid.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\channel.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\chat.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\chowmein.mix.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\city.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\clas.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\clas.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\clas.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\coll.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\Copy of My Pictures.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\cove.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\cross.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\css.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\date.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\dbox.js.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\dc2.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\Definition.doc.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\Desktop.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\dfg.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\dir.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\dirt2.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\dl.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\dot-ca.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\dotcc.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\dotcom.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\dottv.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\dotuk (2).lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\dotuk.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\DSC00913.JPG.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\dummy.htm.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\ec1.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\ec2.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\empty.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\epoch_v106_en.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\event.php (2).lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\event.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\eweb.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\ex08.xls.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\expenses.xls.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\expenses_08.xls.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\find.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\find2.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\foot.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\form.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\form.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\front.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\front.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\games.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\goo.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\goo3.xml.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\google_id.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\goo_start.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\gsearch.css.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\head.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\Hi.doc.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\Homework.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\i.htm.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\i.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\i468x60.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\ideas.gif.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\image.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\images.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\inc.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\Inclusion.xls.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\index.htm (2).lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\index.htm (3).lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\index.htm.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\index.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\index2.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\JackieDaniels.flv.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\job.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\job.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\jobtraining .flv.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\Junglefever.flv.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\lis2t.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\list.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\list.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\local.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\logo.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\lunchbowl.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\m.htm.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\Magdalena.flv.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\main.htm.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\main.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\main.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\main2.html.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\main2.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\mapid.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\maplisting.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\maps.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\menu.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\meta.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\meta.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\motif.js.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\music.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\myeweb.gif.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\nav.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\navmore.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\near.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\news.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\news_list.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\odp.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\old.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\omain.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\option2.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\orange.mix.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\pagi.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\parser.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\PartnerAPI_Introduction.doc.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\PartnerAPI_SupportMaintenanceProcedure.doc.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\people.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\pers.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\personals.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\phform.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\phone.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\player.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\Presentation2 [Recovered].ppt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\price.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\Projects.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\promotion.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\prop.htm.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\property.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\re (2).lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\re.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\re.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\re.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\readme.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\recipe.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\recipes (2).lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\recipes.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\ReleaseNotes_v1.4r2.doc.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\rent.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\review.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\run (2).lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\run.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\run.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\run.txt (2).lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\run.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\sbox.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\search.js (2).lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\search.js.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\search.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\search4.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\Sexystudent.flv.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\shopping.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\show.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\showbox.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\shownav.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\showtime.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\soon.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\sort.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\spot.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\spot2.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\stat (2).lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\stat.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\state.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\street.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\switch.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\t728x90.txt (2).lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\t728x90.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\tab.htm.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\tab_top.htm.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\template.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\templates-shop-s1-blue.zip.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\ticket.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\today.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\today.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\tools.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\tools2.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\top.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\tshirt.mix.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\tv.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\tvpop.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\t_.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\vc1.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\venue.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\video.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\view.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\webads.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\Wireless.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\wpform.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\x.htm.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\x.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\x.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\x2.htm.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\x2.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\x3.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\xclas.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\xhead.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\xml.txt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\Yellowbook-myEweb DSA.FINAL(Clean).doc.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\yellowbook.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\yp.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Recent\yp.php.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\SendTo\Compressed (zipped) Folder.ZFSendToTarget: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\SendTo\Desktop (create shortcut).DeskLink: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\SendTo\desktop.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\SendTo\Mail Recipient.MAPIMail: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\SendTo\My Documents.mydocs: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\desktop.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\desktop.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\Internet Explorer.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\Outlook Express.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\Remote Assistance.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\Windows Media Player.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\Accessories\Address Book.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\Accessories\Command Prompt.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\Accessories\desktop.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\Accessories\Program Compatibility Wizard.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\Accessories\Synchronize.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\Accessories\Tour Windows XP.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\Accessories\Accessibility\desktop.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\Accessories\Accessibility\Magnifier.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\Accessories\Accessibility\Utility Manager.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\Accessories\Entertainment\desktop.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\Accessories\Entertainment\RealPlayer.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\Ares\Ares.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\Ares\Homepage.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\Ares\Uninstall.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\EnergyPlus V2-2 Programs\EnergyPlus Documentation Main Menu.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\EnergyPlus V2-2 Programs\EP-Launch.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\EnergyPlus V2-2 Programs\IDFEditor.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\EnergyPlus V2-2 Programs\Readme.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\EnergyPlus V2-2 Programs\Transition-V2-1-0-to-V2-2-0.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\EnergyPlus V2-2 Programs\Uninstall EnergyPlus.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\EnergyPlus V2-2 Programs\Weather Statistics and Conversions.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\EnergyPlus V2-2 Programs\WinEPDraw.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\FLV Player\FLV Player website.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\FLV Player\FLV Player.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\FLV Player\Uninstall.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\Startup\desktop.ini: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\System Recovery\Application & Driver Recovery.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\System Recovery\Create my Drivers-Applications CD(s).lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Start Menu\Programs\System Recovery\System Recovery.lnk: Access is denied.



Failed to open \\?\c:\\Documents and Settings\Owner.Rommel\Templates\amipro.sam: Access is denied.


.

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

..
Failed to open \\?\c:\\Program Files\Google\GoogleToolbarNotifier\swg-3.0.1225.9868\SearchWithGoogleUpdate.exe: Access is denied.



Failed to open \\?\c:\\Program Files\Google\GoogleToolbarNotifier\swg-3.1.807.1746\SearchWithGoogleUpdate.exe: Access is denied.


.
Failed to open \\?\c:\\Program Files\InstallShield Installation Information\{FD056785-F890-47CE-922C-CE985D5ADBEF}\setup.ilg: Access is denied.




...

...

...

...

...

...

...

...

...

...

...

...

..
Failed to open \\?\c:\\System Volume Information\MountPointManagerRemoteDatabase: Access is denied.


.

...

...

...

...

...

...\\?\c:\\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a: JUNCTION
Print Name : C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790
Substitute Name: C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790

\\?\c:\\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a: JUNCTION
Print Name : C:\WINDOWS\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e
Substitute Name: C:\WINDOWS\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e



...

...

...

...

...

...

...

...

...

...

...

...

...

...

.
BMW ///MNSTR!!

#13 m0le

m0le

    Can U Dig It?


  • Malware Response Team
  • 34,527 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:09:36 PM

Posted 20 September 2009 - 06:41 PM

Your PC appears to have locked access to pretty much all the processes you have.

Please save this file to your desktop. Click on Start->Run, and copy-paste the following command (the bolded text) into the "Open" box, and click OK.

"%userprofile%\desktop\win32kdiag.exe" -f -r

When it's finished, there will be a log called Win32kDiag.txt on your desktop. Please open it with notepad and post the contents here.
Posted Image
m0le is a proud member of UNITE

#14 E_Rok

E_Rok
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:02:36 PM

Posted 20 September 2009 - 07:30 PM

Here are the results



Running from: C:\Documents and Settings\Errol\desktop\win32kdiag.exe

Log file at : C:\Documents and Settings\Errol\Desktop\Win32kDiag.txt

Removing all found mount points.

Attempting to reset file permissions.

WARNING: Could not get backup privileges!

Searching 'C:\WINDOWS'...





Finished!
BMW ///MNSTR!!

#15 m0le

m0le

    Can U Dig It?


  • Malware Response Team
  • 34,527 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:09:36 PM

Posted 21 September 2009 - 04:32 AM

Let's try something else.

Before we start fixing anything you should print out these instructions or copy them to a NotePad file so they will be accessible. Some steps will require you to disconnect from the Internet or use Safe Mode and you will not have access to this page.

Please download DrWeb-CureIt and save it to your desktop. DO NOT perform a scan yet.

Reboot your computer in "Safe Mode" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".

Scan with Dr.Web CureIt as follows:
  • Double-click on launch.exe to open the program and click Start. (There is no need to update if you just downloaded the most current version
  • Read the Virus check by DrWeb scanner prompt and click Ok where asked to Start scan now? Allow the setup.exe to load if asked by any of your security programs.
  • The Express scan will automatically begin.
    (This is a short scan of files currently running in memory, boot sectors, and targeted folders).
  • If prompted to dowload the Full version Free Trial, ignore and click the X to close the window.
  • If an infected object is found, you will be prompted to move anything that cannot be cured. Click Yes to All. (This will move any detected files to the C:\Documents and Settings\userprofile\DoctorWeb\Quarantine folder if they can't be cured)
  • After the Express Scan is finished, put a check next to Complete scan to scan all local disks and removable media.
  • In the top menu, click Settings > Change settings, and uncheck "Heuristic analysis" under the "Scanning" tab, then click Apply, Ok.
  • Back at the main window, click the green arrow "Start Scanning" button on the right under the Dr.Web logo.
  • Please be patient as this scan could take a long time to complete.
  • When the scan has finished, a message will be displayed at the bottom indicating if any viruses were found.
  • Click Select All, then choose Cure > Move incurable.
  • In the top menu, click file and choose save report list.
  • Save the DrWeb.csv report to your desktop.
  • Exit Dr.Web Cureit when done.
  • Important! Reboot your computer because it could be possible that files in use will be moved/deleted during reboot.
  • After reboot, post the contents of the log from Dr.Web in your next reply. (You can use Notepad to open the DrWeb.cvs report)

Then

Restore Permissions for taskmgr.exe

Please download Inherit by sUBs
  • Drag and drop taskmgr.exe onto Inherit

    The file is found here: C:\Windows\System32\taskmgr.exe

  • This shall restore permissions to the application
  • The application should now run normally
Please indicate in your next post if this was successful.
Posted Image
m0le is a proud member of UNITE




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users