Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Windows XP Pro Repair Installation Help Required


  • This topic is locked This topic is locked
133 replies to this topic

#1 BMW3

BMW3

  • Members
  • 75 posts
  • OFFLINE
  •  
  • Local time:05:14 AM

Posted 11 April 2010 - 05:31 AM

Hi there,

I have limited computer skills, and a week ago my machine suffered a Virus/Worm Win32:Alureon-FR attack from an e-mail.

Avast could not remedy the problem, and I resorted to Spybot Search&Destroy, which deleted(?) the infected file, but now left me with a machine that cannot boot.

Reading many posts, it would seem my only option now is to do a Repair Installation, or as a last resort format my C Drive - and losing everything!

On startup I get the options of Safe Mode, Last Good Config, etc., but once I make a selection, its Blue Screen: "A problem has been detected.....Check for virus.......Remove newly installed harddrives....Run CHKDSK/F. Tech Info : 0x0000007B(0xF7A2528, 0x00000034....

I do have my origional (but old) Windows CD, but already have SP3 installed on the machine. I also have a CD with (most) of the system drivers.

The machine was bought a year ago as a 7 year old computer, so I am unable to give you a full history report

I would appreciate assistance in getting my machine running again, as my income is solely dependent on it

Kind regards.



BC AdBot (Login to Remove)

 


#2 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,204 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:06:14 AM

Posted 11 April 2010 - 08:10 AM

Hello, no need yet for a repair installation smile.gif

With a bit of luck we should be able to get it fixed.

OK this file is big Print these instruction out so that you know what you are doing

Two programs to download

First

ISOBurner this will allow you to burn OTLPE ISO to a cd and make it bootable. Just install the program, from there on in it is fairly automatic. Instructions

Second
  • Download OTLPE.iso and burn to a CD using ISO Burner. NOTE: This file is 292Mb in size so it may take some time to download.
  • When downloaded double click and this will then open ISOBurner to burn the file to CD
  • Reboot your system using the boot CD you just created.

    Note : If you do not know how to set your computer to boot from CD follow the steps here
  • Your system should now display a REATOGO-X-PE desktop.
  • Double-click on the OTLPE icon.
  • When asked "Do you wish to load the remote registry", select Yes
  • When asked "Do you wish to load remote user profile(s) for scanning", select Yes
  • Ensure the box "Automatically Load All Remaining Users" is checked and press OK
  • OTL should now start. Change the following settings
    • Change Drivers to Use Safelist
  • Press Run Scan to start the scan.
  • When finished, the file will be saved in drive C:\OTL.txt
  • Copy this file to your USB drive if you do not have internet connection on this system
  • Please post the contents of the OTL.txt file in your reply.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#3 BMW3

BMW3
  • Topic Starter

  • Members
  • 75 posts
  • OFFLINE
  •  
  • Local time:05:14 AM

Posted 11 April 2010 - 10:38 AM

Hi Elise,

Many thanks for your very prompt response.

All went as you described, however:

I was not asked "Do you wish to load the remote registry?"

And Use Safelist was checked for Drivers as well as well as Services and Standard Registry.

Once Scanning started, it ran for about 8 seconds until "Scanning Service P1C1394" appeared in left bottom window, when it stopped, displaying a message: "Invalid Variant Type Conversion".

By pressing OK, it cancelled the scan, and when repeating the procedure, its the same thing.

Your thoughts?



#4 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,204 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:06:14 AM

Posted 11 April 2010 - 02:16 PM

Please rerun OTLPE and copy/paste the following text in the "custom scan/fix" field. Click "none" and "run scan".
Post me the log afterwards (it will be a short log).
CODE
hklm\system\select


regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#5 BMW3

BMW3
  • Topic Starter

  • Members
  • 75 posts
  • OFFLINE
  •  
  • Local time:05:14 AM

Posted 12 April 2010 - 01:03 AM

Hi Elise,

I'm not sure that this is the log you requested - it's very long!

I was unable to copy/paste the text you quoted, so I had to type the hklm\system\select into the space provided. - Did it work?

Incidentally, I'm in the +2 hours Time Zone, and not sure when to look out for your responses - please let me know if your'e in Australia or the States and I will be happy to oblige.


OTL logfile created on: 4/12/2010 10:42:27 PM - Run
OTLPE by OldTimer - Version 3.1.37.1 Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3, v.3264 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00001C09 | Country: South Africa | Language: ENS | Date Format: M/d/yyyy

1,023.00 Mb Total Physical Memory | 800.00 Mb Available Physical Memory | 78.00% Memory free
907.00 Mb Paging File | 846.00 Mb Available in Paging File | 93.00% Paging File free
Paging file location(s): c:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 34.46 Gb Total Space | 17.01 Gb Free Space | 49.35% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Drive X: | 276.80 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: REATOGO
Current User Name: SYSTEM
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
Using ControlSet: ControlSet010

========== Files/Folders - Created Within 30 Days ==========

[2010/04/12 07:44:48 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Administrator\IETldCache
[2010/04/10 21:11:03 | 000,089,610 | ---- | C] (Silicon Image, Inc) -- C:\WINDOWS\System32\drivers\Si3112r\Si3112r\Si3112r.sys
[2010/04/10 21:11:03 | 000,089,610 | ---- | C] (Silicon Image, Inc) -- C:\WINDOWS\System32\drivers\Si3112r\Si3112r\Si3112r.mpd
[2010/04/10 21:11:03 | 000,071,680 | ---- | C] (InstallShield Software Corporation) -- C:\WINDOWS\System32\drivers\Si3112r\Setup.exe
[2010/04/10 21:11:03 | 000,034,843 | ---- | C] (Windows ® 2000 DDK provider) -- C:\WINDOWS\System32\drivers\Si3112r\Si3112r\INSTALL.EXE
[2010/04/10 21:11:03 | 000,034,816 | ---- | C] (InstallShield Software Corporation) -- C:\WINDOWS\System32\drivers\Si3112r\_Setup.dll
[2010/04/10 21:11:03 | 000,027,648 | ---- | C] (InstallShield Software Corporation) -- C:\WINDOWS\System32\drivers\Si3112r\_ISDel.exe
[2010/04/10 21:11:03 | 000,009,600 | ---- | C] (Silicon Image, Inc.) -- C:\WINDOWS\System32\drivers\Si3112r\Si3112r\SIWinAcc.sys
[2010/04/10 21:11:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\Si3112r\Si3112r
[2010/04/10 21:11:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\Si3112r
[2010/04/04 11:00:33 | 016,409,960 | ---- | C] (Safer Networking Limited ) -- C:\Documents and Settings\User\Desktop\setup-spybotsd162.exe
[2010/04/03 08:52:11 | 000,000,000 | ---D | C] -- C:\Program Files\SyncToy 2.1
[2010/04/03 08:51:06 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Sync Framework
[2010/04/03 08:50:39 | 003,020,664 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\User\My Documents\SyncToySetupPackage_v21_x86.exe
[2010/04/03 04:35:51 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\LocalService\Cookies
[2010/04/02 12:28:36 | 000,000,000 | --SD | C] -- C:\ComboFix
[2010/04/02 12:25:06 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010/04/02 11:45:11 | 000,000,000 | ---D | C] -- C:\Program Files\RegCure
[2010/04/02 11:07:39 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2010/04/02 11:03:29 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2010/04/02 11:03:29 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2010/04/02 11:03:29 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2010/04/02 11:03:29 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2010/04/02 11:03:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010/04/02 11:02:59 | 000,000,000 | ---D | C] -- C:\Qoobox
[2010/03/31 03:40:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\My Documents\UJ Refund
[2010/03/31 03:40:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\My Documents\SARS
[2010/03/31 03:40:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\My Documents\Puzzle Pro 3.0 - Graphics Plugin[h33t][Slaytar]
[2010/03/31 03:38:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\My Documents\Lizelle Muller U.J. Sport Application 2008
[2010/03/31 03:38:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\My Documents\L BCC 2 August 2008
[2010/03/31 03:38:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\My Documents\Ulead
[2010/03/31 03:38:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\My Documents\Updater
[2010/03/31 03:24:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\My Documents\blank-invoice-ms-word-2003
[2010/03/31 01:36:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Application Data\Auslogics
[2010/03/30 10:29:39 | 002,110,728 | ---- | C] (Facebook, Inc.) -- C:\Documents and Settings\User\My Documents\Install_Facebook_Plug-In_1.0.3.exe
[2010/03/30 05:29:25 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\User\Recent
[2010/03/24 09:44:35 | 016,205,198 | ---- | C] (Mooii) -- C:\Documents and Settings\User\My Documents\PhotoScapeSetup_V3.4.exe
[2010/03/24 06:08:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\My Documents\Lightroom
[2010/03/23 11:34:29 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_42.dll
[2010/03/23 11:34:27 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_31.dll
[2010/03/23 11:34:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\Logs
[2010/03/23 04:57:10 | 000,000,000 | ---D | C] -- C:\Program Files\Seagate
[2010/03/23 04:54:21 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard
[2010/03/23 04:31:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\My Documents\R-TT
[2010/03/23 04:31:19 | 000,000,000 | ---D | C] -- C:\Program Files\FILE RECOVERY for Windows
[2010/03/23 04:28:55 | 004,237,706 | ---- | C] (Seagate Recovery Services) -- C:\Documents and Settings\User\My Documents\Seagate frw_en_1.exe
[2010/03/22 06:10:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\My Documents\IRBA Printing
[2010/03/20 10:00:10 | 000,000,000 | ---D | C] -- C:\Program Files\Merge
[2010/03/20 08:35:00 | 000,000,000 | ---D | C] -- C:\FastFolders
[2010/03/20 08:31:03 | 000,000,000 | ---D | C] -- C:\Program Files\Instant JPEG From RAW
[2010/03/16 11:31:55 | 000,000,000 | ---D | C] -- C:\Program Files\PhotomatixPro3
[2010/03/16 09:38:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Application Data\POP Peeper
[2010/03/16 09:38:07 | 000,000,000 | ---D | C] -- C:\Program Files\POP Peeper
[2010/03/16 09:23:44 | 000,000,000 | ---D | C] -- C:\Program Files\FastStone Image Viewer
[8 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/04/09 14:04:20 | 001,048,576 | -H-- | M] () -- C:\Documents and Settings\Administrator\NTUSER.DAT
[2010/04/06 02:14:31 | 000,176,028 | ---- | M] () -- C:\Documents and Settings\User\My Documents\logo_1267646534.jpg
[2010/04/06 02:00:00 | 000,000,330 | -H-- | M] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job
[2010/04/06 01:31:45 | 000,002,521 | ---- | M] () -- C:\Documents and Settings\User\Desktop\Outlook 2003.lnk
[2010/04/06 01:20:10 | 000,000,420 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{C9E5606D-A329-412A-9876-7D31BE043F0A}.job
[2010/04/06 01:18:35 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/04/06 01:18:27 | 000,127,964 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2010/04/06 01:17:57 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/04/06 01:17:50 | 1073,274,880 | -HS- | M] () -- C:\hiberfil.sys
[2010/04/05 10:13:09 | 000,262,144 | -H-- | M] () -- C:\Documents and Settings\NetworkService\NTUSER.DAT
[2010/04/05 10:13:09 | 000,229,376 | -H-- | M] () -- C:\Documents and Settings\LocalService\NTUSER.DAT
[2010/04/05 10:13:06 | 011,534,336 | -H-- | M] () -- C:\Documents and Settings\User\NTUSER.DAT
[2010/04/05 10:13:06 | 000,000,278 | -HS- | M] () -- C:\Documents and Settings\User\ntuser.ini
[2010/04/05 10:13:02 | 019,699,718 | -H-- | M] () -- C:\Documents and Settings\User\Local Settings\Application Data\IconCache.db
[2010/04/05 09:40:41 | 000,005,101 | ---- | M] () -- C:\Documents and Settings\User\Desktop\ark.rar
[2010/04/05 05:41:30 | 000,528,960 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010/04/05 05:41:30 | 000,446,200 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010/04/05 05:41:30 | 000,073,028 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010/04/04 11:07:41 | 016,409,960 | ---- | M] (Safer Networking Limited ) -- C:\Documents and Settings\User\Desktop\setup-spybotsd162.exe
[2010/04/04 08:14:31 | 000,000,366 | ---- | M] () -- C:\Documents and Settings\User\Desktop\Shortcut to gmer.zip.lnk
[2010/04/04 08:14:23 | 000,000,361 | ---- | M] () -- C:\Documents and Settings\User\Desktop\Shortcut to dds.scr.lnk
[2010/04/03 09:00:38 | 000,000,016 | -H-- | M] () -- C:\Documents and Settings\User\My Documents\SyncToy_f86d7b94-19f2-4798-a684-409239af7a88.dat
[2010/04/03 08:50:43 | 003,020,664 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\User\My Documents\SyncToySetupPackage_v21_x86.exe
[2010/04/02 11:46:16 | 000,001,487 | ---- | M] () -- C:\Documents and Settings\User\Desktop\WindowXplorer.lnk
[2010/04/02 11:21:23 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010/04/02 11:20:20 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010/04/02 11:07:44 | 000,000,281 | RHS- | M] () -- C:\boot.ini
[2010/04/02 11:02:19 | 000,000,382 | ---- | M] () -- C:\Documents and Settings\User\Desktop\ComboFix.exe.lnk
[2010/04/01 09:57:50 | 000,014,491 | ---- | M] () -- C:\Documents and Settings\User\My Documents\DxO.Optics.Pro.v5.0.4b-EQUiNOX.zip
[2010/03/31 03:05:22 | 000,026,112 | ---- | M] () -- C:\Documents and Settings\User\My Documents\BCC 2 Dear Cheryl.doc
[2010/03/31 02:25:53 | 000,002,497 | ---- | M] () -- C:\Documents and Settings\User\Desktop\Word 2003.lnk
[2010/03/30 09:16:01 | 000,180,608 | ---- | M] () -- C:\Documents and Settings\User\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010/03/30 09:15:18 | 001,786,608 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/03/29 08:07:15 | 000,366,592 | ---- | M] () -- C:\Documents and Settings\User\My Documents\Investec- Assets Liabilities (4).doc
[2010/03/29 06:45:16 | 157,642,705 | ---- | M] () -- C:\Documents and Settings\User\My Documents\lightroom3_b2_win_032310.zip
[2010/03/29 06:03:42 | 000,001,632 | ---- | M] () -- C:\Documents and Settings\User\Desktop\NikonTransfer.lnk
[2010/03/29 06:03:11 | 000,106,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ATL71.DLL
[2010/03/29 06:02:01 | 053,002,024 | ---- | M] () -- C:\Documents and Settings\User\My Documents\S-NKTR__-153WF-NSAEN-32BIT_.exe
[2010/03/27 05:30:15 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/03/26 08:22:17 | 000,961,158 | ---- | M] () -- C:\Documents and Settings\User\My Documents\Picture Merge Genius v2.7.2 by FFF.zip
[2010/03/26 08:18:03 | 000,000,062 | ---- | M] () -- C:\WINDOWS\System32\Days5.ini
[2010/03/26 04:54:09 | 000,033,792 | ---- | M] () -- C:\Documents and Settings\User\My Documents\Dear BCC Cheryl.doc
[2010/03/25 01:17:38 | 000,002,137 | ---- | M] () -- C:\Documents and Settings\User\Desktop\iTunes.lnk
[2010/03/25 01:00:26 | 000,000,562 | ---- | M] () -- C:\WINDOWS\tasks\Auslogics Boost Speed Disk Defrag Console Defragmentation.job
[2010/03/24 10:03:16 | 000,000,559 | ---- | M] () -- C:\Documents and Settings\User\Desktop\ApPDFSplitMerge.lnk
[2010/03/24 09:58:22 | 000,000,462 | ---- | M] () -- C:\Documents and Settings\User\Desktop\PictureMergeGenius.lnk
[2010/03/24 09:54:29 | 000,000,458 | ---- | M] () -- C:\Documents and Settings\User\Desktop\FreeHideFolder.lnk
[2010/03/24 09:50:23 | 000,000,560 | ---- | M] () -- C:\Documents and Settings\User\Desktop\PhotoScape.exe.lnk
[2010/03/24 09:45:06 | 016,205,198 | ---- | M] (Mooii) -- C:\Documents and Settings\User\My Documents\PhotoScapeSetup_V3.4.exe
[2010/03/24 09:29:16 | 000,000,665 | ---- | M] () -- C:\Documents and Settings\User\Desktop\DigitalImageTool1.4.lnk
[2010/03/24 09:25:51 | 000,000,471 | ---- | M] () -- C:\Documents and Settings\User\Desktop\BatchWatermark.lnk
[2010/03/24 09:22:55 | 000,066,548 | ---- | M] () -- C:\WINDOWS\Soap Bubbles.bmp
[2010/03/24 09:22:55 | 000,017,632 | ---- | M] () -- C:\WINDOWS\Coffee Bean.bmp
[2010/03/24 09:21:29 | 000,000,574 | ---- | M] () -- C:\Documents and Settings\User\Desktop\InstantPhotoEffects2.lnk
[2010/03/24 08:41:47 | 000,102,400 | ---- | M] () -- C:\WINDOWS\EarthView.scr
[2010/03/24 08:35:14 | 000,000,529 | ---- | M] () -- C:\Documents and Settings\User\Desktop\PC Optimizer Pro.lnk
[2010/03/24 08:34:17 | 000,000,475 | ---- | M] () -- C:\Documents and Settings\User\Desktop\Invoice!2023.2.lnk
[2010/03/24 08:10:04 | 000,000,406 | ---- | M] () -- C:\Documents and Settings\User\Desktop\PreviewExtractor.exe.lnk
[2010/03/24 08:06:53 | 000,000,501 | ---- | M] () -- C:\Documents and Settings\User\Desktop\Photo Frame.lnk
[2010/03/24 08:02:52 | 000,000,563 | ---- | M] () -- C:\Documents and Settings\User\Desktop\PowerExif.lnk
[2010/03/24 08:02:28 | 000,000,511 | ---- | M] () -- C:\Documents and Settings\User\Desktop\IExif 2.3.lnk
[2010/03/23 07:37:55 | 000,098,878 | ---- | M] () -- C:\Documents and Settings\User\My Documents\16345_193025064186_661724186_3918005_2760653_n.jpg
[2010/03/23 07:34:56 | 000,041,280 | ---- | M] () -- C:\Documents and Settings\User\My Documents\13635_165224072527_530492527_2772436_2986825_n.jpg
[2010/03/23 07:34:31 | 000,049,995 | ---- | M] () -- C:\Documents and Settings\User\My Documents\16459_166082077527_530492527_2780431_7200519_n.jpg
[2010/03/23 07:34:31 | 000,047,519 | ---- | M] () -- C:\Documents and Settings\User\My Documents\19958_288751662527_530492527_3435100_601550_n.jpg
[2010/03/23 04:38:02 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010/03/23 04:30:13 | 004,230,546 | ---- | M] () -- C:\Documents and Settings\User\My Documents\Seagate.FILE.RECOVERY.for.Windows.v2.0-YAG.rar
[2010/03/23 04:29:11 | 004,237,706 | ---- | M] (Seagate Recovery Services) -- C:\Documents and Settings\User\My Documents\Seagate frw_en_1.exe
[2010/03/23 04:21:37 | 000,001,986 | ---- | M] () -- C:\Documents and Settings\User\My Documents\Seagate.FILE.RECOVERY.for.Windows.v2.0-YAG.zip
[2010/03/23 01:10:30 | 000,000,250 | ---- | M] () -- C:\Documents and Settings\User\Desktop\Phonebook.url
[2010/03/22 15:11:47 | 000,143,360 | ---- | M] () -- C:\Documents and Settings\User\My Documents\UK Border Agency.doc
[2010/03/22 02:48:08 | 000,000,026 | ---- | M] () -- C:\WINDOWS\Zone.Identifier
[2010/03/21 06:49:21 | 000,104,448 | ---- | M] () -- C:\Documents and Settings\User\My Documents\No transit visa required for UK for South African passport holders.doc
[2010/03/20 10:00:11 | 000,000,604 | ---- | M] () -- C:\Documents and Settings\User\Desktop\Merge.lnk
[2010/03/20 08:01:04 | 000,002,495 | ---- | M] () -- C:\Documents and Settings\User\Desktop\Excel 2003.lnk
[2010/03/20 05:30:38 | 002,893,433 | ---- | M] () -- C:\Documents and Settings\User\My Documents\eZine45.pdf
[2010/03/19 01:14:26 | 000,043,478 | ---- | M] () -- C:\Documents and Settings\User\My Documents\18472_1102194894739_1822738141_210797_3910135_n.jpg
[2010/03/19 01:14:09 | 000,043,467 | ---- | M] () -- C:\Documents and Settings\User\My Documents\16441_1100382529431_1822738141_207467_2798392_n.jpg
[2010/03/19 01:13:22 | 000,025,556 | ---- | M] () -- C:\Documents and Settings\User\My Documents\6918_1061731083169_1822738141_134717_4929735_n.jpg
[2010/03/19 01:12:56 | 000,043,802 | ---- | M] () -- C:\Documents and Settings\User\My Documents\16441_1098829810614_1822738141_204741_7308249_n.jpg
[2010/03/19 01:12:00 | 000,059,136 | ---- | M] () -- C:\Documents and Settings\User\My Documents\18372_1112066181515_1822738141_231226_346590_n.jpg
[2010/03/19 01:11:12 | 000,030,421 | ---- | M] () -- C:\Documents and Settings\User\My Documents\16441_1098273796714_1822738141_203890_4354381_n.jpg
[2010/03/19 01:10:53 | 000,036,020 | ---- | M] () -- C:\Documents and Settings\User\My Documents\18472_1102195974766_1822738141_210800_1078247_n.jpg
[2010/03/19 01:10:14 | 000,045,797 | ---- | M] () -- C:\Documents and Settings\User\My Documents\6918_1062466941565_1822738141_135989_5480116_n.jpg
[2010/03/19 01:10:13 | 000,038,394 | ---- | M] () -- C:\Documents and Settings\User\My Documents\25360_1145742183394_1822738141_292111_1223932_n.jpg
[2010/03/16 12:02:16 | 000,000,114 | ---- | M] () -- C:\WINDOWS\System32\prsgrc.tgz
[2010/03/16 12:02:15 | 000,000,086 | ---- | M] () -- C:\WINDOWS\System32\ssprs.tgz
[2010/03/16 12:02:14 | 000,000,218 | ---- | M] () -- C:\WINDOWS\System32\jp187dv.tgz
[2010/03/16 11:31:58 | 000,001,655 | ---- | M] () -- C:\Documents and Settings\User\Desktop\PhotomatixPro3.lnk
[2010/03/15 18:27:12 | 000,081,331 | ---- | M] () -- C:\Documents and Settings\User\My Documents\syotti1.jpg
[8 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/04/10 21:11:03 | 000,297,989 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\_INST32I.EX_
[2010/04/10 21:11:03 | 000,181,565 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\_sys1.cab
[2010/04/10 21:11:03 | 000,122,880 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\PATCH98.EXE
[2010/04/10 21:11:03 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\Si3112r\Silr.exe
[2010/04/10 21:11:03 | 000,057,588 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\setup.ins
[2010/04/10 21:11:03 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\Si3112r\HUADRV.DLL
[2010/04/10 21:11:03 | 000,034,816 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\Si3112r\Software Release Notes.doc
[2010/04/10 21:11:03 | 000,025,536 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\Si3112r\Si3112r.inf
[2010/04/10 21:11:03 | 000,020,560 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\Si3112r\SIISUPP.VXD
[2010/04/10 21:11:03 | 000,004,679 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\lang.dat
[2010/04/10 21:11:03 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\Si3112r\TxtSetup.oem
[2010/04/10 21:11:03 | 000,004,281 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\_user1.hdr
[2010/04/10 21:11:03 | 000,003,905 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\_sys1.hdr
[2010/04/10 21:11:03 | 000,003,677 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\data1.hdr
[2010/04/10 21:11:03 | 000,000,943 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\_user1.cab
[2010/04/10 21:11:03 | 000,000,590 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\layout.bin
[2010/04/10 21:11:03 | 000,000,469 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\data1.cab
[2010/04/10 21:11:03 | 000,000,450 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\os.dat
[2010/04/10 21:11:03 | 000,000,325 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\SETUP1.ISS
[2010/04/10 21:11:03 | 000,000,325 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\setup.iss
[2010/04/10 21:11:03 | 000,000,202 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\Si3112r\KEY.INI
[2010/04/10 21:11:03 | 000,000,113 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\DATA.TAG
[2010/04/10 21:11:03 | 000,000,099 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\SETUP.INI
[2010/04/10 21:11:03 | 000,000,049 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\setup.lid
[2010/04/06 02:16:00 | 000,176,028 | ---- | C] () -- C:\Documents and Settings\User\My Documents\logo_1267646534.jpg
[2010/04/05 09:40:41 | 000,005,101 | ---- | C] () -- C:\Documents and Settings\User\Desktop\ark.rar
[2010/04/04 08:14:31 | 000,000,366 | ---- | C] () -- C:\Documents and Settings\User\Desktop\Shortcut to gmer.zip.lnk
[2010/04/04 08:14:23 | 000,000,361 | ---- | C] () -- C:\Documents and Settings\User\Desktop\Shortcut to dds.scr.lnk
[2010/04/03 09:00:38 | 000,000,016 | -H-- | C] () -- C:\Documents and Settings\User\My Documents\SyncToy_f86d7b94-19f2-4798-a684-409239af7a88.dat
[2010/04/02 11:07:43 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2010/04/02 11:07:40 | 000,260,272 | ---- | C] () -- C:\cmldr
[2010/04/02 11:03:29 | 000,261,632 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010/04/02 11:03:29 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010/04/02 11:03:29 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010/04/02 11:03:29 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010/04/02 11:03:29 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010/04/02 11:02:19 | 000,000,382 | ---- | C] () -- C:\Documents and Settings\User\Desktop\ComboFix.exe.lnk
[2010/04/01 09:57:49 | 000,014,491 | ---- | C] () -- C:\Documents and Settings\User\My Documents\DxO.Optics.Pro.v5.0.4b-EQUiNOX.zip
[2010/03/31 03:05:21 | 000,026,112 | ---- | C] () -- C:\Documents and Settings\User\My Documents\BCC 2 Dear Cheryl.doc
[2010/03/30 10:42:55 | 002,453,053 | ---- | C] () -- C:\Documents and Settings\User\My Documents\_20100216_37_NEF_IJFR copy.jpg
[2010/03/30 10:42:55 | 000,006,503 | ---- | C] () -- C:\Documents and Settings\User\My Documents\zrip1117.zip
[2010/03/30 10:42:54 | 000,440,832 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Zelle Unit 7 Fin 300 -2009.ppt
[2010/03/30 10:42:50 | 003,744,768 | ---- | C] () -- C:\Documents and Settings\User\My Documents\zelle golf coaching.pub
[2010/03/30 10:42:48 | 000,082,944 | ---- | C] () -- C:\Documents and Settings\User\My Documents\zelle coaching.pub
[2010/03/30 10:42:48 | 000,037,376 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Zelle AC Cash flow statement.ppt
[2010/03/30 10:42:47 | 000,696,320 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Zelle 21.pub
[2010/03/30 10:42:46 | 000,188,928 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Zel Unit 9 (Second Semester) 2008 - Additional examples.ppt
[2010/03/30 10:42:45 | 000,532,480 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Zel Unit 8 Fin 300 - 2009.ppt
[2010/03/30 10:42:43 | 000,304,640 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Zel Unit 1 Fin 300 - PPP.ppt
[2010/03/30 10:42:42 | 000,550,912 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Zel Inventory Lec 1 2009.ppt
[2010/03/30 10:42:39 | 000,126,464 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Zel IAS12_2009_part_two0.ppt
[2010/03/30 10:42:37 | 000,098,816 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Zel IAS12_2009_part_one2.ppt
[2010/03/30 10:42:27 | 000,217,088 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Zel Audit process,planning and risk Lecture 2.ppt
[2010/03/30 10:42:26 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Your Vodacom Statement.pdf
[2010/03/30 10:42:25 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Your Aug 2009 Vodacom Statement.pdf
[2010/03/30 10:42:13 | 000,025,088 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Yahoo Details.doc
[2010/03/30 10:42:02 | 001,723,061 | ---- | C] () -- C:\Documents and Settings\User\My Documents\www.photoshoproadmap.pdf
[2010/03/30 10:41:56 | 000,024,576 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Winter Promo.doc
[2010/03/30 10:41:31 | 026,970,569 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Windows XP All-in-One Desk Reference for Dummies 2nd Edition.pdf
[2010/03/30 10:41:31 | 000,903,980 | ---- | C] () -- C:\Documents and Settings\User\My Documents\weddings.pdf
[2010/03/30 10:41:31 | 000,036,352 | ---- | C] () -- C:\Documents and Settings\User\My Documents\WGSA Template.doc
[2010/03/30 10:41:31 | 000,026,624 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Why Golfers.doc
[2010/03/30 10:41:31 | 000,024,064 | ---- | C] () -- C:\Documents and Settings\User\My Documents\WIN a R950 photoshoot for only R2.doc
[2010/03/30 10:41:31 | 000,014,558 | ---- | C] () -- C:\Documents and Settings\User\My Documents\WGSA Template.pdf
[2010/03/30 10:41:26 | 000,016,384 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Weddings Colour Prints.xls
[2010/03/30 10:41:17 | 000,479,366 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Wedding prices.pdf
[2010/03/30 10:41:10 | 000,194,048 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Wedding Prices Johannesburg Professional Photographer.doc
[2010/03/30 10:41:05 | 000,024,576 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Wedding Photography Release Form.doc
[2010/03/30 10:41:00 | 011,375,104 | ---- | C] () -- C:\Documents and Settings\User\My Documents\wedding pg 2.pub
[2010/03/30 10:40:56 | 000,683,919 | ---- | C] () -- C:\Documents and Settings\User\My Documents\wedding pg 2.pdf
[2010/03/30 10:40:44 | 010,070,528 | ---- | C] () -- C:\Documents and Settings\User\My Documents\wedding pg 1.pub
[2010/03/30 10:40:42 | 002,135,231 | ---- | C] () -- C:\Documents and Settings\User\My Documents\wedding pg 1.pdf
[2010/03/30 10:40:41 | 000,141,632 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Wedding Page1.jpg
[2010/03/30 10:40:39 | 000,031,776 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Wedding Packages Sandton.pdf
[2010/03/30 10:40:23 | 000,027,136 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Wedding Packages Sandton.doc
[2010/03/30 10:40:21 | 000,051,200 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Wedding Packages Oct.2008.doc
[2010/03/30 10:40:20 | 005,519,758 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Wedding Packages 2008 .pdf
[2010/03/30 10:40:20 | 000,027,648 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Wedding Packages 2007-8.doc
[2010/03/30 10:40:16 | 000,027,136 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Wedding Miss SA.doc
[2010/03/30 10:40:10 | 007,828,480 | ---- | C] () -- C:\Documents and Settings\User\My Documents\wedding front pg.pub
[2010/03/30 10:39:55 | 001,441,688 | ---- | C] () -- C:\Documents and Settings\User\My Documents\wedding front pg.pdf
[2010/03/30 10:39:52 | 002,647,552 | ---- | C] () -- C:\Documents and Settings\User\My Documents\wed 4.doc
[2010/03/30 10:39:52 | 000,540,672 | ---- | C] () -- C:\Documents and Settings\User\My Documents\wed 5.doc
[2010/03/30 10:39:51 | 000,028,672 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Washer Fill Problems.doc
[2010/03/30 10:39:46 | 000,024,064 | ---- | C] () -- C:\Documents and Settings\User\My Documents\WA3B D3BE 3703 936C F5D7 DD41.doc
[2010/03/30 10:39:40 | 000,028,160 | ---- | C] () -- C:\Documents and Settings\User\My Documents\VW Combi CONTRACT.doc
[2010/03/30 10:39:36 | 008,752,358 | ---- | C] () -- C:\Documents and Settings\User\My Documents\VoIP for Dummies.pdf
[2010/03/30 10:39:36 | 000,175,547 | ---- | C] () -- C:\Documents and Settings\User\My Documents\VodacomInteractiveBill_Sep2009.efa
[2010/03/30 10:39:36 | 000,166,555 | ---- | C] () -- C:\Documents and Settings\User\My Documents\VodacomInteractiveBill_Sep2008.efa
[2010/03/30 10:39:35 | 000,178,667 | ---- | C] () -- C:\Documents and Settings\User\My Documents\VodacomInteractiveBill_Nov2009.efa
[2010/03/30 10:39:35 | 000,166,587 | ---- | C] () -- C:\Documents and Settings\User\My Documents\VodacomInteractiveBill_Oct2008.efa
[2010/03/30 10:39:33 | 000,166,619 | ---- | C] () -- C:\Documents and Settings\User\My Documents\VodacomInteractiveBill_Nov2008.efa
[2010/03/30 10:39:30 | 000,170,203 | ---- | C] () -- C:\Documents and Settings\User\My Documents\VodacomInteractiveBill_May2009.efa
[2010/03/30 10:39:29 | 000,161,723 | ---- | C] () -- C:\Documents and Settings\User\My Documents\VodacomInteractiveBill_May2008.efa
[2010/03/30 10:39:26 | 000,360,875 | ---- | C] () -- C:\Documents and Settings\User\My Documents\VodacomInteractiveBill_Mar2010.efa
[2010/03/30 10:39:24 | 000,170,203 | ---- | C] () -- C:\Documents and Settings\User\My Documents\VodacomInteractiveBill_Mar2009.efa
[2010/03/30 10:39:24 | 000,170,171 | ---- | C] () -- C:\Documents and Settings\User\My Documents\VodacomInteractiveBill_Jun2009.efa
[2010/03/30 10:39:24 | 000,161,643 | ---- | C] () -- C:\Documents and Settings\User\My Documents\VodacomInteractiveBill_Mar2008.efa
[2010/03/30 10:39:23 | 000,311,515 | ---- | C] () -- C:\Documents and Settings\User\My Documents\VodacomInteractiveBill_Dec2008.efa
[2010/03/30 10:39:23 | 000,178,731 | ---- | C] () -- C:\Documents and Settings\User\My Documents\VodacomInteractiveBill_Feb2010.efa
[2010/03/30 10:39:23 | 000,178,715 | ---- | C] () -- C:\Documents and Settings\User\My Documents\VodacomInteractiveBill_Jan2010.efa
[2010/03/30 10:39:23 | 000,178,651 | ---- | C] () -- C:\Documents and Settings\User\My Documents\VodacomInteractiveBill_Dec2009.efa
[2010/03/30 10:39:23 | 000,171,691 | ---- | C] () -- C:\Documents and Settings\User\My Documents\VodacomInteractiveBill_Aug2009.efa
[2010/03/30 10:39:23 | 000,171,675 | ---- | C] () -- C:\Documents and Settings\User\My Documents\VodacomInteractiveBill_Jul2009.efa
[2010/03/30 10:39:23 | 000,170,219 | ---- | C] () -- C:\Documents and Settings\User\My Documents\VodacomInteractiveBill_Apr2009.efa
[2010/03/30 10:39:23 | 000,168,523 | ---- | C] () -- C:\Documents and Settings\User\My Documents\VodacomInteractiveBill_Aug2008.efa
[2010/03/30 10:39:23 | 000,166,651 | ---- | C] () -- C:\Documents and Settings\User\My Documents\VodacomInteractiveBill_Jul2008.efa
[2010/03/30 10:39:23 | 000,166,571 | ---- | C] () -- C:\Documents and Settings\User\My Documents\VodacomInteractiveBill_Jan2009.efa
[2010/03/30 10:39:23 | 000,166,539 | ---- | C] () -- C:\Documents and Settings\User\My Documents\VodacomInteractiveBill_Feb2009.efa
[2010/03/30 10:39:23 | 000,164,011 | ---- | C] () -- C:\Documents and Settings\User\My Documents\VodacomInteractiveBill_Jun2007.efa
[2010/03/30 10:39:23 | 000,161,707 | ---- | C] () -- C:\Documents and Settings\User\My Documents\VodacomInteractiveBill_Feb2008.efa
[2010/03/30 10:39:22 | 000,161,707 | ---- | C] () -- C:\Documents and Settings\User\My Documents\VodacomInteractiveBill_Apr2008.efa
[2010/03/30 10:39:12 | 000,081,408 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Vodacom August.doc
[2010/03/30 10:38:58 | 008,837,374 | ---- | C] () -- C:\Documents and Settings\User\My Documents\version_cue_cs3_client_310.dmg
[2010/03/30 10:38:58 | 000,024,064 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Valentines Special.doc
[2010/03/30 10:38:56 | 000,395,119 | ---- | C] () -- C:\Documents and Settings\User\My Documents\valentine0016_m034uk.pdf
[2010/03/30 10:38:50 | 000,237,917 | ---- | C] () -- C:\Documents and Settings\User\My Documents\valentine0005_r014uk.pdf
[2010/03/30 10:38:41 | 000,850,795 | ---- | C] () -- C:\Documents and Settings\User\My Documents\USSA GOLF CHAMPIONSHIP 2009 INVITATION.pdf
[2010/03/30 10:38:39 | 000,707,930 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Untitled2.pdf
[2010/03/30 10:38:38 | 000,541,001 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Untitled1a.pdf
[2010/03/30 10:38:37 | 001,638,912 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Unreal.pps
[2010/03/30 10:38:37 | 000,126,464 | ---- | C] () -- C:\Documents and Settings\User\My Documents\University of Johannesburg.doc
[2010/03/30 10:38:37 | 000,026,163 | ---- | C] () -- C:\Documents and Settings\User\My Documents\University of Johannesburg - Student Portal.pdf
[2010/03/30 10:38:36 | 000,906,240 | ---- | C] () -- C:\Documents and Settings\User\My Documents\UJ Work Permit.doc
[2010/03/30 10:38:36 | 000,310,272 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Unit 2 Fin 300 - 2009.ppt
[2010/03/30 10:38:35 | 002,024,170 | ---- | C] () -- C:\Documents and Settings\User\My Documents\UJ Refund.pdf
[2010/03/30 10:38:30 | 001,637,736 | ---- | C] () -- C:\Documents and Settings\User\My Documents\UJ Refund Golf .pdf
[2010/03/30 10:38:19 | 000,463,872 | ---- | C] () -- C:\Documents and Settings\User\My Documents\UJ Claim Form.doc
[2010/03/30 10:38:14 | 000,017,920 | ---- | C] () -- C:\Documents and Settings\User\My Documents\TV Channelsxls.xls
[2010/03/30 10:38:13 | 000,785,147 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Trainee Expression of Interest Jacques E. MULLER.pdf
[2010/03/30 10:38:13 | 000,098,304 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Tutoriaal 2 Oplossing.doc
[2010/03/30 10:38:13 | 000,029,184 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Tutoriaal 2 Vraag.doc
[2010/03/30 10:38:13 | 000,028,672 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Tutorial 2 Question.doc
[2010/03/30 10:38:13 | 000,024,576 | ---- | C] () -- C:\Documents and Settings\User\My Documents\To whom it may concern.doc
[2010/03/30 10:38:13 | 000,024,576 | ---- | C] () -- C:\Documents and Settings\User\My Documents\To all wedding couples.doc
[2010/03/30 10:38:13 | 000,022,474 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Transactional-History.xls
[2010/03/30 10:38:13 | 000,015,809 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Trainee expression of interest.docx
[2010/03/30 10:38:11 | 000,736,768 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Tiger on the run.xls
[2010/03/30 10:38:04 | 004,436,992 | ---- | C] () -- C:\Documents and Settings\User\My Documents\TherapythorughLove.pps
[2010/03/30 10:38:04 | 000,022,316 | ---- | C] () -- C:\Documents and Settings\User\My Documents\The WinZip Quick Start Guide_.pdf
[2010/03/30 10:38:00 | 001,463,808 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Stamp in ACROBAT.doc
[2010/03/30 10:38:00 | 000,081,331 | ---- | C] () -- C:\Documents and Settings\User\My Documents\syotti1.jpg
[2010/03/30 10:38:00 | 000,023,552 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Swagg old Mutual.doc
[2010/03/30 10:38:00 | 000,013,824 | ---- | C] () -- C:\Documents and Settings\User\My Documents\statement-I0570804-5.xls
[2010/03/30 10:37:59 | 000,034,894 | ---- | C] () -- C:\Documents and Settings\User\My Documents\St.pdf
[2010/03/30 10:37:56 | 000,073,549 | ---- | C] () -- C:\Documents and Settings\User\My Documents\ss.pdf
[2010/03/30 10:37:55 | 000,400,093 | ---- | C] () -- C:\Documents and Settings\User\My Documents\SEPh Front Page .pdf
[2010/03/30 10:37:55 | 000,121,856 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Solution.doc
[2010/03/30 10:37:55 | 000,025,600 | ---- | C] () -- C:\Documents and Settings\User\My Documents\SEPho FB.doc
[2010/03/30 10:37:55 | 000,024,064 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Sharp 2.03 060200009ppbmgjflaajpokhn.doc
[2010/03/30 10:37:55 | 000,024,064 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Self Motivation.doc
[2010/03/30 10:37:55 | 000,020,480 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Sites for Serials.doc
[2010/03/30 10:37:54 | 000,732,237 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Scanned at 2009-09-02 09-19 AM (2).pdf
[2010/03/30 10:37:54 | 000,728,575 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Scanned at 2009-09-02 09-19 AM.pdf
[2010/03/30 10:37:54 | 000,594,582 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Scanned at 2009-10-15 16-56 PM.pdf - Adobe Acrobat Professional.pdf
[2010/03/30 10:37:52 | 000,069,632 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Scanned at 2009-02-12 11-39 AM.doc
[2010/03/30 10:37:51 | 000,282,756 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Scanned at 2008-10-27 14-00 PM.pdf
[2010/03/30 10:37:50 | 000,245,619 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Scanned at 2008-10-27 14-00 PM (3).pdf
[2010/03/30 10:37:50 | 000,232,656 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Scanned at 2008-10-27 14-00 PM (2).pdf
[2010/03/30 10:37:50 | 000,226,185 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Scanned at 2008-10-27 14-00 PM (4).pdf
[2010/03/30 10:37:40 | 000,956,689 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Scanned at 2008-10-27 13-52 PM.pdf
[2010/03/30 10:37:40 | 000,713,728 | ---- | C] () -- C:\Documents and Settings\User\My Documents\SB800 Nikon unveils Speedlight SB.doc
[2010/03/30 10:37:40 | 000,070,144 | ---- | C] () -- C:\Documents and Settings\User\My Documents\SB800 Tips How To Slave an SB.doc
[2010/03/30 10:37:39 | 000,317,448 | ---- | C] () -- C:\Documents and Settings\User\My Documents\SARS ITR12ComprehensiveGuide2009v5_web2.pdf
[2010/03/30 10:37:39 | 000,092,795 | ---- | C] () -- C:\Documents and Settings\User\My Documents\SARS EXTREMELY IMPORTANT.pdf
[2010/03/30 10:37:39 | 000,042,496 | ---- | C] () -- C:\Documents and Settings\User\My Documents\SARS EXTREMELY IMPORTANT.doc
[2010/03/30 10:37:37 | 000,382,976 | ---- | C] () -- C:\Documents and Settings\User\My Documents\SARS 2009 Query.doc
[2010/03/30 10:37:29 | 001,238,031 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Sanlam 2008 .pdf
[2010/03/30 10:37:28 | 002,053,689 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Sandton E P IDC .pdf
[2010/03/30 10:37:28 | 001,251,450 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Rules Sheets - Eden.pdf
[2010/03/30 10:37:28 | 000,131,584 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Sandton Event Photographer Letter.doc
[2010/03/30 10:37:28 | 000,024,064 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Sandton EPhot 37,5% .doc
[2010/03/30 10:37:27 | 001,375,971 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Rule Sheets - Eden.pdf
[2010/03/30 10:37:27 | 000,064,512 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Revenue & Receipt Cycle - Lecture 1.ppt
[2010/03/30 10:37:27 | 000,038,912 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Raaffterl.doc
[2010/03/30 10:37:27 | 000,035,840 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Raaff BCC.doc
[2010/03/30 10:37:27 | 000,024,576 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Roelien Lamprecht March 9 at 7.doc
[2010/03/30 10:37:26 | 000,020,480 | ---- | C] () -- C:\Documents and Settings\User\My Documents\R950 shoot comp.doc
[2010/03/30 10:37:24 | 000,108,450 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Protea G O L F Emblems 2.mht
[2010/03/30 10:37:24 | 000,083,968 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Protea Golf Emblems - Official.doc
[2010/03/30 10:37:24 | 000,078,848 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Protea G O L F Emblems 3.doc
[2010/03/30 10:37:24 | 000,065,880 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Protea Golf Emblems - Official.pdf
[2010/03/30 10:37:24 | 000,045,944 | ---- | C] () -- C:\Documents and Settings\User\My Documents\PwC Acceptance.pdf
[2010/03/30 10:37:24 | 000,045,056 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Protea logo.doc
[2010/03/30 10:37:24 | 000,040,960 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Quotes.doc
[2010/03/30 10:37:24 | 000,024,576 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Quotes 2.doc
[2010/03/30 10:37:23 | 000,028,672 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Process Costing.doc
[2010/03/30 10:37:15 | 000,027,136 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Pro Photographer Joke.doc
[2010/03/30 10:37:12 | 000,022,245 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Printing _The WinZip Quick Start Guide_.pdf
[2010/03/30 10:37:10 | 000,150,528 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Price list 3.pub
[2010/03/30 10:37:08 | 000,101,376 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Price list 2.pub
[2010/03/30 10:37:06 | 002,078,208 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Price list 1.pub
[2010/03/30 10:37:04 | 006,531,440 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Post Office Rates_2009.pdf
[2010/03/30 10:37:04 | 000,071,168 | ---- | C] () -- C:\Documents and Settings\User\My Documents\POP Waterberry Hill 2009.doc
[2010/03/30 10:37:04 | 000,044,032 | ---- | C] () -- C:\Documents and Settings\User\My Documents\POP Spinning Reel Pay beneficiary.doc
[2010/03/30 10:37:04 | 000,041,984 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Port Alfred Eating.doc
[2010/03/30 10:37:04 | 000,026,494 | ---- | C] () -- C:\Documents and Settings\User\My Documents\porsche.jpg
[2010/03/30 10:37:04 | 000,016,896 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Portfolio Packages.xls
[2010/03/30 10:37:04 | 000,016,384 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Port Alfred.xls
[2010/03/30 10:37:04 | 000,010,158 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Port Alfred.pdf
[2010/03/30 10:37:03 | 000,069,632 | ---- | C] () -- C:\Documents and Settings\User\My Documents\POP City Johannesburg 22 Oct 2008.doc
[2010/03/30 10:37:03 | 000,046,592 | ---- | C] () -- C:\Documents and Settings\User\My Documents\POP Discount Books 2009.doc
[2010/03/30 10:37:01 | 000,402,944 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Physical inventory checklist.doc
[2010/03/30 10:37:01 | 000,044,544 | ---- | C] () -- C:\Documents and Settings\User\My Documents\POP Boknes Pay once.doc
[2010/03/30 10:37:01 | 000,020,480 | ---- | C] () -- C:\Documents and Settings\User\My Documents\photo_model_release_form_sample.doc
[2010/03/30 10:37:00 | 000,024,576 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Photomatix 3 Photo Bracketed Photomatix.doc
[2010/03/30 10:37:00 | 000,024,064 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Photoframemaker.doc
[2010/03/30 10:36:56 | 000,024,064 | ---- | C] () -- C:\Documents and Settings\User\My Documents\photoframemaker 2.8 .doc
[2010/03/30 10:36:47 | 000,025,088 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Photo Model Release Form.doc
[2010/03/30 10:36:41 | 001,848,535 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Philemon and his new scooter.wmv
[2010/03/30 10:36:41 | 001,828,693 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Philemon and his new scooter.zip
[2010/03/30 10:36:41 | 000,067,584 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Pay once.doc
[2010/03/30 10:36:40 | 000,396,210 | ---- | C] () -- C:\Documents and Settings\User\My Documents\NView XP .pdf
[2010/03/30 10:36:40 | 000,256,187 | ---- | C] () -- C:\Documents and Settings\User\My Documents\NVIDIA nView Technology.pdf
[2010/03/30 10:36:40 | 000,155,007 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Omega Photography - Model Price List 2009.pdf
[2010/03/30 10:36:40 | 000,020,992 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Norwyn N Nerisha.doc
[2010/03/30 10:36:38 | 000,189,973 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Nokia_1208_UG_en.pdf
[2010/03/30 10:36:36 | 000,473,538 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Nokia 1112 Manual_UG_en.pdf
[2010/03/30 10:36:36 | 000,324,243 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Nina5.jpg
[2010/03/30 10:36:36 | 000,212,089 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Nina.jpg
[2010/03/30 10:35:37 | 038,586,780 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Nikonian e-Mag.pdf
[2010/03/30 10:35:30 | 000,019,968 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Nikon D80 Settings.doc
[2010/03/30 10:35:27 | 003,863,799 | ---- | C] () -- C:\Documents and Settings\User\My Documents\NIKKOR_LENSES_EN.pdf
[2010/03/30 10:35:27 | 000,026,112 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Name.doc
[2010/03/30 10:35:27 | 000,024,064 | ---- | C] () -- C:\Documents and Settings\User\My Documents\NIK !!.doc
[2010/03/30 10:35:19 | 003,147,741 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Morpheus_Photo_Mixer_3_1_.0.rar
[2010/03/30 10:35:19 | 000,024,064 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Moosa insert.doc
[2010/03/30 10:35:18 | 000,033,638 | ---- | C] () -- C:\Documents and Settings\User\My Documents\model_release7 .pdf
[2010/03/30 10:35:08 | 000,021,504 | ---- | C] () -- C:\Documents and Settings\User\My Documents\ModelReleaseMinor.doc
[2010/03/30 10:35:06 | 000,070,405 | ---- | C] () -- C:\Documents and Settings\User\My Documents\modelrelease.pdf
[2010/03/30 10:35:05 | 000,021,504 | ---- | C] () -- C:\Documents and Settings\User\My Documents\ModelRelease.doc
[2010/03/30 10:34:56 | 000,070,736 | ---- | C] () -- C:\Documents and Settings\User\My Documents\model-release-form.pdf
[2010/03/30 10:34:54 | 006,660,224 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Model Samples.pdf
[2010/03/30 10:34:54 | 000,099,911 | ---- | C] () -- C:\Documents and Settings\User\My Documents\MODEL RELEAS11.jpg
[2010/03/30 10:34:54 | 000,029,480 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Model Release Form 4 .pdf
[2010/03/30 10:34:54 | 000,026,624 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Model Release 8.doc
[2010/03/30 10:34:54 | 000,026,112 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Model Release.doc
[2010/03/30 10:34:54 | 000,026,112 | ---- | C] () -- C:\Documents and Settings\User\My Documents\MODEL RELEASE 6.doc
[2010/03/30 10:34:54 | 000,005,912 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Model Release Form 2.csv
[2010/03/30 10:34:53 | 000,026,624 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Model Rel. 20% model .doc
[2010/03/30 10:34:53 | 000,026,112 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Model Rel.doc
[2010/03/30 10:34:53 | 000,024,576 | ---- | C] () -- C:\Documents and Settings\User\My Documents\MODEL RELEAS1.doc
[2010/03/30 10:34:53 | 000,024,064 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Michelle C dankie.doc
[2010/03/30 10:34:53 | 000,023,040 | ---- | C] () -- C:\Documents and Settings\User\My Documents\MODEL AGREEMENT-sandton.doc
[2010/03/30 10:34:52 | 000,039,936 | ---- | C] () -- C:\Documents and Settings\User\My Documents\member application form.doc
[2010/03/30 10:34:50 | 000,043,008 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Meester Brecher Inligting.xls
[2010/03/30 10:34:45 | 000,049,664 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Meal Voucher.pub
[2010/03/30 10:34:44 | 000,173,568 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Marathon Pic prices.doc
[2010/03/30 10:34:44 | 000,027,136 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Marathon Letter doc.doc
[2010/03/30 10:34:43 | 005,483,793 | ---- | C] () -- C:\Documents and Settings\User\My Documents\LucisArt_3_EDSE_Win32_Demo.zip
[2010/03/30 10:34:43 | 000,213,426 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Louise I.D..pdf
[2010/03/30 10:34:42 | 000,368,640 | ---- | C] () -- C:\Documents and Settings\User\My Documents\LL Letter Lizelle Muller - UJ.doc
[2010/03/30 10:34:38 | 000,351,744 | ---- | C] () -- C:\Documents and Settings\User\My Documents\LL Golf NWGT Stroke Ave Final.doc
[2010/03/30 10:34:38 | 000,091,648 | ---- | C] () -- C:\Documents and Settings\User\My Documents\LL Gauteng Letter for Lizelle Muller.doc
[2010/03/30 10:34:38 | 000,082,432 | ---- | C] () -- C:\Documents and Settings\User\My Documents\LL Letter for Lizelle WGSA 2008 .doc
[2010/03/30 10:34:38 | 000,034,816 | ---- | C] () -- C:\Documents and Settings\User\My Documents\LL CV 10-2008.doc
[2010/03/30 10:34:35 | 001,324,471 | ---- | C] () -- C:\Documents and Settings\User\My Documents\LizellePics.pdf
[2010/03/30 10:34:34 | 000,283,809 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle.pdf
[2010/03/30 10:34:17 | 000,048,173 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle+IDC+2009[1].pdf
[2010/03/30 10:34:16 | 005,226,041 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle UJ Sport Ach..pdf
[2010/03/30 10:34:16 | 000,144,430 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle Team SA 1 .pdf
[2010/03/30 10:34:16 | 000,128,000 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle Semestermarks_Edulink.xls
[2010/03/30 10:34:14 | 000,256,057 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle Passport.pdf
[2010/03/30 10:34:14 | 000,137,956 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle Portrait .pdf
[2010/03/30 10:34:14 | 000,129,240 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle S.A.1.pdf
[2010/03/30 10:34:14 | 000,072,796 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle Results July 2008.pdf
[2010/03/30 10:34:13 | 000,008,813 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle Muller U.J. Sport Application 200800003.doc
[2010/03/30 10:34:03 | 003,219,629 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle Muller U.J. Sport Application 2008.pdf
[2010/03/30 10:33:49 | 003,645,025 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle Muller C.V. 2009 1.pdf
[2010/03/30 10:33:49 | 000,337,987 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle Muller SASSU 2008.doc.pdf
[2010/03/30 10:33:49 | 000,088,064 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle Muller Payment 25-01.doc
[2010/03/30 10:33:37 | 003,213,754 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle Muller B.Com.Acc.jpg
[2010/03/30 10:33:36 | 001,486,797 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle Muller B.Com.Acc.Cum Laude.pdf
[2010/03/30 10:33:18 | 004,560,255 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle Muller 2008.pdf
[2010/03/30 10:33:18 | 001,267,388 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle IDC Prop1.pdf
[2010/03/30 10:33:18 | 001,221,481 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle IDC.pdf
[2010/03/30 10:33:18 | 001,211,176 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle IDC Outfits.pdf
[2010/03/30 10:33:18 | 000,180,736 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle KMR2C21Test1Marks.xls
[2010/03/30 10:33:17 | 000,419,563 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle I.D..pdf
[2010/03/30 10:33:17 | 000,031,744 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle IDC 2009.doc
[2010/03/30 10:33:12 | 000,026,624 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle Golfing Gals answers.doc
[2010/03/30 10:32:56 | 004,825,670 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle Cleveland.pdf
[2010/03/30 10:32:56 | 000,622,475 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle E.L..pdf
[2010/03/30 10:32:56 | 000,622,474 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle E L Photo .pdf
[2010/03/30 10:32:56 | 000,119,808 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle Edulink0.xls
[2010/03/30 10:32:55 | 000,231,424 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle Bis Marks.xls
[2010/03/30 10:32:47 | 000,026,112 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle BCC Speech 2009.doc
[2010/03/30 10:32:38 | 000,078,848 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle 2008 Academic History.doc
[2010/03/30 10:32:30 | 001,384,848 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle 2.pdf
[2010/03/30 10:32:30 | 001,383,403 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle 200001.pdf
[2010/03/30 10:32:30 | 000,336,179 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle & Bolle.pdf
[2010/03/30 10:32:30 | 000,029,184 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle - Golf Achievements Sept. 2008.doc
[2010/03/30 10:32:29 | 001,400,385 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizelle IDC Request 2008.pdf
[2010/03/30 10:32:29 | 001,059,143 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Lizell Team SA pdf.pdf
[2010/03/30 10:32:29 | 000,198,140 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Letter Lizelle Muller - UJ.pdf
[2010/03/30 10:32:29 | 000,072,192 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Liefste Lizelle.doc
[2010/03/30 10:32:28 | 000,030,963 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Letter for Lizelle WGSA 2008 .pdf
[2010/03/30 10:32:25 | 000,088,064 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Letter for Lizelle Mulle to play in 72 Hole Teams Championship.doc
[2010/03/30 10:32:19 | 000,053,248 | ---- | C] () -- C:\Documents and Settings\User\My Documents\LETTER CONFIRM RECEIPT.doc
[2010/03/30 10:32:03 | 001,514,830 | ---- | C] () -- C:\Documents and Settings\User\My Documents\L visaform_tpl3.rtf
[2010/03/30 10:31:54 | 000,028,160 | ---- | C] () -- C:\Documents and Settings\User\My Documents\L UJ Tutoring.doc
[2010/03/30 10:31:48 | 002,488,652 | ---- | C] () -- C:\Documents and Settings\User\My Documents\L UJ Sports Application 2009 .pdf
[2010/03/30 10:30:53 | 015,314,283 | ---- | C] () -- C:\Documents and Settings\User\My Documents\L UJ Sports Appl.pdf
[2010/03/30 10:30:52 | 015,314,286 | ---- | C] () -- C:\Documents and Settings\User\My Documents\L UJ Sports App 2l .pdf
[2010/03/30 10:30:51 | 001,356,288 | ---- | C] () -- C:\Documents and Settings\User\My Documents\L UJ Registration.doc
[2010/03/30 10:30:51 | 000,420,009 | ---- | C] () -- C:\Documents and Settings\User\My Documents\L test 2.pdf
[2010/03/30 10:30:51 | 000,419,903 | ---- | C] () -- C:\Documents and Settings\User\My Documents\L Test.pdf
[2010/03/30 10:30:51 | 000,024,576 | ---- | C] () -- C:\Documents and Settings\User\My Documents\L Thanks 4 being a friendi.doc
[2010/03/30 10:30:51 | 000,020,480 | ---- | C] () -- C:\Documents and Settings\User\My Documents\L Timetable 2008.xls
[2010/03/30 10:30:43 | 000,033,280 | ---- | C] () -- C:\Documents and Settings\User\My Documents\L Swagg.doc
[2010/03/30 10:30:41 | 003,141,928 | ---- | C] () -- C:\Documents and Settings\User\My Documents\L Swagg PDF doc1.pdf
[2010/03/30 10:30:39 | 002,756,578 | ---- | C] () -- C:\Documents and Settings\User\My Documents\L Swagg 2.pdf
[2010/03/30 10:30:39 | 000,016,384 | ---- | C] () -- C:\Documents and Settings\User\My Documents\L SASSU Costs 2008.xls
[2010/03/30 10:30:38 | 000,561,715 | ---- | C] () -- C:\Documents and Settings\User\My Documents\L Result A CUM LAUDE copy.jpg
[2010/03/30 10:30:38 | 000,231,316 | ---- | C] () -- C:\Documents and Settings\User\My Documents\L Sassu Binder1.pdf
[2010/03/30 10:30:38 | 000,027,136 | ---- | C] () -- C:\Documents and Settings\User\My Documents\L i z e l l e Letterhead.doc
[2010/03/30 10:30:38 | 000,025,600 | ---- | C] () -- C:\Documents and Settings\User\My Documents\L My abbreviated C.doc
[2010/03/30 10:30:38 | 000,022,232 | ---- | C] () -- C:\Documents and Settings\User\My Documents\L i z e l l e IDC Invoice.pdf
[2010/03/30 10:30:35 | 000,154,112 | ---- | C] () -- C:\Documents and Settings\User\My Documents\L half Year results Doc1.doc
[2010/03/30 10:30:28 | 000,026,112 | ---- | C] () -- C:\Documents and Settings\User\My Documents\L ClevelandGolf Dear Mark.doc
[2010/03/30 10:30:25 | 000,751,761 | ---- | C] () -- C:\Documents and Settings\User\My Documents\L BCC August 2008.pdf
[2010/03/30 10:30:24 | 000,501,710 | ---- | C] () -- C:\Documents and Settings\User\My Documents\L BCC 2 August 2008.pdf
[2010/03/30 10:30:24 | 000,060,928 | ---- | C] () -- C:\Documents and Settings\User\My Documents\L 18th.pub
[2010/03/30 10:30:24 | 000,042,496 | ---- | C] () -- C:\Documents and Settings\User\My Documents\JSN BMW.doc
[2010/03/30 10:30:24 | 000,031,744 | ---- | C] () -- C:\Documents and Settings\User\My Documents\L BCC .doc
[2010/03/30 10:30:24 | 000,024,064 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Keys.doc
[2010/03/30 10:30:19 | 001,603,147 | ---- | C] () -- C:\Documents and Settings\User\My Documents\JPEG-RAW ijfr_manual.pdf
[2010/03/30 10:30:19 | 000,020,480 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Jacques Recon.xls
[2010/03/30 10:30:19 | 000,016,483 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Jakes banking.csv
[2010/03/30 10:30:18 | 001,260,836 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Jacques Honours Graduation.pdf
[2010/03/30 10:30:18 | 000,172,982 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Jacques CTA Certificate.pdf
[2010/03/30 10:30:18 | 000,039,553 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Jacques Ettienne Muller Vodacom.pdf
[2010/03/30 10:30:18 | 000,027,648 | ---- | C] () -- C:\Documents and Settings\User\My Documents\J Meeting.doc
[2010/03/30 10:30:18 | 000,024,064 | ---- | C] () -- C:\Documents and Settings\User\My Documents\J SAICA NTC Application.doc
[2010/03/30 10:30:15 | 000,029,582 | ---- | C] () -- C:\Documents and Settings\User\My Documents\J CFA Results 2009.pdf
[2010/03/30 10:30:03 | 000,020,250 | ---- | C] () -- C:\Documents and Settings\User\My Documents\J CFA 2 examr.pdf
[2010/03/30 10:29:58 | 000,082,432 | ---- | C] () -- C:\Documents and Settings\User\My Documents\J Academic record 08-06.doc
[2010/03/30 10:29:58 | 000,020,247 | ---- | C] () -- C:\Documents and Settings\User\My Documents\J CFA 1 examr.pdf
[2010/03/30 10:29:57 | 000,026,112 | ---- | C] () -- C:\Documents and Settings\User\My Documents\J a c q u e s E t t i e n n e M u l l e r B Com (Acc).doc
[2010/03/30 10:29:56 | 000,456,704 | ---- | C] () -- C:\Documents and Settings\User\My Documents\IVOK Pricelist Jan 2009.xls
[2010/03/30 10:29:56 | 000,310,954 | ---- | C] () -- C:\Documents and Settings\User\My Documents\iView Batch_Rename.pdf
[2010/03/30 10:29:56 | 000,078,848 | ---- | C] () -- C:\Documents and Settings\User\My Documents\IVOK Price List.xls
[2010/03/30 10:29:55 | 001,320,359 | ---- | C] () -- C:\Documents and Settings\User\My Documents\iPod photo User Guide.pdf
[2010/03/30 10:29:43 | 010,920,777 | ---- | C] () -- C:\Documents and Settings\User\My Documents\iPod & iTunes for Dummies 3rd Edition.pdf
[2010/03/30 10:29:35 | 000,039,936 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Info Stats.doc
[2010/03/30 10:29:33 | 001,398,908 | ---- | C] () -- C:\Documents and Settings\User\My Documents\idiots-guide-to-photoshop.pdf
[2010/03/30 10:29:33 | 000,026,624 | ---- | C] () -- C:\Documents and Settings\User\My Documents\IDC Photography.doc
[2010/03/30 10:29:33 | 000,010,439 | ---- | C] () -- C:\Documents and Settings\User\My Documents\IDC Photography.pdf
[2010/03/30 10:29:32 | 000,157,735 | ---- | C] () -- C:\Documents and Settings\User\My Documents\hpsc403.pdf
[2010/03/30 10:29:32 | 000,096,256 | ---- | C] () -- C:\Documents and Settings\User\My Documents\How can we improve.doc
[2010/03/30 10:29:32 | 000,076,253 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Homeloan Application.pdf
[2010/03/30 10:29:32 | 000,069,120 | ---- | C] () -- C:\Documents and Settings\User\My Documents\HUNT ROAD RESIDENTS.doc
[2010/03/30 10:29:32 | 000,027,136 | ---- | C] () -- C:\Documents and Settings\User\My Documents\IDC Hi Adele.doc
[2010/03/30 10:29:32 | 000,026,624 | ---- | C] () -- C:\Documents and Settings\User\My Documents\IDC Letterr.doc
[2010/03/30 10:29:31 | 000,037,376 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Hi St.doc
[2010/03/30 10:29:31 | 000,000,886 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Hi there.doc
[2010/03/30 10:29:30 | 000,132,608 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Hi Madeleine.doc
[2010/03/30 10:29:30 | 000,132,608 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Hi Everyone.doc
[2010/03/30 10:29:30 | 000,131,584 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Hi CA.doc
[2010/03/30 10:29:30 | 000,026,112 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Hi Diveshnee.doc
[2010/03/30 10:29:30 | 000,026,112 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Hi Cheryl 3.doc
[2010/03/30 10:29:29 | 000,163,403 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Google Maps Downloader v4.80 by AHCU.zip
[2010/03/30 10:29:29 | 000,074,752 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Good Luck, Zelle.pub
[2010/03/30 10:29:29 | 000,046,080 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Heiberg Facebook.doc
[2010/03/30 10:29:29 | 000,033,792 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Heiberg.doc
[2010/03/30 10:29:29 | 000,032,256 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Golf Scores 2009.xls
[2010/03/30 10:29:29 | 000,028,672 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Golf Clubs Played.xls
[2010/03/30 10:29:29 | 000,026,112 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Groen Mamba Words.doc
[2010/03/30 10:29:29 | 000,009,857 | ---- | C] () -- C:\Documents and Settings\User\My Documents\golf-rates.pdf
[2010/03/30 10:29:22 | 000,016,896 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Golf Balls for sale.xls
[2010/03/30 10:29:17 | 000,014,848 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Golf Ball Prices.xls
[2010/03/30 10:29:16 | 000,800,175 | ---- | C] () -- C:\Documents and Settings\User\My Documents\GhostlyCarAd.wmv
[2010/03/30 10:29:16 | 000,092,672 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Gauteng Letter for Lizelle Muller.doc
[2010/03/30 10:29:14 | 000,910,867 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Garmin 250W 1802_QuickStartManual.pdf
[2010/03/30 10:28:26 | 007,724,213 | ---- | C] () -- C:\Documents and Settings\User\My Documents\FSIV_Tutorial[1].pdf
[2010/03/30 10:28:20 | 002,561,536 | ---- | C] () -- C:\Documents and Settings\User\My Documents\FoxitPDFIFilter10_32_enu.msi
[2010/03/30 10:28:07 | 000,071,473 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Fine Paid R0001029758.pdf
[2010/03/30 10:27:55 | 000,087,552 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Final Solution Tut class 2.doc
[2010/03/30 10:27:41 | 000,044,032 | ---- | C] () -- C:\Documents and Settings\User\My Documents\feelist2010-9_02_2010.doc
[2010/03/30 10:27:25 | 000,106,719 | ---- | C] () -- C:\Documents and Settings\User\My Documents\faq.pdf
[2010/03/30 10:27:11 | 002,891,264 | ---- | C] () -- C:\Documents and Settings\User\My Documents\FabulousPhotography.pps
[2010/03/30 10:27:05 | 003,935,634 | ---- | C] () -- C:\Documents and Settings\User\My Documents\eZine44.pdf
[2010/03/30 10:26:57 | 006,737,007 | ---- | C] () -- C:\Documents and Settings\User\My Documents\eZine41.pdf
[2010/03/30 10:26:56 | 003,707,791 | ---- | C] () -- C:\Documents and Settings\User\My Documents\eZine40.pdf
[2010/03/30 10:26:52 | 004,110,519 | ---- | C] () -- C:\Documents and Settings\User\My Documents\eZine39.pdf
[2010/03/30 10:26:52 | 000,151,239 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Ettienne Passport..pdf
[2010/03/30 10:26:52 | 000,058,153 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Extreme Fat Loss In A Month.pdf
[2010/03/30 10:26:52 | 000,040,313 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Document.tif
[2010/03/30 10:26:52 | 000,027,136 | ---- | C] () -- C:\Documents and Settings\User\My Documents\DJordaanPrinsloo.doc
[2010/03/30 10:26:52 | 000,022,016 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Ettienne C.V. 2009.xls
[2010/03/30 10:26:52 | 000,015,002 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Document1.tif
[2010/03/30 10:26:52 | 000,003,862 | ---- | C] () -- C:\Documents and Settings\User\My Documents\E- Mail Ad.doc
[2010/03/30 10:26:50 | 000,031,232 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Digital Workflow.doc
[2010/03/30 10:26:50 | 000,014,233 | ---- | C] () -- C:\Documents and Settings\User\My Documents\DJordaan-Prinsloo.pdf
[2010/03/30 10:26:49 | 000,027,648 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Dear David.doc
[2010/03/30 10:26:49 | 000,027,136 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Dear Linda.doc
[2010/03/30 10:26:49 | 000,027,136 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Dear Cheryl.doc
[2010/03/30 10:26:49 | 000,025,088 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Dear Sisa.doc
[2010/03/30 10:26:49 | 000,008,568 | ---- | C] () -- C:\Documents and Settings\User\My Documents\DelicateBonesII.zip
[2010/03/30 10:26:49 | 000,007,598 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Dear Sisa.pdf
[2010/03/30 10:26:46 | 000,046,592 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Daniella 21st card.pub
[2010/03/30 10:26:37 | 000,618,897 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Dale Carnegie-How to Win Friends and Influence People.pdf
[2010/03/30 10:26:37 | 000,000,175 | ---- | C] () -- C:\Documents and Settings\User\My Documents\D80 EM Weddings RAW Oct 2009.ncc
[2010/03/30 10:26:35 | 000,000,175 | ---- | C] () -- C:\Documents and Settings\User\My Documents\D80 EM RAW September 2009.ncc
[2010/03/30 10:26:34 | 000,000,175 | ---- | C] () -- C:\Documents and Settings\User\My Documents\D80 EM RAW October 2008.ncc
[2010/03/30 10:26:33 | 000,000,175 | ---- | C] () -- C:\Documents and Settings\User\My Documents\D80 EM Model Flash March 2009.ncc
[2010/03/30 10:26:32 | 000,000,175 | ---- | C] () -- C:\Documents and Settings\User\My Documents\D80 EM Athletics Flash April 2009.ncc
[2010/03/30 10:26:28 | 000,368,128 | ---- | C] () -- C:\Documents and Settings\User\My Documents\D Tokina Lenses.doc
[2010/03/30 10:26:21 | 003,656,192 | ---- | C] () -- C:\Documents and Settings\User\My Documents\D Nikon Lenses 07.doc
[2010/03/30 10:26:17 | 000,025,088 | ---- | C] () -- C:\Documents and Settings\User\My Documents\CS3 Borders First.doc
[2010/03/30 10:26:12 | 000,554,496 | ---- | C] () -- C:\Documents and Settings\User\My Documents\CS2 Portrait Retouching.doc
[2010/03/30 10:26:11 | 000,044,756 | ---- | C] () -- C:\Documents and Settings\User\My Documents\CP-GTG_NOTES.rtf
[2010/03/30 10:26:10 | 000,021,623 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Countries and Areas Ranked by Population.pdf
[2010/03/30 10:26:07 | 000,071,168 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Countries and Areas Ranked by Population.doc
[2010/03/30 10:26:02 | 000,003,904 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Copyright Ettienne Muller 2009.xml
[2010/03/30 10:26:00 | 000,451,787 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Copyright EM Proof Only copy.pdf
[2010/03/30 10:25:57 | 000,090,288 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Copyright EM Proof Only copy.jpg
[2010/03/30 10:25:51 | 007,828,480 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Copy of wedding front pg.pub
[2010/03/30 10:25:47 | 003,645,025 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Copy of Lizelle Muller C.V. 2009 1.pdf
[2010/03/30 10:25:43 | 000,419,563 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Copy of Lizelle I.D..pdf
[2010/03/30 10:25:40 | 000,076,253 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Copy of Homeloan Application.pdf
[2010/03/30 10:25:25 | 000,040,928 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Copy of CoJ_201037610_201037610200810.pdf
[2010/03/30 10:25:14 | 000,056,119 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Copy of addendum home loan.pdf
[2010/03/30 10:24:59 | 000,363,502 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Copy of 2.5 HDD User Guide - English (07-11-946).doc
[2010/03/30 10:24:49 | 000,427,768 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Connie Prinsloo Document(17).jpg
[2010/03/30 10:24:45 | 001,665,995 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Connie Prinsloo Document(16).jpg
[2010/03/30 10:24:36 | 001,289,770 | ---- | C] () -- C:\Documents and Settings\User\My Documents\comx-computers-price-list.pdf
[2010/03/30 10:24:36 | 001,055,232 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Combine multiple images into a group portrait.doc
[2010/03/30 10:24:36 | 000,040,714 | ---- | C] () -- C:\Documents and Settings\User\My Documents\CoJ_201037610_201037610201001.pdf
[2010/03/30 10:24:35 | 000,222,291 | ---- | C] () -- C:\Documents and Settings\User\My Documents\CoJ_201037610_201037610200809.pdf
[2010/03/30 10:24:35 | 000,046,595 | ---- | C] () -- C:\Documents and Settings\User\My Documents\CoJ_201037610_201037610200810.pdf
[2010/03/30 10:24:35 | 000,040,892 | ---- | C] () -- C:\Documents and Settings\User\My Documents\CoJ_201037610_201037610200908.pdf
[2010/03/30 10:24:35 | 000,039,113 | ---- | C] () -- C:\Documents and Settings\User\My Documents\CoJ_201037610_201037610200808.pdf
[2010/03/30 10:24:34 | 000,040,730 | ---- | C] () -- C:\Documents and Settings\User\My Documents\CoJ_201037610_201037610200807.pdf
[2010/03/30 10:24:34 | 000,040,664 | ---- | C] () -- C:\Documents and Settings\User\My Documents\CoJ_201037610_201037610200804.pdf
[2010/03/30 10:24:34 | 000,040,615 | ---- | C] () -- C:\Documents and Settings\User\My Documents\CoJ_201037610_201037610200806.pdf
[2010/03/30 10:24:34 | 000,040,580 | ---- | C] () -- C:\Documents and Settings\User\My Documents\CoJ_201037610_201037610200805.pdf
[2010/03/30 10:24:33 | 000,040,317 | ---- | C] () -- C:\Documents and Settings\User\My Documents\CoJ_201037610_201037610200803.pdf
[2010/03/30 10:24:32 | 000,040,084 | ---- | C] () -- C:\Documents and Settings\User\My Documents\CoJ_201037610_201037610200802.pdf
[2010/03/30 10:24:31 | 000,424,496 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Claim forms - tutors.docx
[2010/03/30 10:24:31 | 000,027,648 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Co-ordinates 6 Hunt Rd 2021 Bryanston.doc
[2010/03/30 10:24:31 | 000,025,088 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Co-ordinates Address to GPS converter.doc
[2010/03/30 10:24:31 | 000,009,681 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Co-ordinates 6 Hunt Rd 2021 Bryanston.pdf
[2010/03/30 10:24:30 | 001,008,640 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Christmas Thought 2001.pps
[2010/03/30 10:24:29 | 000,012,234 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Cheryl Greyling BCC.pdf
[2010/03/30 10:24:12 | 002,490,659 | ---- | C] () -- C:\Documents and Settings\User\My Documents\ccp_2en.pdf
[2010/03/30 10:24:08 | 008,480,947 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Capture NX Users Guide.pdf
[2010/03/30 10:24:08 | 000,043,626 | ---- | C] () -- C:\Documents and Settings\User\My Documents\building claim form.pdf
[2010/03/30 10:24:08 | 000,022,016 | ---- | C] () -- C:\Documents and Settings\User\My Documents\bleep speech.doc
[2010/03/30 10:24:08 | 000,002,728 | ---- | C] () -- C:\Documents and Settings\User\My Documents\bleep speech
[2010/03/30 10:24:07 | 000,041,984 | ---- | C] () -- C:\Documents and Settings\User\My Documents\BCC Meeting 09.doc
[2010/03/30 10:24:07 | 000,021,504 | ---- | C] () -- C:\Documents and Settings\User\My Documents\BCC Increases!.doc
[2010/03/30 10:24:07 | 000,012,073 | ---- | C] () -- C:\Documents and Settings\User\My Documents\BCC Letter to Sat Ladies.docx
[2010/03/30 10:24:06 | 000,039,424 | ---- | C] () -- C:\Documents and Settings\User\My Documents\BCC feelist20081.doc
[2010/03/30 10:24:05 | 000,030,136 | ---- | C] () -- C:\Documents and Settings\User\My Documents\BCC 09.pdf
[2010/03/30 10:24:04 | 000,017,782 | ---- | C] () -- C:\Documents and Settings\User\My Documents\banking.csv
[2010/03/30 10:24:02 | 000,034,816 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Bainbridge Kettlewell letter.doc
[2010/03/30 10:23:57 | 000,030,948 | ---- | C] () -- C:\Documents and Settings\User\My Documents\B.C.C. Doc .pdf
[2010/03/30 10:23:50 | 001,494,016 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Audit process,planning and risk Lecture 1.ppt
[2010/03/30 10:23:48 | 000,024,576 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Audi TO WHOM THIS MAY CONCERN.doc
[2010/03/30 10:23:44 | 010,017,193 | ---- | C] () -- C:\Documents and Settings\User\My Documents\ASASeptember09.pdf
[2010/03/30 10:23:44 | 000,430,708 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Appointment forms - tutors.docx
[2010/03/30 10:23:44 | 000,393,083 | ---- | C] () -- C:\Documents and Settings\User\My Documents\AlienSkin_Bokeh_Brownstein.pdf
[2010/03/30 10:23:44 | 000,192,856 | ---- | C] () -- C:\Documents and Settings\User\My Documents\adultpdf.pdf
[2010/03/30 10:23:43 | 000,213,504 | ---- | C] () -- C:\Documents and Settings\User\My Documents\adultpdf.doc
[2010/03/30 10:20:46 | 073,037,332 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Adobe Photoshop CS3 - Classroom in a Book (ENG).chm
[2010/03/30 10:20:44 | 000,010,954 | ---- | C] () -- C:\Documents and Settings\User\My Documents\address Book.csv
[2010/03/30 10:20:43 | 001,449,664 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Acrobat8 top10 tips.pdf
[2010/03/30 10:20:41 | 000,019,968 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Acrobat 8 Professional.doc
[2010/03/30 10:18:18 | 000,218,112 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Absa Loan Statement Mar 2010.doc
[2010/03/30 10:18:18 | 000,136,192 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Accounting - tutorials final.xls
[2010/03/30 10:18:18 | 000,023,040 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Accommodation.doc
[2010/03/30 10:18:11 | 000,219,648 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Absa 9March.doc
[2010/03/30 10:18:10 | 000,197,120 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Absa 2008.doc
[2010/03/30 10:18:09 | 000,401,769 | ---- | C] () -- C:\Documents and Settings\User\My Documents\About_CHICAGO_PHOTOGRAPHER.pdf
[2010/03/30 10:18:08 | 001,445,040 | ---- | C] () -- C:\Documents and Settings\User\My Documents\a PWC ILS Cyprus.tif
[2010/03/30 10:18:02 | 000,020,924 | ---- | C] () -- C:\Documents and Settings\User\My Documents\A Countries and Areas Ranked by Population.pdf
[2010/03/30 10:17:57 | 008,970,778 | ---- | C] () -- C:\Documents and Settings\User\My Documents\91.28_ForceWare_nView_User_Guide.pdf
[2010/03/30 10:17:57 | 000,061,456 | ---- | C] () -- C:\Documents and Settings\User\My Documents\534908.jpg
[2010/03/30 10:17:57 | 000,060,920 | ---- | C] () -- C:\Documents and Settings\User\My Documents\4_111050 PM_AstuteDemonstration.pdf
[2010/03/30 10:17:57 | 000,027,136 | ---- | C] () -- C:\Documents and Settings\User\My Documents\6 Hunt Rd Co-ord .doc
[2010/03/30 10:17:56 | 002,132,751 | ---- | C] () -- C:\Documents and Settings\User\My Documents\48953_eFilingStepbyStepGuide09.pdf
[2010/03/30 10:17:56 | 000,519,375 | ---- | C] () -- C:\Documents and Settings\User\My Documents\2.5 HDD User Guide - English (07-11-946).pdf
[2010/03/30 10:17:56 | 000,298,496 | ---- | C] () -- C:\Documents and Settings\User\My Documents\21ST bIRTHDAY CARD.pub
[2010/03/30 10:17:56 | 000,130,048 | ---- | C] () -- C:\Documents and Settings\User\My Documents\2009 LGS Golf Survey.doc
[2010/03/30 10:17:56 | 000,061,226 | ---- | C] () -- C:\Documents and Settings\User\My Documents\4_111016 PM_AstuteDemonstration.pdf
[2010/03/30 10:17:56 | 000,060,596 | ---- | C] () -- C:\Documents and Settings\User\My Documents\11_045140 PM_AstuteDemonstration.pdf
[2010/03/30 10:17:56 | 000,060,574 | ---- | C] () -- C:\Documents and Settings\User\My Documents\11_045218 PM_AstuteDemonstration.pdf
[2010/03/30 10:17:54 | 000,658,816 | ---- | C] () -- C:\Documents and Settings\User\My Documents\09-06532_yef_invite_orange 01.pdf
[2010/03/30 10:17:54 | 000,016,200 | ---- | C] () -- C:\Documents and Settings\User\My Documents\00233052.tif
[2010/03/30 10:17:54 | 000,016,192 | ---- | C] () -- C:\Documents and Settings\User\My Documents\00354749.tif
[2010/03/29 08:07:15 | 000,366,592 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Investec- Assets Liabilities (4).doc
[2010/03/29 06:45:02 | 157,642,705 | ---- | C] () -- C:\Documents and Settings\User\My Documents\lightroom3_b2_win_032310.zip
[2010/03/29 06:03:42 | 000,001,632 | ---- | C] () -- C:\Documents and Settings\User\Desktop\NikonTransfer.lnk
[2010/03/29 06:01:58 | 053,002,024 | ---- | C] () -- C:\Documents and Settings\User\My Documents\S-NKTR__-153WF-NSAEN-32BIT_.exe
[2010/03/28 04:25:53 | 000,001,531 | ---- | C] () -- C:\Documents and Settings\User\Desktop\Notepad.lnk
[2010/03/26 08:22:09 | 000,961,158 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Picture Merge Genius v2.7.2 by FFF.zip
[2010/03/25 02:49:28 | 000,033,792 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Dear BCC Cheryl.doc
[2010/03/24 10:03:16 | 000,000,559 | ---- | C] () -- C:\Documents and Settings\User\Desktop\ApPDFSplitMerge.lnk
[2010/03/24 09:58:22 | 000,000,462 | ---- | C] () -- C:\Documents and Settings\User\Desktop\PictureMergeGenius.lnk
[2010/03/24 09:54:29 | 000,000,458 | ---- | C] () -- C:\Documents and Settings\User\Desktop\FreeHideFolder.lnk
[2010/03/24 09:50:23 | 000,000,560 | ---- | C] () -- C:\Documents and Settings\User\Desktop\PhotoScape.exe.lnk
[2010/03/24 09:29:16 | 000,000,665 | ---- | C] () -- C:\Documents and Settings\User\Desktop\DigitalImageTool1.4.lnk
[2010/03/24 09:25:51 | 000,000,471 | ---- | C] () -- C:\Documents and Settings\User\Desktop\BatchWatermark.lnk
[2010/03/24 09:22:00 | 000,000,574 | ---- | C] () -- C:\Documents and Settings\User\Desktop\InstantPhotoEffects2.lnk
[2010/03/24 08:35:14 | 000,000,529 | ---- | C] () -- C:\Documents and Settings\User\Desktop\PC Optimizer Pro.lnk
[2010/03/24 08:34:17 | 000,000,475 | ---- | C] () -- C:\Documents and Settings\User\Desktop\Invoice!2023.2.lnk
[2010/03/24 08:10:04 | 000,000,406 | ---- | C] () -- C:\Documents and Settings\User\Desktop\PreviewExtractor.exe.lnk
[2010/03/24 08:02:52 | 000,000,563 | ---- | C] () -- C:\Documents and Settings\User\Desktop\PowerExif.lnk
[2010/03/24 08:02:28 | 000,000,511 | ---- | C] () -- C:\Documents and Settings\User\Desktop\IExif 2.3.lnk
[2010/03/23 07:38:10 | 000,098,878 | ---- | C] () -- C:\Documents and Settings\User\My Documents\16345_193025064186_661724186_3918005_2760653_n.jpg
[2010/03/23 07:35:10 | 000,041,280 | ---- | C] () -- C:\Documents and Settings\User\My Documents\13635_165224072527_530492527_2772436_2986825_n.jpg
[2010/03/23 07:34:59 | 000,049,995 | ---- | C] () -- C:\Documents and Settings\User\My Documents\16459_166082077527_530492527_2780431_7200519_n.jpg
[2010/03/23 07:34:42 | 000,047,519 | ---- | C] () -- C:\Documents and Settings\User\My Documents\19958_288751662527_530492527_3435100_601550_n.jpg
[2010/03/23 04:29:59 | 004,230,546 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Seagate.FILE.RECOVERY.for.Windows.v2.0-YAG.rar
[2010/03/23 04:21:31 | 000,001,986 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Seagate.FILE.RECOVERY.for.Windows.v2.0-YAG.zip
[2010/03/22 15:11:46 | 000,143,360 | ---- | C] () -- C:\Documents and Settings\User\My Documents\UK Border Agency.doc
[2010/03/21 09:11:52 | 000,048,128 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Seagate HDD.xls
[2010/03/21 09:11:52 | 000,033,792 | ---- | C] () -- C:\Documents and Settings\User\My Documents\WD HDD.xls
[2010/03/21 05:54:32 | 000,104,448 | ---- | C] () -- C:\Documents and Settings\User\My Documents\No transit visa required for UK for South African passport holders.doc
[2010/03/20 08:15:48 | 058,759,026 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Photoshop CS2 All-in-One Desk Reference for Dummies.pdf
[2010/03/20 08:15:02 | 037,703,743 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Digital Art Photography for Dummies_2006_Wiley.pdf
[2010/03/20 08:14:19 | 015,580,853 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Adobe Photoshop CS2 - Classroom in a Book.pdf
[2010/03/20 08:14:03 | 037,872,703 | ---- | C] () -- C:\Documents and Settings\User\My Documents\Adobe Photoshop CS2 For Dummies.pdf
[2010/03/20 05:30:35 | 002,893,433 | ---- | C] () -- C:\Documents and Settings\User\My Documents\eZine45.pdf
[2010/03/19 01:14:41 | 000,043,467 | ---- | C] () -- C:\Documents and Settings\User\My Documents\16441_1100382529431_1822738141_207467_2798392_n.jpg
[2010/03/19 01:14:32 | 000,043,478 | ---- | C] () -- C:\Documents and Settings\User\My Documents\18472_1102194894739_1822738141_210797_3910135_n.jpg
[2010/03/19 01:13:35 | 000,025,556 | ---- | C] () -- C:\Documents and Settings\User\My Documents\6918_1061731083169_1822738141_134717_4929735_n.jpg
[2010/03/19 01:13:01 | 000,043,802 | ---- | C] () -- C:\Documents and Settings\User\My Documents\16441_1098829810614_1822738141_204741_7308249_n.jpg
[2010/03/19 01:12:04 | 000,059,136 | ---- | C] () -- C:\Documents and Settings\User\My Documents\18372_1112066181515_1822738141_231226_346590_n.jpg
[2010/03/19 01:11:37 | 000,045,797 | ---- | C] () -- C:\Documents and Settings\User\My Documents\6918_1062466941565_1822738141_135989_5480116_n.jpg
[2010/03/19 01:11:18 | 000,030,421 | ---- | C] () -- C:\Documents and Settings\User\My Documents\16441_1098273796714_1822738141_203890_4354381_n.jpg
[2010/03/19 01:11:08 | 000,036,020 | ---- | C] () -- C:\Documents and Settings\User\My Documents\18472_1102195974766_1822738141_210800_1078247_n.jpg
[2010/03/19 01:10:26 | 000,038,394 | ---- | C] () -- C:\Documents and Settings\User\My Documents\25360_1145742183394_1822738141_292111_1223932_n.jpg
[2010/03/16 11:31:58 | 000,001,655 | ---- | C] () -- C:\Documents and Settings\User\Desktop\PhotomatixPro3.lnk
[2009/12/30 11:43:31 | 000,027,648 | ---- | C] () -- C:\WINDOWS\System32\AVSredirect.dll
[2009/10/02 10:13:49 | 000,000,043 | ---- | C] () -- C:\WINDOWS\gswin32.ini
[2009/09/19 07:32:52 | 000,000,062 | ---- | C] () -- C:\WINDOWS\System32\Days5.ini
[2009/04/28 10:24:00 | 000,000,076 | ---- | C] () -- C:\WINDOWS\System32\FrameRg2.ini
[2009/04/28 10:23:59 | 000,087,552 | ---- | C] () -- C:\WINDOWS\System32\ereglb32.dll
[2009/04/28 10:23:59 | 000,023,040 | ---- | C] () -- C:\WINDOWS\System32\ergint32.dll
[2009/04/15 17:06:16 | 000,233,472 | ---- | C] () -- C:\WINDOWS\System32\MSL_All-DLL80_x86.dll
[2009/04/15 17:06:15 | 000,134,656 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll
[2009/04/15 17:05:55 | 000,185,856 | ---- | C] () -- C:\WINDOWS\System32\Bmp2Jpeg.dll
[2009/03/11 08:32:28 | 006,772,736 | ---- | C] () -- C:\WINDOWS\System32\tliadjust30.dll
[2009/03/03 06:18:04 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll
[2008/10/24 07:37:43 | 000,010,593 | ---- | C] () -- C:\WINDOWS\CSTBox.INI
[2008/10/24 06:34:37 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\IPPCPUID.DLL
[2008/10/24 06:33:36 | 000,011,776 | ---- | C] () -- C:\WINDOWS\System32\pmsbfn32.dll
[2008/09/22 02:15:56 | 000,307,200 | ---- | C] () -- C:\WINDOWS\System32\libmng.dll
[2008/09/11 07:26:56 | 000,000,184 | ---- | C] () -- C:\WINDOWS\bti.ini
[2008/09/11 07:26:55 | 000,043,760 | ---- | C] () -- C:\WINDOWS\System32\nwlocale.dll
[2008/08/08 08:50:50 | 000,014,280 | ---- | C] () -- C:\Program Files\settings.dat
[2008/07/17 11:40:39 | 000,000,089 | ---- | C] () -- C:\WINDOWS\ULead32.ini
[2008/07/17 10:51:33 | 000,000,016 | ---- | C] () -- C:\WINDOWS\Wininit.ini
[2008/07/17 10:51:21 | 000,035,328 | ---- | C] () -- C:\WINDOWS\INETWH32.DLL
[2008/07/17 10:51:21 | 000,009,136 | ---- | C] () -- C:\WINDOWS\INETWH16.DLL
[2008/07/15 01:23:07 | 000,000,268 | RH-- | C] () -- C:\Documents and Settings\User\Application Data\Spacious
[2008/07/15 01:23:05 | 000,000,000 | R--- | C] () -- C:\Documents and Settings\User\Application Data\Specifications
[2008/05/17 05:20:56 | 000,000,359 | ---- | C] () -- C:\WINDOWS\encarta.ini
[2008/05/17 05:20:55 | 000,210,944 | ---- | C] () -- C:\WINDOWS\System32\MSVCRT10.DLL
[2008/04/24 04:04:09 | 000,000,383 | ---- | C] () -- C:\WINDOWS\System32\haspdos.sys
[2008/04/09 12:02:43 | 000,000,774 | ---- | C] () -- C:\WINDOWS\Calendar.INI
[2008/04/03 03:39:47 | 000,344,064 | ---- | C] () -- C:\WINDOWS\System32\LFFPX7.DLL
[2008/04/03 03:39:47 | 000,122,880 | ---- | C] () -- C:\WINDOWS\System32\LFKODAK.DLL
[2008/04/03 03:39:47 | 000,088,576 | ---- | C] () -- C:\WINDOWS\System32\LFFPX90N.DLL
[2008/04/03 03:27:25 | 000,000,030 | ---- | C] () -- C:\WINDOWS\Iedit_.INI
[2008/03/16 14:25:49 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2008/03/13 10:24:24 | 000,001,793 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2008/03/13 07:10:39 | 000,000,037 | ---- | C] () -- C:\WINDOWS\progman.ini
[2008/03/11 08:24:22 | 000,126,444 | ---- | C] () -- C:\WINDOWS\System32\drivers\NVCAP.SYS
[2008/03/10 05:20:50 | 000,000,268 | RH-- | C] () -- C:\Documents and Settings\User\Application Data\MIDI Devices
[2008/03/09 15:05:25 | 000,034,308 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll
[2008/03/09 12:08:45 | 000,000,268 | RH-- | C] () -- C:\Documents and Settings\User\Application Data\Limiter
[2008/03/09 11:38:52 | 000,000,080 | ---- | C] () -- C:\WINDOWS\ViewNX.INI
[2008/03/09 11:36:56 | 000,000,268 | RH-- | C] () -- C:\Documents and Settings\User\Application Data\MAS
[2008/03/09 11:27:54 | 000,000,268 | RH-- | C] () -- C:\Documents and Settings\User\Application Data\Sports
[2008/03/08 11:40:04 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2008/03/08 07:04:31 | 000,061,440 | ---- | C] () -- C:\WINDOWS\ContextMenuExt.dll
[2008/03/08 04:07:51 | 000,000,085 | ---- | C] () -- C:\WINDOWS\lgmaster.ini
[2008/03/08 03:26:09 | 000,009,000 | R--- | C] () -- C:\Documents and Settings\User\Application Data\SmarThruOptions.xml
[2008/03/08 03:26:08 | 000,163,840 | ---- | C] () -- C:\WINDOWS\System32\SecSNMP.dll
[2008/03/08 03:25:53 | 000,000,124 | ---- | C] () -- C:\WINDOWS\Readiris.ini
[2008/03/08 03:25:51 | 000,023,040 | ---- | C] () -- C:\WINDOWS\System32\irisco32.dll
[2008/03/08 03:22:58 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\WIAIPH.dll
[2008/03/08 03:22:58 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\WIAEH.dll
[2008/03/08 03:22:58 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\Sswiadrv.dll
[2008/03/08 03:22:58 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\WIASTIIO.dll
[2008/03/08 03:17:44 | 000,000,414 | ---- | C] () -- C:\WINDOWS\hpbvspst.ini
[2008/03/07 12:50:53 | 000,114,688 | ---- | C] () -- C:\Documents and Settings\User\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/03/07 05:53:31 | 000,000,204 | ---- | C] () -- C:\WINDOWS\RtlRack.ini
[2008/02/20 02:59:33 | 000,064,200 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2008/02/20 02:12:09 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\gbttk.dll
[2008/02/20 02:00:08 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini
[2008/02/20 02:00:00 | 000,143,360 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2007/06/28 18:43:00 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2007/06/28 18:43:00 | 001,486,848 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2007/06/28 18:43:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2007/06/28 18:43:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2007/06/28 18:43:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2007/04/09 07:32:19 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\DLLNT.DLL
[2007/04/06 08:25:19 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\check_internet.dll
[2004/08/03 18:56:44 | 000,001,024 | ---- | C] () -- C:\WINDOWS\System32\rs0ang1.dll
[2004/08/03 18:56:44 | 000,001,024 | ---- | C] () -- C:\WINDOWS\System32\grcauth2.dll
[2004/08/03 18:56:44 | 000,001,024 | ---- | C] () -- C:\WINDOWS\System32\grcauth1.dll
[2004/08/03 18:56:44 | 000,001,024 | ---- | C] () -- C:\WINDOWS\System32\clauth2.dll
[2004/08/03 18:56:44 | 000,001,024 | ---- | C] () -- C:\WINDOWS\System32\clauth1.dll
[2004/08/03 18:56:44 | 000,000,072 | ---- | C] () -- C:\WINDOWS\System32\ssprs.dll
[2003/10/29 14:00:00 | 000,205,312 | ---- | C] () -- C:\WINDOWS\System32\patchw32.dll
[2003/01/29 08:42:38 | 000,119,392 | ---- | C] () -- C:\WINDOWS\System32\uDRMCtrl.dll
[2003/01/07 09:05:08 | 000,002,695 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[2002/03/16 20:00:00 | 000,007,420 | ---- | C] () -- C:\WINDOWS\UA000059.DLL

========== LOP Check ==========

[2009/03/29 08:08:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\.metamorphose
[2009/09/24 09:30:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\Alien Skin
[2009/05/20 08:26:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\Anthropics
[2008/08/18 10:15:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\Astro Gemini Software
[2010/03/31 01:36:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\Auslogics
[2009/11/27 07:44:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\AV Bros Puzzle Pro 2.2 DEMO
[2009/11/27 08:32:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\AV Bros Puzzle Pro 3.0
[2009/11/27 02:53:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\AV Bros Puzzle Pro 3.0 DEMO
[2008/08/11 01:31:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2009/10/12 15:39:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\DeskSoft
[2010/03/04 03:49:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\Facebook
[2009/05/02 05:02:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\Filter Forge
[2009/01/31 08:40:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\Filter Forge Freepack 3 - Frames
[2008/06/10 11:20:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\GARMIN
[2009/08/02 07:10:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\GetRightToGo
[2008/09/07 10:25:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\gtk-2.0
[2008/03/17 02:33:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\Hagel Technologies
[2010/01/27 15:10:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\HDRsoft
[2008/04/11 10:10:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\ICAClient
[2008/09/29 07:23:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\Imagenomic
[2008/04/24 02:06:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\iView
[2010/01/29 12:10:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\Morpheus Software
[2008/10/31 05:58:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\NewSoft
[2008/10/21 01:26:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\Nik Software
[2009/09/17 13:44:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\Nikon
[2009/05/03 05:23:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\onOne Software
[2008/05/03 04:37:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\Opera
[2009/10/20 09:07:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\PictureCode
[2010/04/05 10:13:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\POP Peeper
[2008/03/08 03:26:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\SmarThru4
[2008/12/18 10:02:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\SystemRequirementsLab
[2009/04/29 12:32:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\Tiffen
[2008/04/09 05:25:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\Ulead Systems
[2008/12/18 09:49:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\Uniblue
[2010/04/02 12:25:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Application Data\uTorrent
[2010/03/25 01:00:26 | 000,000,562 | ---- | M] () -- C:\WINDOWS\Tasks\Auslogics Boost Speed Disk Defrag Console Defragmentation.job
[2010/04/06 02:00:00 | 000,000,330 | -H-- | M] () -- C:\WINDOWS\Tasks\MP Scheduled Scan.job
[2010/04/06 01:20:10 | 000,000,420 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{C9E5606D-A329-412A-9876-7D31BE043F0A}.job

========== Purity Check ==========



========== Custom Scans ==========


< hklm\system\select >
"Current" = 10
"Default" = 10
"Failed" = 9
"LastKnownGood" = 11
< End of report >


#6 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,204 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:06:14 AM

Posted 12 April 2010 - 02:55 AM

Hello again,

This is the right log smile.gif

Please rerun OTLPE, and copy/paste the text in the codebox below into the "custom scan/fix" field. Click Run Fix.
CODE
:reg
[-hklm\system\controlset010\services\PC1C1394]

To clarify what we are doing here, we are deleting the service that causes the scan to crash. This service is related to a PC camera. If you are using one, you might need to reinstall the software coming with it.

After running this fix, rerun OTLPE and without any custom scans, click Run Scan. Post me the resulting log (it will be a long one).

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#7 BMW3

BMW3
  • Topic Starter

  • Members
  • 75 posts
  • OFFLINE
  •  
  • Local time:05:14 AM

Posted 12 April 2010 - 07:27 AM


I really hope this is correct - When I did the Fix, it reported an Error - When I now look for that Error Report, it just cannot be found!

When I re-did the scan I had to again click on None Drivers and Services to avoid the thing about Invalid Conversion....

Please let me know, and I will re-do if required

Many Thanks!!

OTL logfile created on: 4/13/2010 5:58:39 AM - Run
OTLPE by OldTimer - Version 3.1.37.1 Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3, v.3264 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1,023.00 Mb Total Physical Memory | 809.00 Mb Available Physical Memory | 79.00% Memory free
907.00 Mb Paging File | 845.00 Mb Available in Paging File | 93.00% Paging File free
Paging file location(s): c:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 34.46 Gb Total Space | 17.01 Gb Free Space | 49.35% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Drive X: | 276.80 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: REATOGO
Current User Name: SYSTEM
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
Using ControlSet: ControlSet010

========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========



IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\software\mozilla\Firefox\extensions\\{6E19037A-12E3-4295-8915-ED48BC341614}: C:\Program Files\PremierOpinion
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.14\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/03/23 11:32:58 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.14\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/03/23 11:32:58 | 000,000,000 | ---D | M]

[2010/02/20 09:05:19 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010/01/13 18:46:00 | 000,063,488 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npwachk.dll
[2009/09/15 01:43:21 | 000,001,538 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazon-en-GB.xml
[2009/09/15 01:43:21 | 000,000,947 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\chambers-en-GB.xml
[2009/09/15 01:43:21 | 000,000,759 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-en-GB.xml
[2009/09/15 01:43:21 | 000,000,831 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-en-GB.xml

O1 HOSTS File: ([2010/04/02 11:20:20 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O2 - BHO: (ViewerHelper Class) - {78104A01-8E71-4F30-9A36-3793799615B4} - C:\Program Files\Microsoft\Rights Management Add-on\mime_filter.dll (Microsoft Corporation)
O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM..\Run: [DU Meter] C:\Documents and Settings\User\My Documents\DU Meter\DUMeter.exe (Hagel Technologies Ltd)
O4 - HKLM..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe (HP)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [Nikon Transfer Monitor] C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe (Nikon Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [Samsung PanelMgr] C:\WINDOWS\Samsung\PanelMgr\ssmmgr.exe ()
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\soundman.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\Administrator\Application Data [2009/10/23 04:26:35 | 000,000,000 | RH-D | M]
O4 - Startup: C:\Documents and Settings\Administrator\Cookies [2008/02/20 01:46:50 | 000,000,000 | --SD | M]
O4 - Startup: C:\Documents and Settings\Administrator\Desktop [2009/10/23 04:26:35 | 000,000,000 | ---D | M]
O4 - Startup: C:\Documents and Settings\Administrator\Favorites [2008/03/08 09:29:35 | 000,000,000 | R--D | M]
O4 - Startup: C:\Documents and Settings\Administrator\IETldCache [2010/04/12 07:44:48 | 000,000,000 | --SD | M]
O4 - Startup: C:\Documents and Settings\Administrator\Local Settings [2010/04/02 11:27:06 | 000,000,000 | -H-D | M]
O4 - Startup: C:\Documents and Settings\Administrator\My Documents [2008/03/08 09:29:34 | 000,000,000 | R--D | M]
O4 - Startup: C:\Documents and Settings\Administrator\NetHood [2008/02/19 13:01:53 | 000,000,000 | -H-D | M]
O4 - Startup: C:\Documents and Settings\Administrator\NTUSER.DAT ()
O4 - Startup: C:\Documents and Settings\Administrator\NTUSER.DAT.LOG ()
O4 - Startup: C:\Documents and Settings\Administrator\ntuser.ini ()
O4 - Startup: C:\Documents and Settings\Administrator\PrintHood [2008/02/19 13:01:53 | 000,000,000 | -H-D | M]
O4 - Startup: C:\Documents and Settings\Administrator\Recent [2008/03/08 09:29:34 | 000,000,000 | RH-D | M]
O4 - Startup: C:\Documents and Settings\Administrator\SendTo [2008/03/08 09:29:27 | 000,000,000 | RH-D | M]
O4 - Startup: C:\Documents and Settings\Administrator\Start Menu [2008/02/19 13:01:53 | 000,000,000 | R--D | M]
O4 - Startup: C:\Documents and Settings\Administrator\Templates [2008/02/20 01:41:13 | 000,000,000 | -H-D | M]
O4 - Startup: C:\Documents and Settings\All Users\Application Data [2010/04/02 11:45:12 | 000,000,000 | RH-D | M]
O4 - Startup: C:\Documents and Settings\All Users\Desktop [2010/04/03 09:22:52 | 000,000,000 | ---D | M]
O4 - Startup: C:\Documents and Settings\All Users\Documents [2009/11/05 10:12:21 | 000,000,000 | R--D | M]
O4 - Startup: C:\Documents and Settings\All Users\DRM [2009/02/07 03:16:49 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Documents and Settings\All Users\Favorites [2008/02/19 13:01:53 | 000,000,000 | ---D | M]
O4 - Startup: C:\Documents and Settings\All Users\Start Menu [2010/04/02 12:26:00 | 000,000,000 | ---D | M]
O4 - Startup: C:\Documents and Settings\All Users\Templates [2008/10/31 12:18:00 | 000,000,000 | -H-D | M]
O4 - Startup: C:\Documents and Settings\Default User\Application Data [2008/02/19 13:01:53 | 000,000,000 | RH-D | M]
O4 - Startup: C:\Documents and Settings\Default User\Desktop [2008/02/19 13:01:53 | 000,000,000 | ---D | M]
O4 - Startup: C:\Documents and Settings\Default User\Favorites [2008/02/19 13:01:53 | 000,000,000 | ---D | M]
O4 - Startup: C:\Documents and Settings\Default User\Local Settings [2010/04/02 11:27:06 | 000,000,000 | RH-D | M]
O4 - Startup: C:\Documents and Settings\Default User\My Documents [2008/02/19 13:01:53 | 000,000,000 | ---D | M]
O4 - Startup: C:\Documents and Settings\Default User\NetHood [2008/02/19 13:01:53 | 000,000,000 | -H-D | M]
O4 - Startup: C:\Documents and Settings\Default User\NTUSER.DAT ()
O4 - Startup: C:\Documents and Settings\Default User\NTUSER.DAT.LOG ()
O4 - Startup: C:\Documents and Settings\Default User\PrintHood [2008/02/19 13:01:53 | 000,000,000 | -H-D | M]
O4 - Startup: C:\Documents and Settings\Default User\Recent [2008/02/19 13:01:53 | 000,000,000 | -H-D | M]
O4 - Startup: C:\Documents and Settings\Default User\SendTo [2008/02/20 05:54:09 | 000,000,000 | RH-D | M]
O4 - Startup: C:\Documents and Settings\Default User\Start Menu [2008/02/19 13:01:53 | 000,000,000 | R--D | M]
O4 - Startup: C:\Documents and Settings\Default User\Templates [2008/02/20 01:41:13 | 000,000,000 | -H-D | M]
O4 - Startup: C:\Documents and Settings\LocalService\Application Data [2008/02/20 01:48:05 | 000,000,000 | ---D | M]
O4 - Startup: C:\Documents and Settings\LocalService\Cookies [2010/04/03 04:35:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Documents and Settings\LocalService\Local Settings [2010/04/02 11:27:06 | 000,000,000 | -H-D | M]
O4 - Startup: C:\Documents and Settings\LocalService\NTUSER.DAT ()
O4 - Startup: C:\Documents and Settings\LocalService\ntuser.dat.LOG ()
O4 - Startup: C:\Documents and Settings\LocalService\ntuser.ini ()
O4 - Startup: C:\Documents and Settings\NetworkService\Application Data [2008/02/20 01:47:59 | 000,000,000 | ---D | M]
O4 - Startup: C:\Documents and Settings\NetworkService\Cookies [2008/02/20 01:46:50 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Documents and Settings\NetworkService\IETldCache [2009/11/27 08:09:02 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Documents and Settings\NetworkService\Local Settings [2010/04/02 11:27:06 | 000,000,000 | -H-D | M]
O4 - Startup: C:\Documents and Settings\NetworkService\NTUSER.DAT ()
O4 - Startup: C:\Documents and Settings\NetworkService\ntuser.dat.LOG ()
O4 - Startup: C:\Documents and Settings\NetworkService\ntuser.ini ()
O4 - Startup: C:\Documents and Settings\User\.assistant [2009/10/23 04:26:35 | 000,000,000 | ---D | M]
O4 - Startup: C:\Documents and Settings\User\Application Data [2010/04/02 11:09:10 | 000,000,000 | R--D | M]
O4 - Startup: C:\Documents and Settings\User\Capture NX Serial.txt ()
O4 - Startup: C:\Documents and Settings\User\Cookies [2010/03/30 09:14:40 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Documents and Settings\User\default.pls ()
O4 - Startup: C:\Documents and Settings\User\Desktop [2010/04/05 09:40:41 | 000,000,000 | ---D | M]
O4 - Startup: C:\Documents and Settings\User\Favorites [2009/10/23 04:26:35 | 000,000,000 | R--D | M]
O4 - Startup: C:\Documents and Settings\User\IECompatCache [2009/02/24 01:51:29 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Documents and Settings\User\IETldCache [2009/02/22 15:36:24 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Documents and Settings\User\Local Settings [2009/09/17 09:59:55 | 000,000,000 | -H-D | M]
O4 - Startup: C:\Documents and Settings\User\My Documents [2010/04/06 02:16:00 | 000,000,000 | R--D | M]
O4 - Startup: C:\Documents and Settings\User\NetHood [2008/04/19 05:22:32 | 000,000,000 | -H-D | M]
O4 - Startup: C:\Documents and Settings\User\NTUSER.DAT ()
O4 - Startup: C:\Documents and Settings\User\ntuser.dat.LOG ()
O4 - Startup: C:\Documents and Settings\User\ntuser.ini ()
O4 - Startup: C:\Documents and Settings\User\PDF Converter.txt ()
O4 - Startup: C:\Documents and Settings\User\Philemon and his new scooter.rar ()
O4 - Startup: C:\Documents and Settings\User\PrintHood [2008/02/19 13:01:53 | 000,000,000 | -H-D | M]
O4 - Startup: C:\Documents and Settings\User\PrivacIE [2008/12/20 05:04:19 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Documents and Settings\User\raidinfo.txt ()
O4 - Startup: C:\Documents and Settings\User\Recent [2010/04/06 04:32:13 | 000,000,000 | RH-D | M]
O4 - Startup: C:\Documents and Settings\User\SendTo [2010/01/24 17:01:26 | 000,000,000 | RH-D | M]
O4 - Startup: C:\Documents and Settings\User\Start Menu [2009/10/23 04:26:35 | 000,000,000 | R--D | M]
O4 - Startup: C:\Documents and Settings\User\Templates [2009/11/05 10:12:21 | 000,000,000 | -H-D | M]
O4 - Startup: C:\Documents and Settings\User\VodacomInteractiveBill_Oct2009.efa ()
O4 - Startup: C:\Documents and Settings\User\WINDOWS [2009/10/23 04:26:35 | 000,000,000 | ---D | M]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRemoteRecursiveEvents = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ClassicShell = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoInternetOpenWith = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O9 - Extra 'Tools' menuitem : @C:\Program Files\Microsoft\Rights Management Add-on\rmadoc.exe,-40971 - {685ec120-f786-4498-a8f0-794d47916161} - C:\Program Files\Microsoft\Rights Management Add-on\ie_addin.chm ()
O9 - Extra Button: @C:\Program Files\Microsoft\Rights Management Add-on\rmadoc.exe,-205 - {aede78a6-42b6-4c3c-96eb-5ae6dbec4859} - C:\Program Files\Microsoft\Rights Management Add-on\mime_filter.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Program Files\Microsoft\Rights Management Add-on\rmadoc.exe,-40970 - {aede78a6-42b6-4c3c-96eb-5ae6dbec4859} - C:\Program Files\Microsoft\Rights Management Add-on\mime_filter.dll (Microsoft Corporation)
O9 - Extra Button: PDFill PDF Editor - {FB858B22-55E2-413f-87F5-30ADC5552151} - K:\PlotSoft\PDFill\DownloadPDF.exe File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} http://download.gigabyte.com.tw/object/Dldrv.ocx (Dldrv2 Control)
O16 - DPF: {238F6F83-B8B4-11CF-8771-00A024541EE3} http://a516.g.akamai.net/f/516/25175/7d/ru...cat-no-eula.cab (Citrix ICA Client)
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} http://dlm.tools.akamai.com/dlmanager/vers...vex-2.2.5.0.cab (DLM Control)
O16 - DPF: {4D054067-DE3A-48F9-B19B-BCD229B9AE8D} http://www.samsungdp.com/printerhelp/ActiveX/DrPrinter.cab (PrinterHelpEtcActiveX Control)
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} http://www.nvidia.com/content/DriverDownlo.../sysreqlab2.cab (Reg Error: Key error.)
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab (HP Download Manager)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flash...r/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-...indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553635000} http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab (Reg Error: Key error.)
O18 - Protocol\Handler\rmh {23C585BB-48FF-4865-8934-185F0A7EB84C} - C:\Program Files\Microsoft\Rights Management Add-on\mime_filter.dll (Microsoft Corporation)
O18 - Protocol\Handler\vnd.ms.radio {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - Reg Error: Key error. File not found
O18 - Protocol\Filter\application/msword {DFF82902-0B96-3B98-6F62-D655E146A23A} - C:\Program Files\Microsoft\Rights Management Add-on\mime_filter.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {F969FE8E-1937-45AD-AF42-8A4D11CBDC2A} - C:\Program Files\Microsoft\Rights Management Add-on\mime_filter.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/vnd.ms-excel {DFF82902-0B96-3B98-6F62-D655E146A23A} - C:\Program Files\Microsoft\Rights Management Add-on\mime_filter.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/vnd.ms-powerpoint {DFF82902-0B96-3B98-6F62-D655E146A23A} - C:\Program Files\Microsoft\Rights Management Add-on\mime_filter.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/vnd-viewer {CD4527E8-4FC7-48DB-9806-10537B501237} - C:\Program Files\Microsoft\Rights Management Add-on\rmadoc.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: B:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: B:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - C:\Program Files\Windows Defender\MpShHook.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/02/20 01:44:13 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010/04/13 05:39:03 | 000,000,000 | ---D | C] -- C:\_OTL
[2010/04/10 21:11:03 | 000,089,610 | ---- | C] (Silicon Image, Inc) -- C:\WINDOWS\System32\drivers\Si3112r\Si3112r\Si3112r.sys
[2010/04/10 21:11:03 | 000,089,610 | ---- | C] (Silicon Image, Inc) -- C:\WINDOWS\System32\drivers\Si3112r\Si3112r\Si3112r.mpd
[2010/04/10 21:11:03 | 000,071,680 | ---- | C] (InstallShield Software Corporation) -- C:\WINDOWS\System32\drivers\Si3112r\Setup.exe
[2010/04/10 21:11:03 | 000,034,843 | ---- | C] (Windows ® 2000 DDK provider) -- C:\WINDOWS\System32\drivers\Si3112r\Si3112r\INSTALL.EXE
[2010/04/10 21:11:03 | 000,034,816 | ---- | C] (InstallShield Software Corporation) -- C:\WINDOWS\System32\drivers\Si3112r\_Setup.dll
[2010/04/10 21:11:03 | 000,027,648 | ---- | C] (InstallShield Software Corporation) -- C:\WINDOWS\System32\drivers\Si3112r\_ISDel.exe
[2010/04/10 21:11:03 | 000,009,600 | ---- | C] (Silicon Image, Inc.) -- C:\WINDOWS\System32\drivers\Si3112r\Si3112r\SIWinAcc.sys
[2010/04/10 21:11:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\Si3112r\Si3112r
[2010/04/10 21:11:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\Si3112r
[2010/04/03 08:52:11 | 000,000,000 | ---D | C] -- C:\Program Files\SyncToy 2.1
[2010/04/03 08:51:06 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Sync Framework
[2010/04/02 12:28:36 | 000,000,000 | --SD | C] -- C:\ComboFix
[2010/04/02 12:25:06 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010/04/02 11:45:11 | 000,000,000 | ---D | C] -- C:\Program Files\RegCure
[2010/04/02 11:07:39 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2010/04/02 11:03:29 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2010/04/02 11:03:29 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2010/04/02 11:03:29 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2010/04/02 11:03:29 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2010/04/02 11:03:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010/04/02 11:02:59 | 000,000,000 | ---D | C] -- C:\Qoobox
[2010/03/23 11:34:29 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_42.dll
[2010/03/23 11:34:27 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_31.dll
[2010/03/23 11:34:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\Logs
[2010/03/23 04:57:10 | 000,000,000 | ---D | C] -- C:\Program Files\Seagate
[2010/03/23 04:54:21 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard
[2010/03/23 04:31:19 | 000,000,000 | ---D | C] -- C:\Program Files\FILE RECOVERY for Windows
[2010/03/20 10:00:10 | 000,000,000 | ---D | C] -- C:\Program Files\Merge
[2010/03/20 08:35:00 | 000,000,000 | ---D | C] -- C:\FastFolders
[2010/03/20 08:31:03 | 000,000,000 | ---D | C] -- C:\Program Files\Instant JPEG From RAW
[2010/03/16 11:31:55 | 000,000,000 | ---D | C] -- C:\Program Files\PhotomatixPro3
[2010/03/16 09:38:07 | 000,000,000 | ---D | C] -- C:\Program Files\POP Peeper
[2010/03/16 09:23:44 | 000,000,000 | ---D | C] -- C:\Program Files\FastStone Image Viewer
[8 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/04/06 02:00:00 | 000,000,330 | -H-- | M] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job
[2010/04/06 01:20:10 | 000,000,420 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{C9E5606D-A329-412A-9876-7D31BE043F0A}.job
[2010/04/06 01:18:35 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/04/06 01:18:27 | 000,127,964 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2010/04/06 01:17:57 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/04/06 01:17:50 | 1073,274,880 | -HS- | M] () -- C:\hiberfil.sys
[2010/04/05 05:41:30 | 000,528,960 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010/04/05 05:41:30 | 000,446,200 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010/04/05 05:41:30 | 000,073,028 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010/04/02 11:21:23 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010/04/02 11:20:20 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010/04/02 11:07:44 | 000,000,281 | RHS- | M] () -- C:\boot.ini
[2010/03/30 09:15:18 | 001,786,608 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/03/29 06:03:11 | 000,106,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ATL71.DLL
[2010/03/27 05:30:15 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/03/26 08:18:03 | 000,000,062 | ---- | M] () -- C:\WINDOWS\System32\Days5.ini
[2010/03/25 01:00:26 | 000,000,562 | ---- | M] () -- C:\WINDOWS\tasks\Auslogics Boost Speed Disk Defrag Console Defragmentation.job
[2010/03/24 09:22:55 | 000,066,548 | ---- | M] () -- C:\WINDOWS\Soap Bubbles.bmp
[2010/03/24 09:22:55 | 000,017,632 | ---- | M] () -- C:\WINDOWS\Coffee Bean.bmp
[2010/03/24 08:41:47 | 000,102,400 | ---- | M] () -- C:\WINDOWS\EarthView.scr
[2010/03/23 04:38:02 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010/03/22 02:48:08 | 000,000,026 | ---- | M] () -- C:\WINDOWS\Zone.Identifier
[2010/03/16 12:02:16 | 000,000,114 | ---- | M] () -- C:\WINDOWS\System32\prsgrc.tgz
[2010/03/16 12:02:15 | 000,000,086 | ---- | M] () -- C:\WINDOWS\System32\ssprs.tgz
[2010/03/16 12:02:14 | 000,000,218 | ---- | M] () -- C:\WINDOWS\System32\jp187dv.tgz
[8 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/04/10 21:11:03 | 000,297,989 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\_INST32I.EX_
[2010/04/10 21:11:03 | 000,181,565 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\_sys1.cab
[2010/04/10 21:11:03 | 000,122,880 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\PATCH98.EXE
[2010/04/10 21:11:03 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\Si3112r\Silr.exe
[2010/04/10 21:11:03 | 000,057,588 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\setup.ins
[2010/04/10 21:11:03 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\Si3112r\HUADRV.DLL
[2010/04/10 21:11:03 | 000,034,816 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\Si3112r\Software Release Notes.doc
[2010/04/10 21:11:03 | 000,025,536 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\Si3112r\Si3112r.inf
[2010/04/10 21:11:03 | 000,020,560 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\Si3112r\SIISUPP.VXD
[2010/04/10 21:11:03 | 000,004,679 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\lang.dat
[2010/04/10 21:11:03 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\Si3112r\TxtSetup.oem
[2010/04/10 21:11:03 | 000,004,281 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\_user1.hdr
[2010/04/10 21:11:03 | 000,003,905 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\_sys1.hdr
[2010/04/10 21:11:03 | 000,003,677 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\data1.hdr
[2010/04/10 21:11:03 | 000,000,943 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\_user1.cab
[2010/04/10 21:11:03 | 000,000,590 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\layout.bin
[2010/04/10 21:11:03 | 000,000,469 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\data1.cab
[2010/04/10 21:11:03 | 000,000,450 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\os.dat
[2010/04/10 21:11:03 | 000,000,325 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\SETUP1.ISS
[2010/04/10 21:11:03 | 000,000,325 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\setup.iss
[2010/04/10 21:11:03 | 000,000,202 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\Si3112r\KEY.INI
[2010/04/10 21:11:03 | 000,000,113 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\DATA.TAG
[2010/04/10 21:11:03 | 000,000,099 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\SETUP.INI
[2010/04/10 21:11:03 | 000,000,049 | ---- | C] () -- C:\WINDOWS\System32\drivers\Si3112r\setup.lid
[2010/04/02 11:07:43 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2010/04/02 11:07:40 | 000,260,272 | ---- | C] () -- C:\cmldr
[2010/04/02 11:03:29 | 000,261,632 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010/04/02 11:03:29 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010/04/02 11:03:29 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010/04/02 11:03:29 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010/04/02 11:03:29 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2009/12/30 11:43:31 | 000,027,648 | ---- | C] () -- C:\WINDOWS\System32\AVSredirect.dll
[2009/10/02 10:13:49 | 000,000,043 | ---- | C] () -- C:\WINDOWS\gswin32.ini
[2009/09/19 07:32:52 | 000,000,062 | ---- | C] () -- C:\WINDOWS\System32\Days5.ini
[2009/04/28 10:24:00 | 000,000,076 | ---- | C] () -- C:\WINDOWS\System32\FrameRg2.ini
[2009/04/28 10:23:59 | 000,087,552 | ---- | C] () -- C:\WINDOWS\System32\ereglb32.dll
[2009/04/28 10:23:59 | 000,023,040 | ---- | C] () -- C:\WINDOWS\System32\ergint32.dll
[2009/04/15 17:06:16 | 000,233,472 | ---- | C] () -- C:\WINDOWS\System32\MSL_All-DLL80_x86.dll
[2009/04/15 17:06:15 | 000,134,656 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll
[2009/04/15 17:05:55 | 000,185,856 | ---- | C] () -- C:\WINDOWS\System32\Bmp2Jpeg.dll
[2009/03/11 08:32:28 | 006,772,736 | ---- | C] () -- C:\WINDOWS\System32\tliadjust30.dll
[2009/03/03 06:18:04 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll
[2008/10/24 07:37:43 | 000,010,593 | ---- | C] () -- C:\WINDOWS\CSTBox.INI
[2008/10/24 06:34:37 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\IPPCPUID.DLL
[2008/10/24 06:33:36 | 000,011,776 | ---- | C] () -- C:\WINDOWS\System32\pmsbfn32.dll
[2008/09/22 02:15:56 | 000,307,200 | ---- | C] () -- C:\WINDOWS\System32\libmng.dll
[2008/09/11 07:26:56 | 000,000,184 | ---- | C] () -- C:\WINDOWS\bti.ini
[2008/09/11 07:26:55 | 000,043,760 | ---- | C] () -- C:\WINDOWS\System32\nwlocale.dll
[2008/08/08 08:50:50 | 000,014,280 | ---- | C] () -- C:\Program Files\settings.dat
[2008/07/17 11:40:39 | 000,000,089 | ---- | C] () -- C:\WINDOWS\ULead32.ini
[2008/07/17 10:51:33 | 000,000,016 | ---- | C] () -- C:\WINDOWS\Wininit.ini
[2008/07/17 10:51:21 | 000,035,328 | ---- | C] () -- C:\WINDOWS\INETWH32.DLL
[2008/07/17 10:51:21 | 000,009,136 | ---- | C] () -- C:\WINDOWS\INETWH16.DLL
[2008/05/17 05:20:56 | 000,000,359 | ---- | C] () -- C:\WINDOWS\encarta.ini
[2008/05/17 05:20:55 | 000,210,944 | ---- | C] () -- C:\WINDOWS\System32\MSVCRT10.DLL
[2008/04/24 04:04:09 | 000,000,383 | ---- | C] () -- C:\WINDOWS\System32\haspdos.sys
[2008/04/09 12:02:43 | 000,000,774 | ---- | C] () -- C:\WINDOWS\Calendar.INI
[2008/04/03 03:39:47 | 000,344,064 | ---- | C] () -- C:\WINDOWS\System32\LFFPX7.DLL
[2008/04/03 03:39:47 | 000,122,880 | ---- | C] () -- C:\WINDOWS\System32\LFKODAK.DLL
[2008/04/03 03:39:47 | 000,088,576 | ---- | C] () -- C:\WINDOWS\System32\LFFPX90N.DLL
[2008/04/03 03:27:25 | 000,000,030 | ---- | C] () -- C:\WINDOWS\Iedit_.INI
[2008/03/16 14:25:49 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2008/03/13 10:24:24 | 000,001,793 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2008/03/13 07:10:39 | 000,000,037 | ---- | C] () -- C:\WINDOWS\progman.ini
[2008/03/11 08:24:22 | 000,126,444 | ---- | C] () -- C:\WINDOWS\System32\drivers\NVCAP.SYS
[2008/03/09 15:05:25 | 000,034,308 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll
[2008/03/09 11:38:52 | 000,000,080 | ---- | C] () -- C:\WINDOWS\ViewNX.INI
[2008/03/08 11:40:04 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2008/03/08 07:04:31 | 000,061,440 | ---- | C] () -- C:\WINDOWS\ContextMenuExt.dll
[2008/03/08 04:07:51 | 000,000,085 | ---- | C] () -- C:\WINDOWS\lgmaster.ini
[2008/03/08 03:26:08 | 000,163,840 | ---- | C] () -- C:\WINDOWS\System32\SecSNMP.dll
[2008/03/08 03:25:53 | 000,000,124 | ---- | C] () -- C:\WINDOWS\Readiris.ini
[2008/03/08 03:25:51 | 000,023,040 | ---- | C] () -- C:\WINDOWS\System32\irisco32.dll
[2008/03/08 03:22:58 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\WIAIPH.dll
[2008/03/08 03:22:58 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\WIAEH.dll
[2008/03/08 03:22:58 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\Sswiadrv.dll
[2008/03/08 03:22:58 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\WIASTIIO.dll
[2008/03/08 03:17:44 | 000,000,414 | ---- | C] () -- C:\WINDOWS\hpbvspst.ini
[2008/03/07 05:53:31 | 000,000,204 | ---- | C] () -- C:\WINDOWS\RtlRack.ini
[2008/02/20 02:12:09 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\gbttk.dll
[2008/02/20 02:00:08 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini
[2008/02/20 02:00:00 | 000,143,360 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2007/06/28 18:43:00 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2007/06/28 18:43:00 | 001,486,848 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2007/06/28 18:43:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2007/06/28 18:43:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2007/06/28 18:43:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2007/04/09 07:32:19 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\DLLNT.DLL
[2007/04/06 08:25:19 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\check_internet.dll
[2004/08/03 18:56:44 | 000,001,024 | ---- | C] () -- C:\WINDOWS\System32\rs0ang1.dll
[2004/08/03 18:56:44 | 000,001,024 | ---- | C] () -- C:\WINDOWS\System32\grcauth2.dll
[2004/08/03 18:56:44 | 000,001,024 | ---- | C] () -- C:\WINDOWS\System32\grcauth1.dll
[2004/08/03 18:56:44 | 000,001,024 | ---- | C] () -- C:\WINDOWS\System32\clauth2.dll
[2004/08/03 18:56:44 | 000,001,024 | ---- | C] () -- C:\WINDOWS\System32\clauth1.dll
[2004/08/03 18:56:44 | 000,000,072 | ---- | C] () -- C:\WINDOWS\System32\ssprs.dll
[2003/10/29 14:00:00 | 000,205,312 | ---- | C] () -- C:\WINDOWS\System32\patchw32.dll
[2003/01/29 08:42:38 | 000,119,392 | ---- | C] () -- C:\WINDOWS\System32\uDRMCtrl.dll
[2003/01/07 09:05:08 | 000,002,695 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[2002/03/16 20:00:00 | 000,007,420 | ---- | C] () -- C:\WINDOWS\UA000059.DLL

========== LOP Check ==========

[2010/03/25 01:00:26 | 000,000,562 | ---- | M] () -- C:\WINDOWS\Tasks\Auslogics Boost Speed Disk Defrag Console Defragmentation.job
[2010/04/06 02:00:00 | 000,000,330 | -H-- | M] () -- C:\WINDOWS\Tasks\MP Scheduled Scan.job
[2010/04/06 01:20:10 | 000,000,420 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{C9E5606D-A329-412A-9876-7D31BE043F0A}.job

========== Purity Check ==========


< End of report >


#8 BMW3

BMW3
  • Topic Starter

  • Members
  • 75 posts
  • OFFLINE
  •  
  • Local time:05:14 AM

Posted 12 April 2010 - 07:43 AM

Elise,

Just one other thing: Is it in order that I type the letters into the Scan Area?

If not, can you please guide me in how to copy paste from your instructions - I know it sounds dumb, but I am working on my daughters Vista laptop, and just feels I have no clue! - never worked on Vista or a laptop without a mouse before, & my daughter is at varsity.

#9 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,204 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:06:14 AM

Posted 12 April 2010 - 08:12 AM

Hello again,

Best is to copy and paste, that way no typo's are made smile.gif

On your clean computer:
Please open a Notepad file. (Go to Start>Run and type Notepad into the run dialogue and press Enter,
Copy and paste the following code into the notepad file. Do not include the word "Code".
CODE
:reg
[-hklm\system\controlset010\services\PC1C1394]

Save the Notepad file to your flash drive.
Move the flash drive from the clean computer to the infected one.

In the REATOGO-X-PE environment:
Access the Flash drive via the My Computer icon and open the notepad file. Now run OTLPE.
Copy and paste the contents of the notepad file into the "custom scan/fix" section
Now click "run fix" and let me know what happens.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#10 BMW3

BMW3
  • Topic Starter

  • Members
  • 75 posts
  • OFFLINE
  •  
  • Local time:05:14 AM

Posted 12 April 2010 - 08:33 AM

Hi Elise,

Now that exercise was a confidence builder!!

This is the log:

========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\system\controlset010\services\PC1C1394\ not found.

OTLPE by OldTimer - Version 3.1.37.1 log created on 04122010_162610


#11 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,204 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:06:14 AM

Posted 12 April 2010 - 08:45 AM

Hello, before continuing, please let me know if you also started the following topic at TechSupport forum.

Its not a problem if you did, but if so, I'll request tetonbob closes your thread there to avoid confusion.

http://www.techsupportforum.com/security-c...alureon-fr.html

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#12 BMW3

BMW3
  • Topic Starter

  • Members
  • 75 posts
  • OFFLINE
  •  
  • Local time:05:14 AM

Posted 12 April 2010 - 08:52 AM

Now off my own bat, I did a Run Scan, but I still get the Invalid Variant..... thing

#13 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,204 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:06:14 AM

Posted 12 April 2010 - 08:53 AM

Please answer my previous post first smile.gif


EDIT: sorry, this was my fault:

Run the following fix (exactly how you run the previous fix)
CODE
:reg
[-hklm\system\controlset010\services\P1C1394]

Edited by elise025, 12 April 2010 - 08:55 AM.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#14 BMW3

BMW3
  • Topic Starter

  • Members
  • 75 posts
  • OFFLINE
  •  
  • Local time:05:14 AM

Posted 12 April 2010 - 09:09 AM

tetonbob assisted me very kindly for almost a week in trying to resolve the Virus issue.

It then got to the stage where he said he felt we were not making any progress, and that the next step would be to do a Repair installation, but also said that a Repair Installation was not really his speciality, and that I should consult the folk at Windows XP pro.

On his advice, I then started a "link"? on the TSF Windows XP forum, but was immediately told by an administrator that I should stick with tetonbob until the issue is resolved, and he closed my thread.

After speaking to tetonbob again, we agreed that Windows XP forum and a Repair Install was the way to go, and that I would report back to him once Re-install was complete.

So I opened a new thread once again, stating boldly: TETONBOB HAS ADVISED THAT THIS IS THE WAY TO, but alas, no response at all.

As stated before, I am totally dependent on my PC, and cannot afford to take it into a repair shop for days, and my only alternative was to post with you.

I hope that clears that matter, and I have never considered NOT going back to tetonbob once my machine was again running. After all, he did an awsome job in trying to help!

#15 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,204 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:06:14 AM

Posted 12 April 2010 - 09:43 AM

No worries here, tetonbob explained the situation to me smile.gif

Please see the edit in my previous post for more instructions.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users